Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF985F8D51311EF8BFA15AC762E951A.roa
File: DFF985F8D51311EF8BFA15AC762E951A.roa (raw, json)
Hash identifier: pcXnPxM1S5PXZ6iGZnAUb7zhOIZdNeF126y5NZOYerc=
Subject key identifier: FC:F3:04:5B:FD:8D:1D:11:1E:41:84:B8:8B:F1:6E:F9:C1:C5:D3:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF985F8D51311EF8BFA15AC762E951A.roa
Signing time: Fri 17 Jan 2025 20:44:41 +0000
ROA not before: Fri 17 Jan 2025 20:44:37 +0000
ROA not after: Sat 22 Feb 2025 20:44:37 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81213 (0x13d3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 20:44:37 2025 GMT
Not After : Feb 22 20:44:37 2025 GMT
Subject: CN=678ac139-80b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:78:7e:7e:c6:c1:34:89:2e:9e:d4:0c:99:
d8:dd:a3:1a:4f:0e:40:b4:64:15:65:07:b1:2e:fd:
dd:42:d0:3f:d7:89:bd:f8:b1:ef:e4:cc:0a:bb:90:
c3:40:85:5c:76:86:47:ca:28:04:39:36:e2:14:3a:
6e:97:f1:6e:b3:ac:c2:74:1f:45:10:02:86:9e:67:
c1:e0:f8:5a:d5:c0:a4:60:df:4d:91:ed:ca:59:37:
73:eb:a1:6c:2c:a4:e1:2f:dd:b1:b9:bf:2e:21:11:
eb:c4:a6:10:7f:60:ca:41:fc:c1:03:dd:0d:2e:ad:
c3:dd:7c:98:4c:9b:0a:a1:81:b3:e9:a0:3d:40:9e:
17:be:12:d1:ac:33:bb:4f:2b:62:94:ec:bf:23:76:
46:10:48:65:ff:40:ce:35:4a:44:5a:73:b2:36:b4:
82:6c:d8:34:d6:f4:69:5e:68:34:df:da:40:9b:f7:
f5:fb:f1:09:12:9e:77:03:c1:76:b0:33:93:02:f9:
2a:7d:5f:88:7d:fa:c2:28:78:e4:80:06:47:29:89:
a5:ae:f5:1b:87:fa:6c:7f:6e:49:f7:2f:5d:71:61:
71:7c:95:63:72:fe:58:d4:b4:ce:72:e5:4d:60:5b:
6e:c4:60:84:57:68:63:24:24:a6:2b:54:1d:25:f8:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:04:5B:FD:8D:1D:11:1E:41:84:B8:8B:F1:6E:F9:C1:C5:D3:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF985F8D51311EF8BFA15AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:15:6e:c6:e6:40:5b:3e:95:5b:90:00:ef:8b:c6:42:ec:d5:
d9:8a:56:e0:f0:eb:63:eb:48:d4:f2:53:f7:f0:29:bd:61:96:
29:c9:62:58:d5:eb:49:c4:ca:b1:ff:57:ef:37:71:77:0b:38:
3f:78:10:1c:39:1a:e9:9a:ea:4b:da:e4:0e:40:a0:cd:9a:0a:
b4:84:ca:51:ad:10:f0:3b:5a:dc:94:84:99:a9:db:2b:d0:11:
54:78:7b:7d:dc:71:17:a4:ab:7e:2b:95:e1:0c:36:7f:47:b1:
a3:ca:ab:38:d6:ff:28:d7:9b:f0:af:0f:53:23:dc:ac:1e:97:
9c:95:af:ce:5c:ea:45:b6:71:a5:5c:e6:ce:21:b3:dd:4e:1d:
dd:71:5c:a5:7c:9b:9f:13:b6:3a:9b:e0:3b:57:6d:e8:79:0c:
4b:f2:28:5b:2d:60:24:26:ab:fb:38:a0:40:8b:51:20:99:56:
e5:aa:70:1e:3e:62:81:78:18:62:77:49:39:5a:06:b8:9b:4d:
7c:3c:eb:70:98:bf:39:b8:1b:e1:27:0e:42:9e:60:1c:a8:9d:
9b:cf:4c:8f:97:71:64:0b:7c:ac:dd:d3:3e:25:a5:e6:bc:69:
61:a0:70:2e:fe:f9:03:4c:01:d8:df:52:6c:9b:16:32:a5:5c:
20:8d:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:27 2025 by rpki-client