Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E277B2BCDCC711EFBB24C978762E951A.roa
File: E277B2BCDCC711EFBB24C978762E951A.roa (raw, json)
Hash identifier: /vbdNaaEeCUd7RXxgiOMy0h1g2tkO5prRacaIGVoGss=
Subject key identifier: 2C:97:96:64:0C:60:79:11:81:30:CD:B1:16:AB:E7:AB:DB:9F:8B:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C5F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E277B2BCDCC711EFBB24C978762E951A.roa
Signing time: Mon 27 Jan 2025 16:00:53 +0000
ROA not before: Mon 27 Jan 2025 16:00:49 +0000
ROA not after: Thu 13 Feb 2025 16:00:49 +0000
asID: 5065
IP address blocks: 154.207.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85087 (0x14c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:00:49 2025 GMT
Not After : Feb 13 16:00:49 2025 GMT
Subject: CN=6797adb5-7403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:f9:d4:9b:63:0a:b9:0c:48:ec:df:d4:07:
9e:e0:d6:88:0c:c2:8a:ed:96:97:63:e5:43:77:b0:
4f:cc:24:46:86:91:ae:36:ed:ed:99:21:a6:6d:70:
51:3c:4e:11:64:65:66:38:3b:2b:46:42:46:38:ed:
d3:25:69:54:61:0f:91:82:1f:8d:81:b0:60:ac:2c:
e9:fb:dc:f7:82:e2:d6:99:c6:4c:74:e4:6f:3d:7b:
c2:53:31:ab:32:5a:5a:75:8a:71:5f:40:2a:9e:34:
f2:e1:9a:78:d8:ba:42:52:0a:39:ca:51:ea:2a:40:
79:4c:99:da:ce:af:9a:26:4c:cb:fa:a9:e2:62:dc:
71:62:d2:41:36:b6:8a:24:af:8c:95:c6:89:a6:52:
0a:59:0c:48:17:ed:b3:98:f2:f9:6d:06:1a:5b:c0:
a1:a4:ec:d6:5a:e8:b3:d1:6a:62:17:a8:d0:19:77:
52:b8:3d:da:c6:75:fd:24:4b:6f:c7:ea:9e:b9:e1:
3a:c7:80:a9:c5:a0:2d:32:cc:f9:2c:b1:3f:e0:06:
26:2e:71:62:85:c7:a8:4d:e9:43:1a:92:16:be:33:
ab:dd:3b:cb:89:87:96:0b:64:04:17:77:79:99:9c:
9b:37:19:02:b4:dc:f1:8a:f5:05:56:85:58:b5:30:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:97:96:64:0C:60:79:11:81:30:CD:B1:16:AB:E7:AB:DB:9F:8B:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E277B2BCDCC711EFBB24C978762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6a:67:a2:64:72:56:94:da:2a:a5:b6:fd:f4:42:db:00:1f:
9f:85:14:f1:af:9f:23:a0:90:67:4e:1a:2c:5e:c3:f6:d8:55:
4d:e5:19:d2:fa:49:d4:d8:1a:4c:df:55:f2:9c:09:d6:eb:27:
65:c0:cb:35:62:a4:c3:8f:03:30:aa:25:ea:2e:3f:f3:df:03:
62:16:25:45:5c:1c:c2:fa:11:64:6b:85:28:e3:ac:8b:b5:65:
6e:8e:32:b5:92:75:ff:fb:87:93:3b:37:cd:8a:22:c9:44:25:
ed:1b:8f:96:65:7d:67:50:2c:59:3f:29:c8:3a:a5:3d:0d:29:
30:29:90:22:e2:35:9a:a1:92:40:62:73:fb:21:f2:71:58:d2:
cf:86:13:7a:ed:55:f3:89:2a:55:6f:2e:fe:fe:bf:c6:e4:59:
b8:02:07:30:72:2e:19:d7:c2:95:f6:56:d3:ac:ff:82:5e:5f:
a1:17:17:43:35:02:98:24:ba:70:f7:57:36:e5:f0:cf:c6:bc:
63:cf:2d:3d:89:3c:f8:42:bd:89:05:d1:b7:c7:91:2d:ff:21:
02:e2:d9:d2:a2:02:4e:51:d4:12:7e:fb:f8:95:d0:ef:c0:be:
ad:6f:dd:43:e3:8f:8d:df:79:ff:de:2a:38:f7:c8:7f:da:28:
96:07:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:47:39 2025 by rpki-client