Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6813380DFDD11EF9594A24B762E951A.roa
File: C6813380DFDD11EF9594A24B762E951A.roa (raw, json)
Hash identifier: tKqy1UHc6bS3kXeajsD6Rk8/4IIXhNb6UhajIsQYpUE=
Subject key identifier: BA:D4:6B:28:4E:16:E5:EA:F5:E2:7E:01:19:9B:C7:F3:73:7A:34:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6813380DFDD11EF9594A24B762E951A.roa
Signing time: Fri 31 Jan 2025 14:15:08 +0000
ROA not before: Fri 31 Jan 2025 14:15:04 +0000
ROA not after: Mon 10 Feb 2025 14:15:04 +0000
asID: 135377
IP address blocks: 154.202.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85425 (0x14db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:15:04 2025 GMT
Not After : Feb 10 14:15:04 2025 GMT
Subject: CN=679cdaec-aaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:e2:0d:3c:86:3d:78:bc:b7:94:71:e2:73:
a1:6f:5e:1c:86:ae:71:01:2f:63:aa:31:9d:5f:1f:
0c:53:79:dc:2e:bb:3e:fd:6d:88:9d:1d:46:24:e4:
af:63:7f:3e:74:17:12:2e:3f:93:91:39:63:03:6e:
eb:09:74:2b:7d:c1:2e:c9:84:09:7d:b6:05:dc:ad:
83:90:b1:74:6b:f9:1a:5e:3c:24:be:56:d7:44:1a:
31:65:dd:b3:80:71:8a:af:95:f2:f6:b6:4e:aa:ff:
ff:af:9c:65:a8:65:32:75:8a:ba:82:a3:b3:c3:62:
04:d8:fa:ae:0e:4c:c4:0c:be:ec:dc:e7:f4:e2:e3:
b9:a6:1a:aa:d0:5b:00:c7:90:21:ef:0e:04:45:af:
79:83:23:68:48:ee:8c:2a:4d:f7:73:e5:3d:80:be:
11:ec:5e:11:7f:d1:e0:eb:ec:c9:15:66:be:77:68:
37:90:f0:45:c3:45:c2:55:d9:5c:e6:73:90:73:7a:
3e:65:49:fd:10:f9:e3:df:72:b2:9d:56:fa:b5:43:
a0:39:80:92:cc:2a:e8:83:fe:a7:c6:67:1f:2d:87:
7e:0e:f7:74:9c:b1:52:48:c9:bd:9d:27:dc:23:ce:
02:3d:b1:d1:df:a4:fa:0d:cb:9e:72:67:0e:f0:5f:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:6B:28:4E:16:E5:EA:F5:E2:7E:01:19:9B:C7:F3:73:7A:34:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6813380DFDD11EF9594A24B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.66.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:8e:e4:3d:20:1a:a8:e6:3a:52:84:23:f9:2e:4d:d1:0b:6d:
11:a0:67:46:3c:d7:0a:16:d6:13:cd:25:32:1d:ec:2d:5c:19:
8e:8a:09:e9:d3:27:fb:9c:96:05:31:ea:8c:82:d8:ce:0d:a8:
52:6e:66:da:f2:10:5b:97:ec:93:a6:4c:d0:4b:c9:b6:ad:e5:
14:42:e8:b4:41:bc:7c:82:bd:c8:b7:28:dc:3f:c3:32:b1:62:
75:12:06:15:61:56:84:b0:89:81:5a:d6:7a:e2:47:c9:37:2a:
8a:65:99:be:80:88:51:be:0b:8e:13:e4:67:00:a9:8f:14:c3:
f0:0b:4b:bf:67:63:56:16:91:06:76:97:b0:10:2e:9f:60:55:
9f:9c:fa:3a:ff:a7:da:05:e0:8e:55:02:cd:b3:b0:53:9f:15:
7e:3e:36:6e:33:51:72:59:2b:d6:bf:e8:e1:2a:ff:65:c8:45:
83:07:08:91:81:43:a0:1e:2e:7c:b2:03:88:c4:60:27:0c:0c:
89:7f:b7:12:d7:13:bd:54:f4:9a:75:18:06:c5:71:42:87:38:
98:f5:3f:23:7b:da:51:90:07:36:13:23:10:4f:3b:e1:33:32:
7c:3c:18:18:04:a0:8f:56:c6:dc:40:ed:8f:9c:f7:5b:83:c5:
3a:f9:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:33 2025 by rpki-client