Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06BF3D54E31011EFB77D9A53762E951A.roa
File: 06BF3D54E31011EFB77D9A53762E951A.roa (raw, json)
Hash identifier: 4WQK37qJ2dOEZkVHTWeE4FdOl8kWPUgyfYYUOeC9h6A=
Subject key identifier: 98:81:7C:62:54:9E:53:87:18:C5:4E:8C:30:79:B3:27:33:E6:FC:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06BF3D54E31011EFB77D9A53762E951A.roa
Signing time: Tue 04 Feb 2025 15:52:24 +0000
ROA not before: Tue 04 Feb 2025 15:52:20 +0000
ROA not after: Wed 30 Apr 2025 15:52:20 +0000
asID: 18229
IP address blocks: 154.210.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86267 (0x150fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 15:52:20 2025 GMT
Not After : Apr 30 15:52:20 2025 GMT
Subject: CN=67a237b8-25f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:e3:7e:07:4d:ff:39:2b:02:e5:1f:ff:0f:
4d:a5:be:2f:42:32:cd:04:e6:c3:cf:f4:70:e7:9e:
3d:62:e6:ab:6e:32:b9:df:97:5d:47:24:99:dd:79:
0d:f7:16:e7:99:3b:0f:fa:cf:fb:c2:a9:e5:c2:08:
cc:9e:60:f8:2b:71:a1:c3:54:0b:4c:0f:82:b6:7a:
22:16:48:65:9f:e5:a0:62:df:c2:56:7f:06:b5:f8:
a4:d6:3f:0c:03:a6:bc:b1:c4:01:5e:f4:f2:4b:05:
dc:1e:35:52:24:1d:ce:c4:75:d5:31:1f:9e:51:be:
ce:28:66:a0:61:3f:3e:1a:07:46:da:af:6b:2d:6d:
2f:82:a6:ef:61:c1:a3:fd:35:fe:5b:80:fe:74:ab:
2d:39:9f:d0:4a:08:56:d2:4d:56:fa:90:0f:3d:d1:
f1:11:e3:7b:53:bd:d7:18:e2:4c:b4:4e:a5:d8:67:
93:12:e3:30:37:df:fd:59:7c:cc:ad:6e:e6:02:a8:
b1:6b:7d:ea:fb:bf:ce:96:90:3e:f6:a4:a1:45:5f:
23:7f:c7:24:96:73:12:65:a1:51:8a:cd:38:a2:92:
62:78:db:7e:de:70:c4:ef:ef:7a:e7:74:0a:6c:ca:
0f:a0:48:0e:44:ca:06:dd:32:f3:97:f1:35:6d:21:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:81:7C:62:54:9E:53:87:18:C5:4E:8C:30:79:B3:27:33:E6:FC:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06BF3D54E31011EFB77D9A53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.128.0/24
Signature Algorithm: sha256WithRSAEncryption
82:85:43:1a:c8:9b:49:e2:4e:e9:86:7b:b8:f1:aa:bc:00:b1:
e8:a3:89:48:88:ab:1f:f4:90:7e:3f:09:3c:a9:2b:5a:e6:d6:
9b:b9:bd:ae:41:99:ef:dd:3b:2e:af:0f:e9:cb:31:48:fd:7c:
29:c1:01:07:b5:35:f9:4d:5b:eb:79:11:69:d2:32:8a:70:38:
2b:46:f8:6f:7e:22:41:c8:b2:3e:5e:66:3d:71:c9:c4:35:27:
b7:00:43:73:5d:14:3c:25:ef:b9:3f:17:39:98:9f:8b:cf:96:
17:7c:6e:88:cf:66:1f:b6:0c:8f:00:f4:43:1d:f0:70:15:57:
20:e2:f1:ab:20:95:85:39:59:b7:4e:b1:ec:a7:bc:fd:26:89:
fa:43:2a:f0:49:65:2c:27:7c:c0:fd:57:e9:c6:71:d1:17:f0:
31:c9:e2:df:86:46:18:e8:29:31:24:bf:cb:07:46:65:a9:68:
3d:b7:4d:f8:4b:6d:6e:8f:33:60:c3:bb:a7:a9:c0:a3:ed:ca:
2e:61:ef:17:b1:d2:b5:8e:08:7a:ea:0b:92:90:e4:08:4f:f9:
b4:62:90:d9:80:c0:da:08:ce:0d:1a:7b:da:b0:c0:fb:68:8e:
a7:ad:01:62:71:7a:91:74:9f:a0:e1:37:a8:9e:ed:82:83:96:
63:47:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:43 2025 by rpki-client