Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9ED156AD4B711EF817BE157762E951A.roa
File: C9ED156AD4B711EF817BE157762E951A.roa (raw, json)
Hash identifier: ygsTu6U31L/SHnmMqoreGGxFXr7eYHudK5AEsQwkGBk=
Subject key identifier: 33:D8:B8:E8:7A:57:76:13:FD:70:7F:B0:A3:E2:C9:56:8F:72:B8:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9ED156AD4B711EF817BE157762E951A.roa
Signing time: Fri 17 Jan 2025 09:45:30 +0000
ROA not before: Fri 17 Jan 2025 09:45:27 +0000
ROA not after: Mon 17 Feb 2025 09:45:27 +0000
asID: 139805
IP address blocks: 154.201.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80987 (0x13c5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 09:45:27 2025 GMT
Not After : Feb 17 09:45:27 2025 GMT
Subject: CN=678a26ba-eaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:8d:7d:06:64:ee:2a:3c:54:78:20:84:7c:
c7:e1:90:e1:3b:9c:13:81:46:c5:69:e7:f7:1d:31:
ed:b8:07:2b:a6:8d:b5:cd:7f:1a:cb:e2:e1:f8:d2:
fc:dd:4f:1c:e5:45:75:a7:0f:d0:00:27:67:67:9f:
68:0a:4f:2a:c4:ec:3a:fa:a1:38:14:1a:05:64:c7:
c1:e5:d3:aa:40:43:b5:c5:e3:54:14:bd:18:be:57:
35:87:ca:5f:71:68:36:dd:b1:df:a4:66:d9:f6:f4:
43:14:9f:56:78:45:3d:5e:80:1d:95:40:38:3b:5a:
53:70:6f:56:2e:c6:70:ce:d0:a8:ae:83:61:60:78:
f7:2e:1c:92:92:ed:a1:5e:8b:b2:f0:de:83:77:13:
ea:6d:cf:b7:da:25:70:ac:85:de:d6:a1:30:a0:ed:
82:b8:98:01:e2:70:c3:2d:25:13:e8:08:45:01:80:
d6:1d:b9:48:1a:35:e3:6d:4e:72:59:84:fb:69:e3:
e0:60:fa:b5:69:e3:99:26:24:8a:84:e7:c8:35:7d:
76:44:a3:98:a7:38:0c:33:3e:5a:70:a0:50:67:8d:
9f:64:21:98:98:31:86:0d:17:b2:5e:32:e7:2d:16:
6f:20:d1:2b:b1:6e:c2:13:c4:8a:52:63:75:d0:87:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:B8:E8:7A:57:76:13:FD:70:7F:B0:A3:E2:C9:56:8F:72:B8:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9ED156AD4B711EF817BE157762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.4.0/24
Signature Algorithm: sha256WithRSAEncryption
39:48:52:ba:44:39:ee:30:8d:a8:9f:91:a5:65:c6:2d:98:27:
12:17:11:ec:10:eb:53:1d:93:41:84:fe:74:90:49:0d:5d:16:
82:53:c6:6f:68:03:5f:03:40:c4:bb:ea:2c:db:0a:1e:df:9c:
00:77:82:16:14:f9:30:29:48:21:49:33:92:70:76:25:71:91:
ab:f5:49:8f:00:35:61:3f:3a:d9:7f:84:b1:d2:09:39:64:8e:
94:64:c4:ca:ac:28:e3:af:16:5c:81:74:59:ca:f6:e7:7d:92:
c8:79:f2:a4:80:fa:a6:34:29:15:82:db:9f:27:ed:76:76:b3:
0a:0c:e9:a9:fc:3c:36:61:b2:44:c3:b7:eb:6c:b8:52:07:1f:
e2:a0:56:6d:aa:24:c2:6a:8c:fa:3d:1c:bf:50:02:92:50:80:
0a:36:3f:ed:a9:f3:5f:ec:08:22:6b:19:e3:b1:ca:d8:7a:8a:
fb:69:ea:17:2d:65:97:36:16:3e:da:b4:98:3f:ab:dd:01:96:
5d:d0:ab:19:4c:12:03:9d:51:b1:b6:75:ef:4b:54:bc:e1:c1:
72:e8:09:b0:5c:2c:57:86:cf:25:76:cf:e7:13:4a:79:f8:6a:
22:6a:c5:d3:d8:58:cf:14:58:88:28:1d:21:32:3b:e7:fe:a1:
95:98:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:25 2025 by rpki-client