Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C773B736D8B211EFA9A12872762E951A.roa
File: C773B736D8B211EFA9A12872762E951A.roa (raw, json)
Hash identifier: sPSHotFOn/ykJdhMkgA/2u4o1Y6Yam/xGwqimfJnEcE=
Subject key identifier: 91:64:C6:DB:96:3E:22:D2:D2:74:CD:D5:73:C1:EB:AA:43:A7:C0:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C773B736D8B211EFA9A12872762E951A.roa
Signing time: Wed 22 Jan 2025 11:19:44 +0000
ROA not before: Wed 22 Jan 2025 11:19:32 +0000
ROA not after: Sat 08 Feb 2025 11:19:32 +0000
asID: 150008
IP address blocks: 154.206.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81656 (0x13ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:19:32 2025 GMT
Not After : Feb 8 11:19:32 2025 GMT
Subject: CN=6790d44f-04c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:74:7e:92:62:35:ae:a8:e2:dd:7e:f1:c6:
94:c5:f5:72:e4:71:19:5b:54:1e:80:06:71:5c:23:
41:91:d6:85:69:30:36:7f:68:50:8c:19:5a:98:ca:
b7:63:39:5e:da:35:aa:85:cf:f2:79:0d:b4:f4:2c:
08:01:79:12:a7:79:e0:67:bf:7c:a2:20:c3:77:12:
bc:c0:27:83:f0:42:6b:28:4d:28:95:1a:0d:76:cf:
6a:3a:7a:81:59:9b:57:66:69:9b:cf:44:4c:4e:6a:
52:cf:63:9e:f5:7a:ab:5a:ad:27:c0:d9:46:b2:24:
e6:f1:32:44:84:9e:76:39:96:7e:6f:7a:13:b6:d6:
33:ed:01:91:ed:92:e8:4e:ef:ea:6c:be:d3:63:86:
8e:cf:3d:82:e0:a3:98:49:d9:ed:d4:b1:61:df:51:
5a:f8:1a:be:c8:36:ba:a6:d6:0c:e9:b5:53:b7:a3:
a3:dc:54:f2:d0:95:68:56:99:2d:51:67:00:fa:31:
bc:8b:bc:ab:66:97:59:fc:18:bc:c5:d1:8d:20:c3:
69:d2:80:f7:b1:ff:2c:58:72:f2:b9:f3:33:b7:68:
bd:7e:a5:49:b9:d2:94:c1:02:17:3e:60:7e:e7:9b:
73:d5:46:33:0c:c7:bc:30:a1:a7:b6:d7:96:80:2c:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:64:C6:DB:96:3E:22:D2:D2:74:CD:D5:73:C1:EB:AA:43:A7:C0:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C773B736D8B211EFA9A12872762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a9:c8:19:07:c6:6d:18:1b:bc:83:7c:9b:89:b8:0d:b6:7d:
47:1f:6f:86:6f:bd:dc:d1:f5:67:1d:8a:0a:8c:b8:1f:cf:6c:
d8:af:b0:eb:d2:b7:ea:44:22:48:38:7d:1a:bc:c5:6c:cf:4f:
3b:67:72:5b:ce:6e:38:e6:65:1d:55:ef:a3:64:99:79:cc:a0:
f1:ab:d9:34:85:72:03:22:fb:f1:1e:99:d6:42:eb:8d:e1:a8:
8b:cd:66:e4:3c:a8:c8:9d:18:45:6e:e6:8a:a4:64:83:ce:d5:
84:da:8d:b4:98:6f:de:2d:c6:05:de:2a:ca:25:8c:b3:35:f5:
51:de:d7:fe:4b:5a:cd:4a:12:e3:ce:c3:7d:0f:1a:fb:f9:86:
fb:41:13:4b:cb:e9:99:86:28:96:0f:ca:3a:99:59:73:85:78:
5a:92:eb:b5:d2:e8:36:18:07:57:a2:da:19:22:3b:52:38:a9:
d1:b0:c0:f5:32:23:c7:c6:71:a1:b0:44:85:56:4b:ec:76:7a:
57:1c:0f:74:42:c6:2c:7b:ad:3d:0f:91:22:85:47:d9:24:41:
42:71:98:46:30:fd:17:28:26:45:67:42:24:dd:19:3d:24:20:
c5:0a:de:c2:35:17:69:d5:5f:1f:ce:4a:6b:fe:e3:bf:2e:24:
03:61:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:45 2025 by rpki-client