Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C61E5160CC1511EF95397D58762E951A.roa
File: C61E5160CC1511EF95397D58762E951A.roa (raw, json)
Hash identifier: nkc7PSkmaJ20jaqmUA7c47W835wllam4+nPZ2wQOhNY=
Subject key identifier: 28:A6:B4:78:23:59:5A:E9:43:1C:3B:8F:8E:EB:91:ED:9B:7D:10:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C61E5160CC1511EF95397D58762E951A.roa
Signing time: Mon 06 Jan 2025 10:05:36 +0000
ROA not before: Mon 06 Jan 2025 10:05:32 +0000
ROA not after: Thu 06 Feb 2025 10:05:32 +0000
asID: 200373
IP address blocks: 154.213.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79302 (0x135c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 10:05:32 2025 GMT
Not After : Feb 6 10:05:32 2025 GMT
Subject: CN=677baaf0-8a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:9c:92:65:22:8c:cb:f9:fa:25:6f:a9:8b:
66:cd:bd:51:a8:e4:b6:34:df:84:7f:71:fd:d7:c7:
71:2d:fa:3d:91:bf:e4:60:2b:8a:1f:9b:2d:fd:93:
9d:30:17:cd:a9:a8:1f:35:86:a1:3a:97:77:62:e9:
d7:39:2c:9f:83:a6:b2:a4:a3:05:26:c4:a7:a6:0f:
b3:f9:3f:c8:bf:85:a5:3b:65:7c:33:97:ef:2c:b2:
dc:96:26:33:b7:1d:13:fa:58:52:73:fc:a4:4d:b5:
44:b5:18:a1:49:54:09:9b:77:4e:4e:d8:bf:ad:25:
da:ba:9a:40:67:7f:c6:14:73:be:8b:cc:4f:ea:e7:
52:1b:f2:8c:1d:62:71:80:e0:95:ce:1a:7f:33:c3:
34:00:da:e4:5f:f5:8f:e3:1b:58:51:2d:14:1c:9f:
90:d5:6f:cb:70:36:be:64:20:88:aa:e6:2c:19:38:
1d:4c:16:a8:0d:fb:e8:cf:bc:10:ce:c0:c7:06:31:
ae:f9:56:e2:f0:7c:49:81:ae:17:cb:9e:8a:6e:2f:
83:4d:fd:5d:1f:6a:b0:63:cc:57:c5:7f:f0:e8:16:
c0:24:f9:51:e8:b4:41:71:68:62:f2:a0:5b:5e:8f:
57:25:7c:3b:7a:97:ef:82:c3:23:69:3d:aa:8c:9f:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:B4:78:23:59:5A:E9:43:1C:3B:8F:8E:EB:91:ED:9B:7D:10:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C61E5160CC1511EF95397D58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.194.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:8d:93:af:26:fa:63:cb:08:a4:ba:8c:53:48:2c:5f:37:0a:
7c:03:3d:8a:35:58:68:4f:40:ad:e6:c6:73:d2:39:57:70:d8:
01:b3:7b:72:93:a7:9e:bd:b7:e0:0a:b9:18:45:7b:65:fb:fc:
96:1b:0e:9a:44:94:cc:cd:29:2c:e7:f6:6a:29:90:7c:1c:13:
f6:88:48:38:b2:c7:4d:6a:c0:b3:df:ba:99:6c:38:4f:2f:9a:
3f:cd:b8:aa:33:78:b2:c8:83:66:cb:75:39:b8:d7:ca:c3:ad:
fe:b6:ca:8e:a5:28:97:08:5c:e3:b8:e9:fc:66:d5:01:f9:d4:
28:d2:37:cb:e1:cc:82:24:05:c1:42:1b:94:e4:cd:65:71:f6:
bf:65:46:77:99:96:d9:78:8a:74:ff:9f:99:02:e6:c3:ca:67:
16:56:10:a0:b5:0a:77:68:97:e7:9a:79:5e:1b:3a:bd:dd:6f:
9e:ce:47:82:0b:42:e8:c9:f0:e7:bb:00:8b:4f:f8:1c:b1:e9:
39:20:64:78:2b:80:ed:9c:4b:48:ec:ab:5a:eb:a4:35:c7:c1:
1a:f6:54:7f:06:66:28:a2:43:d0:00:d8:aa:cf:01:ea:8e:fb:
97:0f:ce:14:60:bf:77:02:23:12:96:72:ba:d4:5b:ac:70:5b:
7d:f6:2c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:20 2025 by rpki-client