Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD91A48ADB2211EF808BDB66762E951A.roa
File: CD91A48ADB2211EF808BDB66762E951A.roa (raw, json)
Hash identifier: 8WVo6d7n/EgTllZHcBw5Pg0FC7oQo29EEaE2JMnZA40=
Subject key identifier: E6:43:2E:38:F2:26:01:46:30:4E:2D:FE:DC:47:1D:C0:02:18:E6:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD91A48ADB2211EF808BDB66762E951A.roa
Signing time: Sat 25 Jan 2025 13:46:40 +0000
ROA not before: Sat 25 Jan 2025 13:46:36 +0000
ROA not after: Tue 04 Feb 2025 13:46:36 +0000
asID: 5065
IP address blocks: 154.207.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84386 (0x149a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:46:36 2025 GMT
Not After : Feb 4 13:46:36 2025 GMT
Subject: CN=6794eb40-17f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:d9:0c:8b:2c:8f:79:27:ea:6e:07:bb:73:
9a:2d:70:2f:98:24:da:8e:02:0c:51:e1:56:63:2a:
ea:c7:72:e2:16:9e:6b:5c:26:e6:61:e5:3a:8b:a6:
f2:87:73:ca:8c:57:e2:7e:44:84:7a:0f:b4:4e:ca:
5d:38:76:fd:db:30:7b:2e:ff:df:fb:f2:77:db:42:
fc:5c:99:9e:4f:47:27:a2:5a:42:f0:c9:4f:6e:a8:
e6:b7:d3:78:90:51:98:c6:66:88:5a:2d:e9:a0:01:
a0:f7:bf:3a:b8:e4:2d:20:62:95:85:c3:0b:fe:ab:
9e:28:e0:5d:81:38:8a:54:3c:10:c4:29:43:82:1b:
5c:6f:55:53:d9:6d:fe:8c:58:89:2d:e5:f7:8b:9e:
0e:5e:c4:53:f4:05:cd:6e:c6:80:f3:cd:cc:3d:07:
ca:4d:c4:75:7a:9b:ca:7d:37:fd:c6:51:63:5f:93:
0d:90:1a:5c:2c:22:8d:0d:7b:4d:71:00:3f:86:31:
25:05:41:1f:ce:a8:29:42:1b:48:39:47:df:2c:9c:
ea:f0:3c:ec:77:02:93:65:33:d6:d6:25:a5:02:df:
35:b6:da:47:e8:58:0d:82:be:42:91:18:dc:59:59:
cc:db:c4:f7:7d:68:29:fe:97:76:c0:5f:1d:ad:6e:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:43:2E:38:F2:26:01:46:30:4E:2D:FE:DC:47:1D:C0:02:18:E6:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD91A48ADB2211EF808BDB66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.148.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:63:c2:df:31:55:c0:16:6f:72:ec:87:d2:d7:06:8e:5f:85:
33:bf:58:fc:84:76:a7:ec:2f:d5:c0:aa:4e:15:2a:c7:fb:27:
05:53:ee:ed:39:26:e3:80:89:bd:9b:1c:dd:97:66:8e:8a:48:
47:21:77:38:f0:cb:19:d5:70:1d:b0:a5:31:5e:a3:bf:ca:d2:
62:df:f4:a7:d0:09:2b:d2:8b:6b:07:57:1c:d0:52:61:f1:0b:
c8:2c:3a:c6:80:24:6b:c7:7d:14:ff:04:95:d2:80:cf:31:54:
3b:f0:76:6f:47:04:b0:de:59:88:a0:7a:4f:12:91:c4:6d:c0:
61:60:76:31:ef:1b:80:17:e0:3c:d0:05:c3:01:51:f4:99:4d:
94:ed:00:82:5f:9a:99:c1:f3:58:1e:66:e6:a0:4d:aa:79:ab:
7f:f6:54:33:14:ba:00:07:3e:83:3c:7a:bd:a7:89:a4:a3:9b:
94:02:b7:2a:2d:5b:38:78:eb:6a:37:29:4a:5c:02:f2:d8:e3:
a5:80:7d:8b:ba:47:5f:23:32:0e:96:2c:a6:e6:90:78:d0:a4:
c5:24:40:bb:e4:9d:37:1f:05:17:cf:f6:29:42:20:a1:e8:8c:
8d:2d:3e:14:f9:3c:14:c7:72:54:ef:de:41:ea:b8:3b:92:c6:
23:71:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:48 2025 by rpki-client