Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B9E812CC93D11EF95DEDEBD762E951A.roa
File: 6B9E812CC93D11EF95DEDEBD762E951A.roa (raw, json)
Hash identifier: nUgUeKraqctQEHpQ9tcN9aUFVIvOHnhg2oz8BCGZ5MY=
Subject key identifier: 82:43:10:9E:6C:65:44:40:BD:03:5B:A4:E1:2B:99:AC:A4:F7:C0:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01340D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B9E812CC93D11EF95DEDEBD762E951A.roa
Signing time: Thu 02 Jan 2025 19:11:51 +0000
ROA not before: Thu 02 Jan 2025 19:11:47 +0000
ROA not after: Mon 13 Dec 2027 19:11:47 +0000
asID: 17561
IP address blocks: 154.223.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78861 (0x1340d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:11:47 2025 GMT
Not After : Dec 13 19:11:47 2027 GMT
Subject: CN=6776e4f7-8bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:e8:17:d8:fb:99:f7:d6:76:f2:ec:d5:09:
ae:aa:e6:1b:00:db:af:7e:a2:fb:1c:7f:c1:f9:2d:
29:9a:52:77:05:1a:83:0a:b4:bd:46:00:79:50:43:
08:c8:27:ae:7d:b3:cf:70:fa:ba:b8:7b:e7:8a:d3:
e2:08:30:44:b0:12:44:9b:14:d7:a6:42:91:3f:21:
ec:3e:06:5e:73:fb:6d:46:7c:4f:49:a7:f1:e9:be:
6d:67:04:c7:71:52:66:a4:32:b7:55:ad:6c:51:cc:
34:d8:29:ba:1d:1b:83:aa:a8:06:1e:d7:3a:4b:fe:
c2:4f:fb:21:93:4f:cd:a6:46:e4:26:1a:67:df:92:
d9:8c:52:73:dc:a7:d3:fb:ff:2e:a0:f2:34:32:50:
e4:c4:e5:90:a4:bb:ed:6c:58:dd:8d:71:8e:98:4a:
9d:3c:2a:bb:b0:98:5e:dd:9e:fd:20:9d:31:3f:6d:
f7:0b:78:40:89:19:44:2b:a4:a7:5c:64:19:83:73:
e3:a6:54:31:0f:98:28:8e:2a:7c:9a:5b:c4:32:c8:
c6:fe:a2:53:8a:4d:e6:0c:c6:d6:63:d1:6a:18:31:
27:db:d3:42:78:fb:7c:99:d5:b7:5a:ce:76:e7:ec:
1f:5c:4e:57:25:74:b8:eb:39:8e:91:27:26:ff:bc:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:43:10:9E:6C:65:44:40:BD:03:5B:A4:E1:2B:99:AC:A4:F7:C0:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B9E812CC93D11EF95DEDEBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7b:5f:66:ff:4a:fa:df:94:6b:8e:1b:19:3c:37:05:de:b3:
f0:2f:29:58:e1:c4:02:3c:b2:9c:69:c5:44:2e:d3:33:02:1f:
db:ef:1a:87:ad:6a:bd:d8:63:b3:8f:09:0c:36:a8:c6:1a:dd:
0d:ba:c1:17:b5:91:81:6f:2c:02:6d:57:b9:12:0f:9f:ec:43:
3f:65:02:1d:cf:61:30:b8:84:bb:c3:a4:79:59:f3:5f:b0:3d:
8b:d5:d3:30:86:5a:01:ca:37:19:db:01:3e:4d:da:ca:76:f8:
f3:91:4e:bd:a7:23:21:71:6c:ca:97:e0:70:40:05:10:19:d7:
d8:75:d8:97:0d:a7:07:98:35:49:50:c6:32:56:41:f0:5b:7a:
dc:4a:5c:47:6d:f9:d0:94:94:b0:31:fd:2e:53:3f:3e:f2:65:
70:f3:31:88:6c:41:ae:c4:78:8a:eb:cb:28:1f:8d:58:f8:3a:
e1:02:86:65:0d:c1:45:3b:f6:69:5b:17:8a:31:51:a0:1f:de:
2a:77:20:84:d7:ab:37:b6:27:91:0c:4e:bf:27:cc:37:bc:8f:
ed:47:87:90:5a:ce:33:eb:a3:d3:60:f9:ee:49:5f:9b:f3:14:
67:04:d4:be:fe:93:82:27:08:e0:b8:a7:0d:89:06:c2:af:a1:
fc:48:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:49:38 2025 by rpki-client