Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60BC6F4DCBF11EF823A3A46762E951A.roa
File: F60BC6F4DCBF11EF823A3A46762E951A.roa (raw, json)
Hash identifier: 0/h0Zg0VXcr3vWb5xEwBV+zrZ+Hxrv5GyYvO2H7X9Kw=
Subject key identifier: B4:E9:1D:9A:28:01:F5:39:67:6D:17:98:47:4E:27:92:46:95:91:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60BC6F4DCBF11EF823A3A46762E951A.roa
Signing time: Mon 27 Jan 2025 15:04:10 +0000
ROA not before: Mon 27 Jan 2025 15:04:06 +0000
ROA not after: Sun 09 Feb 2025 15:04:06 +0000
asID: 5065
IP address blocks: 154.86.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85037 (0x14c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:04:06 2025 GMT
Not After : Feb 9 15:04:06 2025 GMT
Subject: CN=6797a06a-998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:6f:76:72:91:e5:3c:ba:9f:db:bb:79:cc:
d3:0d:7f:55:de:ef:e4:67:4f:da:99:35:e6:8d:28:
71:21:b3:d7:2a:61:6f:4d:5b:99:bd:ff:99:1f:a5:
e7:39:34:25:6d:5e:36:61:cf:0b:f3:37:ae:0a:56:
79:85:55:56:70:52:f9:8a:57:24:14:81:91:9b:38:
a9:59:81:5f:48:c0:86:d5:95:bb:05:ba:83:56:d7:
3f:e8:a7:63:49:8a:7e:70:00:77:37:8a:ac:03:e4:
d0:d7:57:e1:fb:79:9f:5f:8d:a5:50:e9:44:0d:2f:
1b:ac:eb:75:f2:01:8c:b9:4a:df:a8:c2:e3:17:b0:
ad:39:10:ca:b6:11:14:32:b1:f7:92:f3:ea:00:10:
84:3a:99:0c:84:50:76:86:cd:19:cd:a5:25:30:42:
47:fb:ee:f6:7d:2e:53:6b:df:58:a3:6b:24:92:2c:
7f:0a:ac:f0:7d:28:f7:ef:a2:7d:3b:98:7b:16:e3:
70:95:b0:a4:e6:a2:c4:1a:d7:7f:c8:8f:8a:47:41:
68:10:a0:18:60:14:38:81:6f:a8:03:20:f1:04:37:
3b:de:8f:ab:b5:07:3b:af:46:65:5d:71:29:6b:12:
44:7e:4a:71:fd:5b:3f:ae:fa:6a:01:ef:ec:1e:76:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:1D:9A:28:01:F5:39:67:6D:17:98:47:4E:27:92:46:95:91:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F60BC6F4DCBF11EF823A3A46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.102.0/24
Signature Algorithm: sha256WithRSAEncryption
07:16:fe:87:c3:90:b3:c5:a9:99:a9:1e:63:35:1f:0b:13:73:
6e:7d:bd:27:bf:0e:7f:a0:8c:4a:ff:91:6a:96:3b:4d:b0:37:
be:71:3c:77:2c:5d:56:29:c1:cc:98:bf:e4:36:72:3e:ce:ef:
e2:fc:b9:51:05:29:65:93:af:dd:35:75:cb:a5:49:f7:e8:d5:
e0:4a:31:c0:fe:a0:32:b2:90:c8:dd:a0:af:23:6a:7f:30:59:
95:33:66:cf:33:4d:f5:3b:a3:40:87:db:81:4e:73:e4:00:b6:
d4:83:a5:c2:e4:c8:4d:d3:56:ed:02:55:b5:3c:8b:9b:a3:6f:
33:97:eb:8b:c2:06:5b:ff:38:79:72:69:2f:1c:8d:73:55:8f:
6f:58:4e:bc:cc:00:21:cb:4b:b9:d0:e2:c2:a4:b7:8c:96:8f:
33:3b:27:a1:7f:5d:7b:94:30:d1:eb:55:5b:46:d0:e2:aa:ac:
1e:b5:2c:45:3f:d8:35:2f:ff:36:c9:0a:df:ab:04:a3:ef:c7:
a7:bd:3e:18:0f:4e:19:ed:de:89:d9:c0:f1:3b:e9:19:cd:78:
02:76:8b:8e:5a:bc:cf:b2:e1:e2:36:25:d2:e9:d7:5c:9c:9c:
0a:6e:26:39:ef:cc:d6:98:cb:68:99:63:a8:01:fd:d4:f9:99:
16:3e:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:40 2025 by rpki-client