Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DBAB7ADBDC11EF934E5C4E762E951A.roa
File: D6DBAB7ADBDC11EF934E5C4E762E951A.roa (raw, json)
Hash identifier: r5N1VSvQtLgYQf8Pwk/cu5d1rQj/XyKkGHB88qlD4jA=
Subject key identifier: 31:67:F6:BA:2E:C8:AD:A2:2B:71:57:DC:74:94:D1:DC:58:D3:D0:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DBAB7ADBDC11EF934E5C4E762E951A.roa
Signing time: Sun 26 Jan 2025 11:58:22 +0000
ROA not before: Sun 26 Jan 2025 11:58:18 +0000
ROA not after: Tue 25 Mar 2025 11:58:18 +0000
asID: 6079
IP address blocks: 154.207.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84616 (0x14a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 11:58:18 2025 GMT
Not After : Mar 25 11:58:18 2025 GMT
Subject: CN=6796235d-c68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:18:c0:5f:c7:61:ae:4e:77:54:75:c8:28:
6e:1c:85:f7:4c:2f:30:52:7d:a5:f9:52:1c:98:72:
57:9a:ad:db:1f:2e:48:70:20:9e:ff:0f:8b:1d:0c:
1f:0e:71:69:d8:19:2e:67:37:b8:4e:de:16:d9:cb:
26:35:89:b9:97:2c:5f:94:1e:73:92:32:99:6e:f0:
6a:15:2e:f3:f5:8e:ed:ed:2b:f6:8b:c9:21:1a:fe:
23:dc:0e:70:d5:a3:da:43:ec:1a:78:59:ee:6d:7c:
dc:26:f5:8d:b8:d9:5e:26:98:8e:0d:21:85:89:84:
ef:cc:1c:2a:84:06:8b:ac:6c:da:4d:19:1d:47:54:
51:8d:83:01:fe:81:a9:be:59:c0:60:39:85:fd:63:
e9:27:2d:89:5b:01:b3:21:f7:3e:c3:d0:63:d6:a4:
cc:f2:25:a5:4b:c3:b1:18:5f:ed:b8:29:78:e4:21:
57:93:4c:4f:eb:75:e2:d9:b0:ab:14:30:e2:65:84:
e5:97:d7:38:01:b7:63:8a:f9:be:27:14:3e:83:d5:
51:d0:fd:ac:96:b9:c2:90:90:0a:0f:ed:9f:6b:20:
58:a8:7b:b7:77:35:ee:c2:5f:63:17:20:fe:da:c8:
36:1f:13:ea:9d:7a:6e:ea:cb:73:da:cc:cb:7f:22:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:F6:BA:2E:C8:AD:A2:2B:71:57:DC:74:94:D1:DC:58:D3:D0:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DBAB7ADBDC11EF934E5C4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
58:2d:21:b3:f2:b5:fa:c9:00:ee:e8:c5:c3:b4:53:54:fe:50:
26:09:85:b8:5d:a1:18:c4:34:7b:47:b3:10:8b:69:1e:a1:51:
f4:e7:8c:1c:24:0e:5d:e1:ce:7a:25:44:b5:06:0e:2c:73:7c:
68:85:4a:59:e7:21:0e:35:00:5c:f3:7f:14:59:9b:ea:e5:f8:
0c:d4:63:61:b1:9d:13:fe:12:e6:b6:0d:ba:06:d8:90:d3:b7:
52:90:f7:c2:47:f5:00:67:1b:dc:b6:c9:79:8f:ea:e4:f2:0d:
87:c7:71:be:f1:4b:43:74:45:23:db:9c:00:59:8d:fe:9d:a6:
f3:8c:6e:7e:f5:d9:e9:5b:22:03:7a:35:72:9c:0b:44:3b:7e:
7d:49:06:bc:57:b6:2b:81:92:4a:59:e4:73:da:14:97:ad:1f:
9e:b6:8b:a9:dd:a9:4a:55:a7:d8:55:6a:47:bc:95:c4:2b:9d:
2f:94:bf:d8:2c:6b:63:85:3d:0d:cd:d9:09:91:2a:20:f2:3a:
90:55:e3:4b:21:5e:1e:13:d2:00:8b:ef:ab:ed:93:30:e1:75:
07:75:72:1e:c9:47:11:35:77:ac:09:9c:7c:04:36:2e:1e:8f:
2b:b8:a3:fd:c1:65:fa:d5:90:61:25:4e:b2:92:5d:1d:c0:f5:
4b:55:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:35:23 2025 by rpki-client