Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA58287EDA5311EF980F4F6E762E951A.roa
File: FA58287EDA5311EF980F4F6E762E951A.roa (raw, json)
Hash identifier: EGk444r1Pib0+OaM0R4JPVWEla0XhItoIGLizd+504Q=
Subject key identifier: 6D:37:DF:29:2B:7F:80:16:7A:22:48:D5:C6:D5:35:44:09:61:44:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01473E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA58287EDA5311EF980F4F6E762E951A.roa
Signing time: Fri 24 Jan 2025 13:06:09 +0000
ROA not before: Fri 24 Jan 2025 13:06:05 +0000
ROA not after: Wed 05 Mar 2025 13:06:05 +0000
asID: 44559
IP address blocks: 154.209.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83774 (0x1473e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:06:05 2025 GMT
Not After : Mar 5 13:06:05 2025 GMT
Subject: CN=67939041-ef24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:05:26:0f:24:9c:5a:52:79:b4:0c:5d:0d:
08:bf:58:9b:25:7f:63:64:52:47:89:cf:b8:e6:5f:
66:4e:e1:1d:ad:39:68:16:94:2c:5f:e6:14:a2:3b:
a2:81:fb:29:c4:ea:54:c4:86:20:01:7f:47:da:06:
90:45:65:7d:04:b8:88:07:a4:11:5b:59:85:b3:9b:
06:8c:77:bc:92:ce:b2:43:82:fd:bd:d1:b3:3f:e7:
8b:44:54:65:c3:ce:29:3c:4d:a7:74:9a:f0:f7:04:
df:f3:3f:4c:76:4e:1c:4a:0e:8f:8a:da:1f:bd:d0:
1b:84:e4:f9:d7:17:ce:15:12:c3:98:86:32:5e:2f:
a3:3f:dc:d0:d8:ec:3c:7d:e8:52:9b:ff:28:0f:a8:
4c:64:38:23:87:63:c6:d4:c6:9e:9e:37:11:26:1f:
d9:5c:25:e0:92:4b:0e:cc:b2:ce:75:0d:b1:f9:b7:
79:36:58:0f:2a:8b:fc:43:e8:db:3d:4f:01:f4:d7:
f4:60:13:5e:77:6a:db:48:ab:9f:55:51:c2:4d:ff:
f5:a1:7e:19:11:78:c6:bc:ce:31:fa:1d:ae:2c:63:
09:9b:b2:9a:98:bb:9e:98:36:de:15:ce:70:24:cf:
42:59:83:0a:03:9d:65:d5:6b:3d:be:54:07:6b:1c:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:DF:29:2B:7F:80:16:7A:22:48:D5:C6:D5:35:44:09:61:44:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA58287EDA5311EF980F4F6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
38:4f:87:bc:e8:b3:ba:23:a0:2a:cd:d3:3e:07:01:4f:fe:c6:
25:a2:d7:22:a4:af:c0:02:93:26:d7:aa:ef:a0:9c:98:c0:dd:
01:7a:79:cb:55:cc:ff:4a:2d:ba:c2:86:13:3d:7d:0c:41:68:
60:e7:41:42:d0:8c:41:c4:de:4b:ca:a3:e9:c2:e9:cd:54:13:
44:4a:43:40:df:65:42:5a:01:82:79:70:ce:b0:a6:b8:32:d7:
d0:67:47:58:8a:f1:c5:f4:95:5e:c7:95:e4:12:60:22:8c:4a:
a0:e3:8b:8a:3e:16:3e:dd:4a:d1:10:cd:de:86:7f:3c:fe:cd:
7f:e1:08:1b:29:7b:1f:5a:a2:ba:b4:46:b9:88:19:3f:c7:89:
4b:2c:7e:b2:4a:7e:fa:db:99:0c:a5:fa:cc:45:5b:d4:c4:1a:
2d:26:83:aa:31:61:ed:bb:c3:eb:6f:67:f5:c0:31:79:45:a2:
d2:10:72:5b:04:0c:82:fa:81:22:ad:f2:bb:c3:e5:bb:95:27:
df:b7:39:b2:6c:4d:9e:fa:14:8a:5b:50:50:16:b4:c9:4c:05:
cd:5a:53:1a:af:ad:cf:7a:2e:57:48:a3:de:95:11:03:31:8c:
2c:59:01:15:15:0e:5a:82:a6:34:4e:b4:80:e2:28:bb:47:84:
32:e9:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:08 2025 by rpki-client