Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4A68514CCC711EFB93BE047762E951A.roa
File: E4A68514CCC711EFB93BE047762E951A.roa (raw, json)
Hash identifier: Kv7RzBtaLlfWR6xLZEqs0eOj8iBJpYU//aZ+JgsGcxE=
Subject key identifier: 0B:03:56:59:71:CB:C1:A9:4A:86:C1:40:8A:3B:D0:88:D5:F8:7C:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013649
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4A68514CCC711EFB93BE047762E951A.roa
Signing time: Tue 07 Jan 2025 07:20:38 +0000
ROA not before: Tue 07 Jan 2025 07:20:34 +0000
ROA not after: Wed 12 Feb 2025 07:20:34 +0000
asID: 210542
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79433 (0x13649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:20:34 2025 GMT
Not After : Feb 12 07:20:34 2025 GMT
Subject: CN=677cd5c6-278a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:05:f4:5c:d7:90:42:4d:21:7c:48:1a:b1:
1d:47:34:5e:e2:f7:a9:68:92:b4:0d:86:25:aa:33:
07:49:35:73:14:53:65:93:cd:a8:de:a1:43:f6:13:
12:8e:bb:9c:2f:81:a6:8c:35:59:84:05:85:5a:65:
61:9c:2c:38:85:0b:a2:2a:2b:dd:4c:91:e7:93:e6:
31:65:80:4c:cf:a5:09:3a:9e:3e:41:ce:b8:51:d8:
9f:90:43:ae:78:50:4d:f4:f4:f6:5a:4b:2a:e4:38:
61:37:08:c7:84:c9:14:6b:88:55:32:ee:cb:05:43:
e1:cd:3c:1a:f1:17:dc:26:86:ea:a1:ca:aa:98:3e:
4d:03:35:8f:16:2a:bb:28:1c:d5:a5:a5:56:a1:47:
88:c7:c4:73:65:f4:af:d8:04:46:b7:14:b8:63:0e:
24:a1:17:d6:46:41:f9:91:e0:27:3c:ec:6c:4f:df:
59:e6:6c:41:44:38:c9:da:0a:bd:29:6f:5f:d1:69:
58:fe:5e:32:d8:4c:91:ec:eb:6a:c6:ab:e9:62:66:
63:9d:79:f9:93:c1:fc:a7:29:30:bf:fb:35:53:2f:
36:91:0e:8e:73:1e:93:2f:f3:06:7d:f9:ae:ba:58:
cc:e3:97:05:2c:71:46:ae:da:70:0a:ff:64:3a:fe:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:56:59:71:CB:C1:A9:4A:86:C1:40:8A:3B:D0:88:D5:F8:7C:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4A68514CCC711EFB93BE047762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
66:65:cf:3c:9a:9b:8e:1c:99:87:d4:9d:c4:cc:78:34:22:7f:
cb:d8:b8:1f:49:5f:61:db:4d:66:04:b7:07:d1:d9:c2:62:40:
44:a2:c8:d7:33:83:67:b0:d9:44:69:2a:a4:cc:eb:8c:a7:59:
cb:39:00:84:12:05:b6:a1:ae:0b:4f:53:cb:1e:a1:2b:54:6a:
06:05:4b:ee:e7:da:29:99:3b:c2:67:5e:6c:b2:e3:26:55:4e:
32:9b:82:ac:ce:4c:15:8c:7c:7d:86:bd:76:85:b1:eb:33:c9:
b5:7e:30:14:e4:39:45:1b:e2:0d:ef:f9:54:d7:e0:d7:aa:1c:
ee:41:8a:7e:20:1f:47:0e:fe:57:1e:31:2e:c7:5f:b8:9e:88:
39:3a:20:f5:c4:6c:e7:65:b1:ed:5d:24:4e:6d:40:b2:91:dd:
79:b4:4d:09:c4:e5:66:27:52:c6:c7:74:81:08:2f:0d:4c:8c:
78:8c:66:aa:9a:36:4a:49:2f:4d:ad:d7:8c:53:59:7c:41:d4:
d9:ee:e7:05:5d:1a:20:80:0e:f7:a3:9a:49:d7:2a:a5:8c:53:
af:40:f0:df:1e:a5:59:c4:ac:92:b4:18:ae:8a:9a:24:44:ac:
47:fe:41:81:49:6b:67:f6:64:c1:32:85:79:d0:1f:e1:c3:cd:
f6:4d:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:25 2025 by rpki-client