Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A3930BEF83D11EFA5D61D93762E951A.roa
File: 6A3930BEF83D11EFA5D61D93762E951A.roa (raw, json)
Hash identifier: MEWAKsH0KpYxnSdbEJo1yu7kuKzNXuk1NJDqdymXB30=
Subject key identifier: 26:56:E5:21:0A:16:90:8D:B3:CF:2F:12:18:74:CE:E6:08:61:43:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A3930BEF83D11EFA5D61D93762E951A.roa
Signing time: Mon 03 Mar 2025 14:40:13 +0000
ROA not before: Mon 03 Mar 2025 14:40:09 +0000
ROA not after: Wed 09 Apr 2025 14:40:09 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94439 (0x170e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 14:40:09 2025 GMT
Not After : Apr 9 14:40:09 2025 GMT
Subject: CN=67c5bf4d-90dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:26:e0:a2:9f:dd:af:15:37:09:9a:0f:68:
ab:23:d5:cd:4b:87:df:88:6e:dd:ff:d8:64:95:96:
7d:80:8f:c7:64:e1:73:87:b4:a7:26:34:26:8c:f5:
08:b9:44:64:23:fe:57:04:70:ba:45:18:82:8f:fb:
c9:60:a9:d1:5b:60:db:25:7f:72:e3:ad:7c:ec:08:
a2:9c:0b:28:d4:66:98:91:4b:e2:0f:70:39:ad:54:
20:bd:82:86:ed:0a:23:26:b8:ae:99:39:7b:65:6b:
86:9f:d3:cd:ce:16:0d:21:8b:8e:f0:df:bd:93:e6:
da:b8:20:03:b3:96:5a:85:ab:1c:47:a0:7b:3b:1d:
c6:75:dd:c2:4a:87:9d:97:9f:e8:f8:fd:aa:4c:94:
2e:5a:77:ba:ed:a0:81:d8:7d:a0:d7:e7:62:b0:a4:
30:1c:d4:83:ec:ec:a5:44:d9:97:b5:fb:59:08:37:
3f:43:3f:86:1a:68:bb:e3:c4:6c:a1:4a:62:0f:6e:
26:3b:ac:ac:de:59:a7:2e:91:3e:a9:7d:cf:9c:3b:
09:65:e5:88:57:32:16:1e:bc:f7:87:36:c5:a3:7a:
c8:4c:b4:23:18:d9:ed:e9:fb:79:29:fa:fc:60:25:
dc:ab:6a:49:a3:cd:ad:05:27:8f:33:ae:13:d1:d2:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:56:E5:21:0A:16:90:8D:B3:CF:2F:12:18:74:CE:E6:08:61:43:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A3930BEF83D11EFA5D61D93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3d:e1:65:15:1a:51:e9:7f:90:d9:28:c1:e9:c6:48:87:a5:
41:f4:bf:cb:e0:37:2d:86:63:d2:8e:d9:fa:4c:c4:92:35:45:
8f:0c:35:35:8b:9d:0b:d3:8d:73:ef:22:05:1b:d0:ff:27:35:
43:f3:59:43:e4:4b:48:0d:59:79:55:6c:5b:d5:92:95:76:2c:
a2:a7:f9:83:c0:ae:64:d8:52:a2:73:2a:ac:e2:64:3f:d6:24:
ec:81:d9:d6:3c:0b:10:bf:dc:e9:f0:eb:99:7a:5b:d9:98:55:
35:b8:01:90:5f:48:98:33:25:08:86:a3:4c:9d:b0:65:92:ba:
b5:b8:b7:e2:0b:63:1f:e4:24:ae:32:cb:a0:59:1f:32:08:d3:
82:4e:c7:b6:e1:02:26:5b:bc:fe:61:0b:c6:8c:3c:4e:25:f5:
28:78:f7:dd:e5:9e:9a:66:39:21:5b:62:d6:e5:bd:49:6a:d7:
22:aa:47:52:68:14:76:e6:ad:49:e9:81:f1:ee:34:76:a7:24:
79:8b:9d:7e:9f:65:89:48:66:02:cd:9c:be:0a:2b:06:8b:09:
d3:36:1f:e2:4c:f2:21:ff:ee:36:bf:93:69:86:d5:81:f6:59:
68:33:cf:8a:29:41:e6:09:e6:86:6f:61:cd:de:d7:6f:5a:25:
cf:52:b8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:51 2025 by rpki-client