Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C4BEACCF2511EF8F502A67762E951A.roa
File: C6C4BEACCF2511EF8F502A67762E951A.roa (raw, json)
Hash identifier: ghFTTPXMna7uPTb89KxbQTfDEiPmTvApGkYikusSzTY=
Subject key identifier: 6E:5E:AC:75:64:40:FB:EF:B6:72:58:62:FF:91:93:4D:57:D8:58:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C4BEACCF2511EF8F502A67762E951A.roa
Signing time: Fri 10 Jan 2025 07:37:43 +0000
ROA not before: Fri 10 Jan 2025 07:37:39 +0000
ROA not after: Fri 14 Feb 2025 07:37:39 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80297 (0x139a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 07:37:39 2025 GMT
Not After : Feb 14 07:37:39 2025 GMT
Subject: CN=6780ce47-7cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:16:ce:c4:96:06:9d:7d:ed:17:c0:c7:98:
9e:91:5c:71:bf:7b:32:a1:1e:35:d9:7d:8b:11:90:
cd:12:b6:05:cd:6c:0f:10:dd:15:df:a1:e0:d6:4e:
6d:f8:cd:02:7b:41:49:31:92:8b:1d:84:04:f1:83:
a7:ea:35:6f:b3:bf:ef:c1:0a:5b:99:bb:7f:7d:09:
19:7f:35:34:ea:bc:91:b4:b7:02:4e:fe:d7:95:e5:
b5:5e:14:67:bf:c6:08:5e:14:44:e4:d7:de:e7:7b:
f6:77:b9:e8:d0:81:4a:9f:9e:db:7d:cd:6c:e7:e0:
a8:e5:39:3d:13:c7:a7:59:62:d6:d5:1c:d4:13:40:
31:7c:39:a2:5b:69:16:b0:51:27:fb:b6:30:92:1a:
5f:4c:6c:b6:eb:04:00:26:2c:df:5b:31:70:e5:72:
67:87:37:44:b0:b5:ee:7b:c5:43:ad:15:18:1e:14:
26:87:6c:88:a7:2d:04:2e:21:a2:2a:f9:9b:dd:27:
a1:4e:4d:ad:de:d2:8e:6d:6a:c9:d0:26:33:77:cd:
11:72:af:8e:e1:2f:49:cc:a9:c5:12:47:0e:56:06:
f5:f8:7b:c4:34:fd:67:e3:f4:b1:f4:05:d5:1a:8f:
c8:24:45:86:77:04:09:d8:53:db:2b:62:d6:99:24:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:AC:75:64:40:FB:EF:B6:72:58:62:FF:91:93:4D:57:D8:58:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6C4BEACCF2511EF8F502A67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b3:40:de:eb:58:99:77:52:84:db:a5:f7:f8:72:91:e7:71:
cc:94:1c:a8:c2:c9:04:36:64:4e:ae:15:b0:b3:70:51:57:ef:
12:b6:d0:e2:e2:60:d2:60:38:08:e5:36:c3:b0:47:4e:25:0d:
01:09:b2:49:9b:06:4e:7d:93:df:00:a9:d4:27:c9:d1:17:a4:
df:ac:a4:3c:16:57:33:54:25:36:4b:ba:d3:e2:d5:8d:55:ca:
1e:c9:05:4c:0d:13:fa:1e:41:76:94:3f:0c:d6:bf:c5:c8:d2:
c4:b7:43:40:d9:24:ed:5c:82:74:72:04:32:82:86:44:58:3b:
81:00:e0:c2:e4:7d:c6:72:3e:8b:66:ca:e7:db:03:7c:76:90:
5a:5c:89:c4:67:3e:25:ce:8b:16:7d:c1:2f:7b:26:0d:97:11:
e5:94:50:b9:f1:98:21:3d:b5:07:84:5f:75:2b:80:57:90:c9:
14:4c:b0:71:fe:3f:37:ad:8b:fd:d6:ba:56:00:dc:86:d4:e2:
71:04:d5:16:dd:2f:ef:5c:02:90:db:a9:42:81:02:3d:b3:85:
13:0b:b4:6a:f9:0b:ef:bd:f1:64:8f:58:2e:a9:49:5f:09:97:
ac:5e:df:f9:be:4b:7d:10:cc:16:d8:ac:c2:bd:15:56:83:52:
75:54:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:59:16 2025 by rpki-client