Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E08C268C8A511EFBA63C26F762E951A.roa
File: 0E08C268C8A511EFBA63C26F762E951A.roa (raw, json)
Hash identifier: U6WXOMdX8ww5UEstaKBYB4KRpQEvRLHefhanPEV7ROY=
Subject key identifier: 3C:AC:08:BB:16:D7:CA:8F:5D:5B:61:2F:6A:EF:9B:5A:C9:2F:2F:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013140
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E08C268C8A511EFBA63C26F762E951A.roa
Signing time: Thu 02 Jan 2025 01:01:10 +0000
ROA not before: Thu 02 Jan 2025 01:01:07 +0000
ROA not after: Fri 12 Dec 2025 01:01:07 +0000
asID: 984
IP address blocks: 154.218.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78144 (0x13140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:01:07 2025 GMT
Not After : Dec 12 01:01:07 2025 GMT
Subject: CN=6775e556-a808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:38:60:b7:4f:ac:85:87:03:59:79:07:bc:
86:76:f5:08:79:90:4e:d9:91:05:cf:39:58:df:37:
52:f9:63:cb:e2:0b:01:1b:8a:8f:2e:8a:14:27:09:
2a:ea:4e:c5:d4:1c:92:0a:d2:96:5a:73:79:a7:ea:
15:17:79:e1:df:db:c1:ac:c9:9a:73:34:f7:fd:57:
e0:01:cc:0f:01:f5:fd:73:0b:af:87:ff:ec:11:66:
a7:d1:9f:8c:89:61:ee:83:80:67:45:f7:6c:41:2b:
47:5b:1d:a0:80:95:d1:c6:4e:3e:33:c4:bd:b8:44:
bf:17:62:57:4a:36:3f:07:e8:2c:be:41:08:f9:0a:
2b:8f:89:b3:ae:58:42:0f:08:50:d3:99:0f:7e:77:
9b:8c:29:f7:73:98:c2:2d:cc:68:f6:22:fe:2b:78:
d2:71:3a:ec:fb:8a:62:a6:92:7c:f3:2b:1a:09:be:
52:57:12:fb:95:af:e0:8e:cb:af:6f:0d:84:4a:1b:
c5:96:79:13:38:ed:cc:2f:f6:c6:b6:16:de:f6:f0:
41:5c:42:26:35:82:e2:48:93:c5:64:fe:02:19:f4:
19:b3:05:4b:e2:82:fe:8e:81:58:e8:33:c6:79:0d:
6a:f1:1a:25:b3:32:3d:e3:be:7a:cb:7d:55:16:2f:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:08:BB:16:D7:CA:8F:5D:5B:61:2F:6A:EF:9B:5A:C9:2F:2F:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E08C268C8A511EFBA63C26F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.61.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:ec:55:3a:c8:30:c0:0c:45:51:03:3b:1e:db:79:48:0d:0a:
86:dd:a1:a1:da:5a:44:dc:47:0c:12:88:87:7e:14:c6:d4:ba:
cd:24:a8:e5:f8:90:94:bb:9f:5a:f7:db:19:2d:78:26:c5:a1:
e5:ff:75:e5:a9:32:cd:df:5e:f0:d2:d9:46:68:19:92:82:44:
aa:6d:32:d8:0b:99:df:b7:6b:e4:6e:48:7e:d5:18:ab:6f:76:
b7:df:7d:5c:db:e6:f0:23:36:0c:1a:88:bd:8e:bf:75:0d:50:
6a:9b:f2:28:9f:ce:39:c9:10:51:13:99:9d:6f:93:54:eb:dc:
0f:3e:df:0f:95:43:52:81:24:98:e5:87:fa:0e:23:db:5a:d0:
a4:e4:1e:2e:51:b1:92:f9:76:2e:a7:4e:aa:c2:05:7f:0b:43:
c6:b2:97:bb:11:0d:72:e8:44:c6:9e:dd:36:52:c7:cb:35:f8:
9e:a5:a8:70:92:7d:68:9d:1d:84:7d:b4:ef:f2:a5:7b:61:b4:
6d:12:35:5d:43:4a:17:5b:25:5b:a1:a7:8c:4d:6d:31:a0:2e:
80:d6:80:b9:60:8c:8d:87:6d:2e:3e:81:b8:a8:76:0a:8b:58:
57:45:f9:e6:88:a7:a8:fd:c8:73:2a:50:58:33:37:04:b3:0c:
59:59:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:36:18 2025 by rpki-client