Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E5339ADB1E11EFAC606C4D762E951A.roa
File: F7E5339ADB1E11EFAC606C4D762E951A.roa (raw, json)
Hash identifier: 9lfqq/+VmtFmjhTZByRBFE4aqz4UY2e9ju/GWmnFbKs=
Subject key identifier: 83:F2:18:AA:83:C5:72:6A:2D:93:3E:83:4F:67:87:99:35:F3:2B:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014974
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E5339ADB1E11EFAC606C4D762E951A.roa
Signing time: Sat 25 Jan 2025 13:19:13 +0000
ROA not before: Sat 25 Jan 2025 13:19:09 +0000
ROA not after: Mon 03 Mar 2025 13:19:09 +0000
asID: 44559
IP address blocks: 154.209.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84340 (0x14974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:19:09 2025 GMT
Not After : Mar 3 13:19:09 2025 GMT
Subject: CN=6794e4d1-a375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:29:f6:4b:99:49:21:68:b9:46:9d:61:b7:
ba:f9:27:0a:5d:bf:af:4a:90:91:4b:46:84:d2:10:
cb:4e:dc:39:b1:1b:4c:b3:11:e1:e8:97:1b:da:79:
9e:f4:83:70:1e:12:8b:a5:cc:36:b1:2b:83:91:c9:
21:74:79:8a:12:26:90:88:a2:32:cf:67:e9:f2:88:
59:cf:ed:05:e4:25:25:49:4d:a1:77:75:cb:8c:51:
a5:fb:c5:55:77:c3:6f:8a:20:2f:90:62:9c:da:78:
af:98:9b:cf:b2:da:df:ef:b9:bc:2f:e1:d2:e6:0a:
94:26:1d:05:f7:55:dd:59:f9:04:72:e5:44:28:b0:
63:0f:77:e0:2a:04:e2:ca:31:f3:55:10:cc:47:1d:
a8:17:ee:95:fa:88:36:80:c8:c3:b8:8d:22:54:b9:
8c:32:a4:5a:17:a4:36:2a:29:d5:f8:b1:28:eb:db:
51:97:75:96:ac:4f:6b:30:87:e9:9d:6c:ae:2d:ff:
16:b9:66:6d:f3:25:e3:31:5d:ea:af:16:89:a8:72:
f1:35:1f:af:fe:1f:43:ce:ef:cb:a3:79:82:1e:80:
fe:dd:eb:8a:02:80:6a:e4:a5:b4:4c:01:22:91:c4:
b9:10:9f:8b:27:84:75:a2:00:44:b8:a8:2e:ec:9f:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:18:AA:83:C5:72:6A:2D:93:3E:83:4F:67:87:99:35:F3:2B:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7E5339ADB1E11EFAC606C4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d9:0c:aa:6e:00:27:3b:7e:73:43:6d:95:62:39:c9:43:1c:
22:c1:64:a6:29:14:5e:11:0b:d6:dd:c6:7e:7b:99:a8:82:4e:
ca:4c:25:94:e8:19:4b:9c:c3:e7:35:85:3d:a2:f2:da:67:14:
90:cc:3f:79:e5:3c:9f:07:de:2d:e1:9c:11:0f:2f:0a:1b:2e:
c2:26:91:84:d4:c3:eb:88:75:9b:a6:dc:7a:3e:17:bf:a3:3f:
69:02:43:07:d3:bb:75:80:c5:8d:be:1a:15:c6:0b:ed:06:70:
c6:52:8a:cc:e1:dd:14:60:b5:7f:5b:f2:17:90:9a:b8:26:d0:
e0:01:f5:17:14:4e:c6:82:60:18:eb:f3:82:7f:da:24:c4:10:
23:74:87:63:9a:70:25:96:a1:d9:a8:61:b8:b6:d7:2a:89:81:
43:08:9f:cc:9c:b1:28:3d:de:6a:04:b9:07:fb:d6:b4:56:04:
5b:21:d7:10:07:9d:55:ac:46:2a:42:dc:ea:6d:ab:fe:19:77:
02:93:16:4a:b0:10:c9:b2:08:60:9c:c0:99:c3:e3:c1:cb:a1:
fe:6c:d4:1b:d8:98:09:7d:e3:79:a6:16:e8:c8:98:88:71:94:
f1:90:87:2d:4d:68:6b:85:0a:b0:48:94:cd:7d:df:fc:6f:4f:
74:03:99:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:58 2025 by rpki-client