Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DE8F96DD7611EF9C5D2EA0762E951A.roa
File: C9DE8F96DD7611EF9C5D2EA0762E951A.roa (raw, json)
Hash identifier: hCLeTWmB0D9vVbyglgRw3FxqtFdau1taqA9wDxBBPzc=
Subject key identifier: 69:06:6D:C7:0A:09:B3:21:31:4B:47:98:0D:C9:DD:CD:43:7B:E2:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DE8F96DD7611EF9C5D2EA0762E951A.roa
Signing time: Tue 28 Jan 2025 12:52:53 +0000
ROA not before: Tue 28 Jan 2025 12:52:50 +0000
ROA not after: Tue 25 Feb 2025 12:52:50 +0000
asID: 5065
IP address blocks: 154.206.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85278 (0x14d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:52:50 2025 GMT
Not After : Feb 25 12:52:50 2025 GMT
Subject: CN=6798d325-1841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:6a:9f:70:b4:1b:d5:29:88:2d:de:95:7b:
b7:45:e8:05:1b:2c:81:6c:8b:f3:03:98:10:36:aa:
81:ee:27:e2:59:c4:7f:c6:77:a3:80:da:ec:11:7a:
80:03:f0:1e:7e:1d:70:b2:82:2d:d3:99:07:18:04:
d9:60:4f:bb:cc:07:f4:7d:17:c8:5d:e8:b4:1a:73:
c9:11:2b:ff:b8:ec:58:aa:84:ad:ea:30:e8:82:d1:
8f:29:bb:9d:c9:85:e5:e1:c0:0c:fd:75:b3:ec:39:
15:4e:43:ca:e1:1b:e6:15:6d:79:ae:d0:49:65:3c:
1a:e5:0c:a5:66:7d:7a:a1:8b:6f:62:0e:4d:e1:fa:
66:31:6d:34:59:06:6d:ac:9c:ba:6b:1d:2f:cd:86:
af:6e:6f:73:7c:24:8b:c7:5b:12:f7:94:1c:65:8f:
fd:b4:dd:54:e1:8d:58:27:e9:3b:12:b3:00:16:f6:
0a:ad:f6:aa:7f:5e:06:44:89:55:20:b8:12:fa:1a:
e8:ce:b6:84:0f:b9:46:72:93:58:85:2e:e6:a6:48:
49:6c:69:82:f7:f4:ef:a5:64:30:0d:b0:cb:48:d5:
cb:2b:36:fb:83:5e:e8:4b:9a:49:13:00:14:a1:bf:
01:f7:8e:7d:fd:c4:52:90:44:7d:3a:07:50:98:4e:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:06:6D:C7:0A:09:B3:21:31:4B:47:98:0D:C9:DD:CD:43:7B:E2:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DE8F96DD7611EF9C5D2EA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0c:a4:fe:97:78:44:78:1a:4a:45:dd:06:eb:97:3d:95:dd:
2c:a6:a1:2f:0d:b6:64:11:03:5b:b7:c8:2a:67:9e:a1:f8:c1:
35:00:33:82:93:ef:7a:95:3e:29:f3:8c:95:42:dd:0a:c4:e9:
7d:b3:76:47:93:f3:5c:2d:b7:be:56:e6:77:3d:a8:61:79:02:
c0:c3:b3:cd:c8:05:1e:da:13:20:ae:39:32:c9:a9:30:fa:99:
29:fc:20:15:94:d3:c8:9e:02:67:67:44:ca:6e:1a:67:d1:bd:
2a:5b:0f:b9:0d:b5:53:fc:62:12:82:8b:9d:00:73:55:ab:9a:
f5:1c:bf:ef:b8:d2:11:11:58:37:be:02:28:b7:9c:1b:5a:97:
a5:92:89:e7:d8:29:f1:cd:57:ba:18:9d:c8:68:c1:6d:74:1f:
f4:8d:9a:ed:4f:4d:41:fa:c7:56:c3:57:84:b2:b6:5a:17:b4:
3c:96:af:38:91:0f:40:e6:57:ce:5e:53:aa:46:9d:53:12:df:
ed:36:18:f4:f7:61:20:b4:c1:08:9b:d3:27:f3:07:c0:db:8a:
83:cc:05:8c:2b:e9:b6:36:9b:42:92:6b:38:55:7b:d8:7b:2d:
b4:29:a9:c6:cd:51:b8:bd:ef:92:94:dd:e5:e6:0e:a2:ae:ab:
97:bd:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:25 2025 by rpki-client