Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4971476DA6011EFAA239747762E951A.roa
File: D4971476DA6011EFAA239747762E951A.roa (raw, json)
Hash identifier: 7/HmfH96QY/0eGoLY5rkaXvpIXFKFuouF3JjYKUvFks=
Subject key identifier: 9D:DE:EB:45:07:2F:0C:28:D5:54:23:AC:7E:C6:DC:37:EB:39:53:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014847
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4971476DA6011EFAA239747762E951A.roa
Signing time: Fri 24 Jan 2025 14:38:09 +0000
ROA not before: Fri 24 Jan 2025 14:38:05 +0000
ROA not after: Wed 05 Mar 2025 14:38:05 +0000
asID: 48031
IP address blocks: 154.213.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84039 (0x14847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:38:05 2025 GMT
Not After : Mar 5 14:38:05 2025 GMT
Subject: CN=6793a5d1-ead4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:06:12:d9:3a:cb:e4:e8:84:82:bc:ac:c2:
9a:2e:92:b8:53:bc:af:39:c2:83:09:bf:e4:97:7a:
32:e4:18:4b:9d:87:0b:b1:a1:21:1c:25:bd:e6:86:
76:97:3f:53:62:85:5a:1f:f2:79:88:35:a5:cd:ce:
9a:e7:46:03:b8:c6:ff:d8:72:c0:f4:81:4e:80:59:
88:18:da:43:b8:df:ca:c1:e6:ae:55:4f:26:bb:59:
62:17:f8:ce:15:01:f2:8c:74:8d:d1:0a:b6:8d:ad:
68:12:c5:fd:40:bf:82:60:29:d1:eb:81:ff:21:24:
54:ab:89:f9:57:f8:b1:6e:67:a2:ce:ae:ed:0e:a6:
91:db:4f:4a:06:a2:c1:56:33:97:01:18:42:6b:31:
00:38:fc:30:94:39:e4:49:5a:2e:3b:27:3f:f5:50:
a1:c3:b2:c4:de:4a:50:f1:4f:be:52:ae:cc:5f:e2:
42:60:17:67:7b:55:c6:3c:64:97:84:a7:ba:cf:5f:
5a:d5:78:20:d1:93:3d:7a:af:d9:03:18:d5:0a:76:
aa:30:82:8d:92:a0:20:b4:9c:55:cb:79:01:6e:fc:
47:cf:73:84:d9:f1:0e:5b:7b:e7:d2:7b:5a:06:a6:
fd:37:2d:75:f9:46:3c:4f:90:7c:cc:24:e8:1a:78:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DE:EB:45:07:2F:0C:28:D5:54:23:AC:7E:C6:DC:37:EB:39:53:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4971476DA6011EFAA239747762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9b:43:f7:ca:70:c2:0a:4d:a8:fe:c3:9e:26:4a:41:32:85:
c6:3c:88:8b:1d:bc:d8:0f:03:5c:1b:d2:c7:1e:61:7a:01:d0:
ef:5b:3d:19:ba:8d:f3:96:c2:6e:12:24:97:c1:b6:57:85:aa:
8d:ab:12:e0:a6:ba:23:2a:a2:77:4c:75:a4:4b:ce:1c:61:38:
ee:b1:24:41:c8:a3:cc:cf:d3:c3:ed:8e:8e:3a:0f:cf:97:9a:
b7:4a:22:e7:e4:0e:cf:a8:48:6e:c2:ce:3a:fc:9c:20:f6:43:
e0:cc:c0:a4:97:17:77:c1:30:55:df:08:77:47:75:74:af:63:
8a:b0:5b:f4:f1:5e:9c:ba:5d:6c:b5:f0:35:1a:cb:d7:b9:a8:
00:49:1e:33:1f:f1:8d:c0:0c:47:3e:0c:ed:7d:c9:61:4a:b7:
d1:33:09:04:af:b6:f4:9e:ab:0e:bc:a9:ad:03:75:29:3a:c6:
ac:6e:bb:75:af:0a:06:96:89:5b:a1:12:b6:b5:a9:59:61:da:
93:f9:13:0a:0f:aa:c2:f1:10:44:53:70:39:c6:32:ab:28:39:
71:1e:a4:f5:03:0d:84:dd:bd:2b:1c:5d:6a:9f:16:24:04:8b:
f9:b7:e7:63:d1:35:80:c6:0a:40:ff:f1:e5:23:2a:e8:bd:f1:
e2:18:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:25:10 2025 by rpki-client