Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FD5310CF6411EF8AA7426C762E951A.roa
File: 06FD5310CF6411EF8AA7426C762E951A.roa (raw, json)
Hash identifier: 5nRtU0nIRDOFs0F3XZ7I/0SW4d1/ZvKSmmqVFI/FC+I=
Subject key identifier: 7B:47:62:16:13:3C:F5:77:11:10:C0:AF:56:29:0A:D7:47:8E:1A:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FD5310CF6411EF8AA7426C762E951A.roa
Signing time: Fri 10 Jan 2025 15:03:19 +0000
ROA not before: Fri 10 Jan 2025 15:03:16 +0000
ROA not after: Fri 12 Dec 2025 15:03:16 +0000
asID: 984
IP address blocks: 154.81.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80428 (0x13a2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 15:03:16 2025 GMT
Not After : Dec 12 15:03:16 2025 GMT
Subject: CN=678136b7-05fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:dc:b1:62:bd:53:5b:3d:89:08:c6:31:4e:
fb:85:51:3d:45:64:82:fa:4c:59:f8:9d:f9:3a:3b:
8b:07:d2:86:0c:86:f7:9c:2c:b8:73:56:b6:cc:38:
2f:96:7a:45:9a:1f:9f:b5:66:61:d6:59:44:ae:57:
82:9a:f6:78:41:33:59:7a:8b:2b:f3:1f:83:ec:e2:
1c:a9:a8:aa:33:a9:48:3e:27:df:be:f5:e8:09:56:
fb:0e:2f:63:43:97:5a:5d:7a:7f:07:00:85:bb:4a:
11:75:28:2b:6e:16:97:e3:93:e8:5d:b4:ea:7d:64:
68:18:50:90:1b:fb:88:f5:0b:7b:c9:af:36:f2:fd:
26:1e:20:dd:74:b4:80:48:d5:80:8d:b8:27:09:f4:
c6:f2:fc:8a:a2:22:09:09:ca:81:a1:e0:71:4b:4a:
d5:7d:98:dd:e4:11:b2:8f:4b:9c:7e:53:8d:53:7a:
b6:cd:48:70:af:8a:d1:a3:1e:6f:64:b8:99:75:e9:
84:fb:7a:c8:15:0d:2d:e5:4e:ce:56:8c:3b:11:9f:
27:22:0d:91:e0:48:90:d3:f0:37:ab:36:e5:fb:a5:
8a:99:df:2e:2a:5d:a1:88:2c:34:f9:e4:29:67:a5:
51:2d:e9:14:4b:15:d3:29:42:27:ac:a0:fd:76:90:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:62:16:13:3C:F5:77:11:10:C0:AF:56:29:0A:D7:47:8E:1A:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06FD5310CF6411EF8AA7426C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.151.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a0:6f:b1:bb:bf:13:38:27:2a:36:14:53:81:f9:f8:c1:59:
20:4b:22:80:3c:da:d2:0e:f6:b9:83:77:11:ae:7f:b4:ee:5e:
d4:2b:b6:9e:b3:85:fd:f5:83:59:23:fa:e1:a5:a2:f9:15:2f:
ec:e1:26:3b:72:57:02:05:a2:7b:22:29:95:f5:2c:89:02:53:
d1:8e:b0:4d:af:22:b1:5c:66:1b:9e:37:02:71:46:ea:b6:c1:
5a:00:95:87:c5:e4:b0:38:d6:b7:a0:14:bb:8b:63:9f:86:e0:
42:3a:e0:a5:b6:6f:e8:19:e2:c7:35:8e:b1:7d:0f:54:eb:ed:
63:27:fe:16:15:b3:4a:7f:e8:c1:7a:f4:57:9a:4e:9d:e4:9f:
01:cd:a3:55:7e:70:e4:6d:35:61:dc:4e:58:d3:f8:e1:f0:0c:
4e:da:3a:09:5f:7a:07:de:b9:b0:7c:99:6a:7a:9f:e5:eb:90:
a3:56:58:b6:2a:10:e1:19:26:23:cb:1f:2a:5d:e7:e7:29:16:
77:cb:0c:14:7f:bb:5b:ba:fa:98:a4:11:ab:b9:57:e4:52:e9:
3d:e9:6a:a8:0e:73:a0:f6:6d:7f:68:50:84:c4:8e:da:b6:b0:
0f:2a:d4:a7:f1:73:54:b2:8e:05:b4:a8:65:e1:7a:fe:f6:9f:
2c:86:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:38 2025 by rpki-client