Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB3CAE7AD96311EF87837899762E951A.roa
File: CB3CAE7AD96311EF87837899762E951A.roa (raw, json)
Hash identifier: z9ReTMX5go0aWNOR4b2eHbqlD9c7zEOGs2c+JVYAKok=
Subject key identifier: 5B:25:81:A1:5D:A5:0A:A5:62:8F:51:80:36:5F:9F:88:E3:DD:57:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014085
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB3CAE7AD96311EF87837899762E951A.roa
Signing time: Thu 23 Jan 2025 08:26:51 +0000
ROA not before: Thu 23 Jan 2025 08:26:47 +0000
ROA not after: Sat 08 Feb 2025 08:26:47 +0000
asID: 139490
IP address blocks: 154.209.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82053 (0x14085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:26:47 2025 GMT
Not After : Feb 8 08:26:47 2025 GMT
Subject: CN=6791fd4b-be3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:ab:cf:3f:5c:74:e7:fb:92:a1:8b:d6:ed:
3d:da:ab:6a:4f:85:0b:9b:0d:b4:50:3d:8d:01:4a:
20:0c:5d:97:f0:69:05:6e:9f:28:df:ff:c8:ce:ce:
a2:12:f2:01:e9:ce:c9:b9:25:cf:47:a6:7d:d9:03:
48:dd:31:32:92:0e:13:c3:a9:cf:d1:e9:45:1a:83:
66:27:66:39:e6:d6:9e:da:61:95:37:67:9a:5e:35:
b3:c7:3a:a5:ed:25:ca:f0:34:99:d6:1d:ac:78:3a:
46:76:11:9c:96:76:76:66:44:24:fe:2b:8c:78:ea:
b8:4e:b1:5c:56:fe:50:40:50:8b:36:ff:17:c3:fd:
60:40:80:14:1e:00:e7:e5:2b:61:f8:43:eb:12:36:
c7:33:f0:ea:f2:66:cc:00:6b:3e:1a:33:9f:fd:03:
23:2c:b0:77:57:32:4d:3e:88:7f:7c:c2:2a:70:c8:
e8:2a:53:92:1c:95:17:44:a0:cf:2b:86:3a:40:04:
5f:2a:34:99:a8:5c:6c:2e:cf:d0:23:98:b6:ff:f7:
18:df:3f:61:2c:77:a9:39:51:3c:6a:bd:07:33:50:
4a:9b:26:87:62:6d:f0:ec:6f:ae:0e:cb:73:6a:0a:
5f:24:81:87:fb:27:8b:2e:b9:cb:12:83:96:a7:14:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:81:A1:5D:A5:0A:A5:62:8F:51:80:36:5F:9F:88:E3:DD:57:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB3CAE7AD96311EF87837899762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:86:f4:25:53:db:21:c4:53:09:5e:42:d2:d2:93:3b:97:7b:
52:b5:bd:0c:4c:6b:fc:e6:f3:66:65:5b:e2:91:9f:93:b6:43:
58:b6:35:e2:51:3d:04:56:2f:25:fa:ea:49:03:a7:44:19:1f:
3e:a7:38:32:2b:64:32:8b:82:37:2d:cd:fc:70:ea:77:42:e1:
cd:63:e3:a4:48:0d:f6:c1:6a:93:8e:0a:b0:a6:9d:0e:f6:6a:
9b:65:48:f3:56:d5:8f:5b:ee:be:01:13:77:d4:61:e5:f7:d0:
60:e1:b6:fe:42:4b:f4:70:24:1b:b2:ac:bb:27:99:97:a2:e4:
f6:ad:17:4d:b9:e9:18:18:3e:8c:4f:0b:6d:06:fb:1c:60:eb:
4d:2f:7d:42:27:c9:63:0d:ec:66:05:52:0b:d6:87:af:b8:be:
95:54:12:84:71:a8:c3:ed:9c:08:e6:19:d2:82:b4:50:71:5e:
5e:41:22:f0:f8:5f:b4:53:e0:3e:7f:8d:ff:01:1a:69:9f:fa:
bc:3c:f2:99:ca:6b:cf:7e:28:43:4b:41:73:8c:67:fd:ee:0d:
4e:54:75:a0:6d:d4:8f:8f:73:7f:f2:4c:32:c9:9e:d4:2d:e0:
a5:77:60:72:bf:4f:cf:bc:86:d4:82:7a:99:e6:61:6b:27:ee:
17:99:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:02 2025 by rpki-client