Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE0B99FCDD5911EFB65FA959762E951A.roa
File: FE0B99FCDD5911EFB65FA959762E951A.roa (raw, json)
Hash identifier: m6JQbSkIa7GQSCfzoK9r8mpta5LoggIg8gT+IVWGmXc=
Subject key identifier: 39:68:4E:9C:13:96:22:C2:2C:55:F7:AF:D7:8C:AC:12:C4:46:8F:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE0B99FCDD5911EFB65FA959762E951A.roa
Signing time: Tue 28 Jan 2025 09:26:46 +0000
ROA not before: Tue 28 Jan 2025 09:26:42 +0000
ROA not after: Tue 04 Feb 2025 09:26:42 +0000
asID: 5065
IP address blocks: 154.206.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85148 (0x14c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:26:42 2025 GMT
Not After : Feb 4 09:26:42 2025 GMT
Subject: CN=6798a2d5-58ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:f3:26:9d:de:5c:cd:00:e6:3c:7f:2b:78:
dd:96:9d:b1:bd:61:57:de:06:22:0c:b2:cd:74:9d:
4c:27:77:ff:0b:b2:7a:f1:dc:27:21:e0:a9:51:6b:
bf:1a:3d:d6:74:84:82:03:b0:74:7e:27:7d:1b:14:
41:64:51:28:7e:cf:58:4b:0a:d0:70:99:5e:9b:5d:
59:ec:7b:97:e2:96:4e:a9:be:02:b7:00:7a:cc:0e:
55:3f:6d:66:a9:0e:c3:02:46:90:ed:8d:eb:d9:2f:
7e:db:03:7b:b3:aa:a6:0e:eb:fd:e3:d8:99:d6:b4:
d9:eb:31:5f:8e:48:af:9b:ed:b3:3c:68:92:c6:fa:
2b:ce:57:1c:c5:65:f6:42:4d:57:9d:88:1f:4c:e8:
a2:25:78:1f:3b:ae:e8:1f:a3:6d:1b:47:22:7c:cb:
8a:39:80:20:d2:86:ab:54:93:00:2b:18:bb:86:c3:
0e:ab:c4:78:3e:1c:77:24:e3:f9:08:a4:0b:9a:dd:
3f:d9:47:10:23:58:d8:f4:f2:32:08:92:82:eb:9a:
5e:14:f8:b3:d6:c6:85:a1:2f:8d:89:9c:58:02:03:
98:5b:c2:97:02:81:17:40:2b:1d:42:97:b3:cd:68:
20:cd:e3:e1:7a:60:60:74:ad:85:2e:7b:7a:83:81:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:68:4E:9C:13:96:22:C2:2C:55:F7:AF:D7:8C:AC:12:C4:46:8F:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE0B99FCDD5911EFB65FA959762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.35.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b1:6d:85:27:b0:78:1e:a2:ad:c7:9b:fe:d4:15:60:70:2f:
42:2a:2a:8f:f3:f6:f6:eb:a7:76:4e:da:8d:5f:98:a7:56:f3:
d5:26:d5:9c:46:c6:3a:3f:82:70:7d:cf:05:48:59:3d:e9:70:
b8:73:c7:a9:95:d7:1e:fe:fb:73:7b:f2:f1:a1:85:47:12:1f:
28:43:4e:31:7b:cf:fb:e9:35:47:d4:17:c5:23:c7:0e:4c:ad:
f9:31:87:41:13:3d:51:80:cb:16:df:31:27:64:5c:02:38:76:
26:6f:ce:33:0f:0c:37:b0:ee:a6:7d:2b:a0:9b:ff:1c:fa:4b:
eb:ec:7f:24:2d:5b:4c:43:1d:de:64:af:71:0b:39:95:89:bb:
9a:94:77:9e:ce:75:31:81:66:9d:c6:bd:21:f4:a2:07:ec:33:
70:69:66:1f:f3:61:7f:20:38:2a:d8:bf:07:31:91:cc:da:a0:
29:7a:c2:76:b2:85:1e:d6:22:ee:bb:96:70:69:66:a6:b5:1f:
e9:71:a9:69:6f:81:5c:d5:b2:80:e5:82:99:63:a4:6d:a9:a3:
e6:3a:43:b5:d4:6d:d1:12:a3:26:62:0d:e9:45:99:22:8f:e4:
6f:89:c0:8b:65:b0:7e:fc:0f:c3:4e:51:bb:0c:97:20:4e:36:
1c:ae:7f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:08:15 2025 by rpki-client