Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4A87E02D8B011EF8D00F463762E951A.roa
File: D4A87E02D8B011EF8D00F463762E951A.roa (raw, json)
Hash identifier: EAO9VlNPp7sEXXyPnTF7d4FWTY7EfHL9T3mSj+JakG4=
Subject key identifier: 67:63:36:2E:F7:E2:C4:AF:89:7B:24:33:22:04:4D:01:CD:37:5B:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4A87E02D8B011EF8D00F463762E951A.roa
Signing time: Wed 22 Jan 2025 11:05:47 +0000
ROA not before: Wed 22 Jan 2025 11:05:43 +0000
ROA not after: Sat 08 Feb 2025 11:05:43 +0000
asID: 150008
IP address blocks: 154.206.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81642 (0x13eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:05:43 2025 GMT
Not After : Feb 8 11:05:43 2025 GMT
Subject: CN=6790d10a-24bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:2e:4c:0e:5a:58:95:56:18:e5:49:5b:72:
d4:e6:c0:5a:79:f1:69:cb:cb:d8:e6:22:0c:85:d3:
40:39:0a:d0:8d:3a:68:90:c2:5b:0f:8e:8a:a2:c2:
26:5c:5f:bc:3a:97:b3:fe:b6:f0:ed:5c:ce:71:17:
0c:05:81:ef:f5:fb:01:f8:60:9c:bb:b3:3e:d3:75:
b3:7f:4a:01:02:26:40:be:b9:fd:3a:3c:95:4f:62:
ae:b4:b7:ab:d0:d0:88:6c:d6:42:ab:e1:bc:a3:9a:
1f:2d:6c:52:32:88:a6:fc:0a:cd:b0:35:63:93:37:
0e:66:01:84:d1:cc:46:87:d2:8b:61:f7:d5:9c:34:
cc:ed:c1:c4:b2:9c:36:5e:49:47:06:e7:65:35:ce:
82:67:21:41:6c:41:19:9c:7f:91:41:15:0e:d1:61:
8d:e2:0f:22:55:59:12:df:9b:7d:06:0e:dd:aa:d3:
ca:22:25:a4:ca:85:d4:12:31:3d:09:3d:a9:fd:c6:
78:6a:9e:dd:25:d7:f6:80:4a:ca:63:eb:89:a8:a1:
dd:f7:8d:a6:d7:39:4e:6d:ec:04:1f:4b:67:d1:84:
d7:66:9c:5d:8c:4f:2c:d3:a8:52:63:71:90:d6:fe:
99:b0:67:ae:89:4f:0b:6b:46:06:f7:18:60:80:45:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:36:2E:F7:E2:C4:AF:89:7B:24:33:22:04:4D:01:CD:37:5B:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4A87E02D8B011EF8D00F463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.30.0/24
Signature Algorithm: sha256WithRSAEncryption
60:99:8d:bb:6f:1e:cc:61:0a:bd:97:ee:bb:64:d2:21:7b:93:
87:b1:58:48:81:aa:82:d4:85:47:90:23:15:4f:c3:86:2d:a7:
56:1a:c1:1e:3f:8b:13:de:0a:2d:ef:63:f4:ff:d1:6c:6b:07:
94:e9:b9:bb:1b:29:4c:98:40:65:5b:9b:9d:0f:a2:a7:83:8c:
e1:7e:d7:0e:ad:8b:80:65:75:ef:8c:53:eb:fb:86:73:8c:88:
7f:0c:79:42:8d:98:3c:e2:06:e8:fd:3f:79:9b:1e:c7:02:19:
5a:a3:0f:54:9d:3f:b2:1a:bd:a9:74:2d:14:d4:cb:b3:9d:11:
8b:be:34:70:4d:aa:38:7f:82:43:f5:61:76:4f:01:6e:f0:ba:
c1:f0:e4:18:92:29:c1:41:8d:0a:e1:01:9b:c4:24:40:e8:c7:
65:98:3a:b1:c3:c2:a8:c1:03:12:be:8a:67:53:f0:30:6a:0b:
5e:a9:a9:40:a6:e0:fd:38:eb:63:dd:6c:d0:db:02:37:5f:f1:
c1:54:01:1d:b2:57:60:64:64:c0:98:c3:0e:5e:5d:a6:81:80:
52:7f:22:bd:fb:f7:f1:ad:5d:db:e9:a3:74:65:86:11:11:41:
61:53:a1:89:c6:10:78:a5:1c:cb:29:47:27:6b:75:85:ba:e0:
e5:20:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:32 2025 by rpki-client