Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E66F9FD8DB1E11EFB891624D762E951A.roa
File: E66F9FD8DB1E11EFB891624D762E951A.roa (raw, json)
Hash identifier: JRV6dm4Fr2Xin7Ex5QrsL857DEYoKY4SllZQN1Yl2Zg=
Subject key identifier: 05:E9:98:5E:8A:36:5D:4D:68:EC:4F:BB:CE:A1:27:B9:58:52:4D:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014972
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E66F9FD8DB1E11EFB891624D762E951A.roa
Signing time: Sat 25 Jan 2025 13:18:43 +0000
ROA not before: Sat 25 Jan 2025 13:18:39 +0000
ROA not after: Tue 04 Feb 2025 13:18:39 +0000
asID: 395793
IP address blocks: 154.193.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84338 (0x14972)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:18:39 2025 GMT
Not After : Feb 4 13:18:39 2025 GMT
Subject: CN=6794e4b3-bb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:cf:7c:11:99:89:e9:52:ba:35:e6:9f:b2:
ce:78:d0:fc:77:a2:4b:2e:8d:45:58:c1:59:bc:cf:
64:7f:23:b5:bb:48:e9:f9:6d:3c:2d:32:a6:58:38:
9f:74:98:a9:cb:fc:aa:a4:52:1e:a2:6e:dc:24:72:
ce:c7:45:8b:de:28:60:98:3d:ef:91:3f:8f:f4:43:
08:58:77:06:ff:1f:bf:7f:9d:58:1a:61:6c:ba:e7:
aa:51:eb:51:1f:96:69:3e:56:7c:93:36:e4:4e:78:
29:a6:3c:87:d6:27:8b:06:a8:88:70:cd:ab:11:b8:
e9:81:0e:79:4a:0d:2c:f5:8c:78:6f:3c:f2:9e:28:
90:27:2d:1a:7e:3b:6f:4e:04:4d:54:05:f3:bc:d1:
3f:fe:38:b3:f6:97:18:d1:ab:d6:71:6b:7f:15:90:
74:bc:d9:b1:a3:25:3d:d9:da:cf:d9:8c:79:ac:38:
c3:e5:09:d7:5a:ba:9e:84:d1:06:ab:76:2d:a0:2c:
59:87:7d:7e:e0:80:af:99:77:26:41:10:8c:c9:72:
67:2e:54:a7:b6:7e:d0:66:02:8d:4b:17:7b:0b:da:
bb:74:d6:81:dc:ca:e3:0d:f4:79:89:d3:88:4a:a5:
56:c2:0f:c9:4b:18:20:7e:ff:c3:78:d4:25:c8:f6:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:98:5E:8A:36:5D:4D:68:EC:4F:BB:CE:A1:27:B9:58:52:4D:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E66F9FD8DB1E11EFB891624D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.100.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bf:36:3a:2e:3b:ed:05:93:52:8e:46:70:6a:c3:c6:04:4b:
92:4c:ca:43:0e:0b:fa:0a:dc:9e:39:94:6b:07:0e:87:52:01:
41:11:80:08:9e:26:aa:eb:09:91:e5:73:99:3e:73:d5:de:06:
27:43:36:15:84:92:e8:45:a3:ba:86:94:5a:6d:86:31:e5:5e:
ca:e1:21:7d:40:46:14:02:df:ca:a3:12:11:b5:d2:12:70:4d:
33:af:92:91:2d:db:65:2b:b8:3f:64:41:f9:0d:4c:92:a5:c1:
9f:9e:ce:29:2e:5b:ff:e6:6d:7f:61:4f:f9:9d:b3:5d:46:32:
a8:bf:f3:cf:18:14:00:93:fb:13:1d:6c:39:d1:e0:96:89:18:
19:99:0d:52:b1:31:ba:2c:15:e2:63:04:25:8a:7b:50:e2:58:
bc:7b:58:96:5d:aa:a5:da:31:16:0c:f4:23:81:49:6f:9c:55:
0d:ce:1d:61:64:0d:42:31:6f:4c:c7:04:81:e2:37:4d:d2:28:
23:f9:62:dd:bf:17:36:20:d8:a6:f3:ce:e4:8b:88:11:e1:66:
12:58:9f:2a:f2:46:6b:b6:a0:02:da:d4:d0:3f:49:e5:f7:98:
c1:9f:40:07:f8:02:e8:44:86:45:02:f3:cc:2d:a6:7e:2b:d1:
6f:31:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:45:48 2025 by rpki-client