Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F650B000CC0911EFAE4CFA8D762E951A.roa
File: F650B000CC0911EFAE4CFA8D762E951A.roa (raw, json)
Hash identifier: KXXqDXilC1nSgrXfzhaw7Ynwetqp5/ObDTbv7mWC1gM=
Subject key identifier: 05:D7:7C:0E:46:0A:D7:B8:0E:3C:28:E0:E8:05:DC:A0:12:BF:14:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F650B000CC0911EFAE4CFA8D762E951A.roa
Signing time: Mon 06 Jan 2025 08:41:03 +0000
ROA not before: Mon 06 Jan 2025 08:40:59 +0000
ROA not after: Thu 06 Feb 2025 08:40:59 +0000
asID: 200373
IP address blocks: 154.213.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79290 (0x135ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 08:40:59 2025 GMT
Not After : Feb 6 08:40:59 2025 GMT
Subject: CN=677b971f-13fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:c1:9c:68:bf:66:6a:b3:0e:1d:f0:70:27:
c1:d6:b5:f1:8e:11:92:95:14:69:a8:45:1b:f3:af:
ba:bc:ed:b7:2e:ee:c2:60:0f:e1:79:0e:b0:1a:41:
b2:88:b6:95:08:e1:df:69:54:d1:58:11:d9:9a:ce:
d9:1c:f3:f4:00:9c:cd:d4:3e:82:8c:10:05:31:91:
60:a6:53:c8:2f:ce:4c:03:a8:91:20:ea:02:38:ae:
91:bf:bb:ea:17:82:0f:fe:85:8f:b2:9a:e7:e3:59:
0c:05:cc:bb:c4:4f:3e:f8:7f:bd:3b:ba:89:63:8a:
b8:df:4f:d2:5b:d3:8c:19:75:ab:63:c0:15:3e:be:
65:0b:c0:fa:4b:f9:81:29:40:83:aa:bf:1c:98:75:
ef:5a:de:b2:9b:8f:65:eb:ce:e4:2d:79:21:ed:b6:
f7:1c:62:a4:91:68:da:4a:0d:ae:51:a7:da:14:b8:
9d:5b:6d:91:7f:25:8b:86:65:c3:7e:4e:b7:06:4a:
16:5d:29:db:1c:ba:ce:52:84:af:de:74:d5:3a:34:
4f:2b:4a:1a:a7:0f:6d:6a:42:a1:a0:82:bd:3c:dd:
df:d7:ea:b9:0e:64:08:95:3d:0a:aa:d8:ad:7f:b2:
17:fc:69:4b:0e:83:3b:49:10:34:72:fa:16:7f:80:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:7C:0E:46:0A:D7:B8:0E:3C:28:E0:E8:05:DC:A0:12:BF:14:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F650B000CC0911EFAE4CFA8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.193.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a2:71:90:d8:a9:ae:9b:e6:87:49:a7:b8:88:25:9a:3d:1b:
a4:58:60:63:44:50:d7:e1:46:a4:50:cf:7f:cd:0f:67:45:fc:
82:f8:8a:a7:49:95:6f:8d:18:ae:cb:0a:2a:bb:64:be:a4:ae:
c4:34:5c:98:1b:c0:03:91:26:c9:b0:ac:73:13:f8:e4:d9:07:
3e:18:db:f2:6b:5d:b6:98:45:7d:17:8a:8e:a7:ad:c7:72:c5:
1c:62:f3:85:eb:19:37:e7:f2:e5:1a:68:53:2d:49:b8:11:54:
49:ab:5a:b2:95:50:63:aa:2d:1a:20:66:28:62:e2:39:ea:12:
b4:c4:14:b4:e3:a0:f2:ca:8c:e2:17:cd:6d:f3:e9:3d:ea:e1:
99:2a:32:3a:72:cd:6b:41:8d:23:75:08:87:05:ea:8b:12:34:
2f:25:dc:70:37:94:ec:1c:a7:2e:fc:ab:ee:4c:5a:7c:47:74:
1f:29:7d:12:f6:27:05:6e:97:0a:02:d0:8b:65:9a:dd:92:62:
8c:42:00:95:0b:d7:0b:00:b0:ed:c8:1a:53:06:71:a0:90:37:
c7:d0:58:fb:7b:ce:89:bb:f9:93:2b:4d:00:82:b1:9f:55:53:
3b:de:a9:db:6c:55:a9:c6:4f:96:67:42:7d:e6:9c:f4:30:1e:
14:39:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:25 2025 by rpki-client