Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E8E8F74DA1F11EFA05DF88A762E951A.roa
File: 6E8E8F74DA1F11EFA05DF88A762E951A.roa (raw, json)
Hash identifier: 9KZ4/r/MgF2aMo1O90pX24lEuUX+d8gX9pgoUgODSS4=
Subject key identifier: CF:08:DC:26:5A:82:3F:32:A7:9C:07:07:91:67:4C:04:29:86:84:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E8E8F74DA1F11EFA05DF88A762E951A.roa
Signing time: Fri 24 Jan 2025 06:50:01 +0000
ROA not before: Fri 24 Jan 2025 06:49:57 +0000
ROA not after: Tue 13 May 2025 06:49:57 +0000
asID: 138915
IP address blocks: 154.205.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82938 (0x143fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 06:49:57 2025 GMT
Not After : May 13 06:49:57 2025 GMT
Subject: CN=67933818-b739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:ae:6d:b5:26:0d:56:52:ad:d7:ad:62:dc:
0d:1d:ab:cc:54:0f:77:d6:be:db:65:97:53:0f:61:
fd:67:9a:3a:0e:a9:86:bd:88:ca:19:40:bc:8b:2e:
12:c2:5a:b9:01:fe:fe:c1:23:d5:49:af:2a:b8:97:
fb:56:4e:2b:3a:99:40:d0:90:7c:59:94:ce:5e:11:
e4:06:c9:f1:ab:35:7c:be:b2:12:75:cd:ab:91:c3:
04:b5:f9:6f:73:2b:ed:29:5f:39:a9:b7:ef:80:20:
28:9a:22:70:88:7c:f1:df:8f:dd:a8:35:e1:7e:41:
f2:4d:77:e4:d9:b5:7d:10:a3:df:6b:5f:7f:a9:3f:
8f:a7:36:56:91:05:fd:7d:4a:dd:59:d1:4f:c0:6c:
9e:51:ff:1d:39:c1:e1:ad:8b:c7:06:d8:3b:0b:4e:
5d:65:6e:c0:12:42:37:c3:2a:22:04:43:13:9e:42:
ef:78:86:89:13:4a:b3:e3:3d:aa:59:47:7a:ef:19:
24:27:36:44:04:4d:1d:73:ff:74:9b:2a:a4:80:28:
c3:95:37:ef:ab:36:6c:cf:c7:73:e2:e9:b4:81:55:
db:1e:16:83:ad:db:21:57:46:23:9d:02:23:42:67:
fb:45:ad:82:2b:71:b0:89:2d:b9:61:d8:54:05:e9:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:08:DC:26:5A:82:3F:32:A7:9C:07:07:91:67:4C:04:29:86:84:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E8E8F74DA1F11EFA05DF88A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.134.0/24
Signature Algorithm: sha256WithRSAEncryption
44:81:4c:52:be:77:62:5a:31:2e:9b:8b:0d:ba:26:4e:33:26:
b9:c1:a5:e0:b3:28:96:31:b1:82:b8:42:90:36:8e:b6:57:5d:
1a:b8:3c:4f:c2:0d:8e:bb:e5:45:e5:39:c8:5c:05:db:91:fe:
7c:fa:ff:7c:60:5f:63:47:5a:bf:4f:4a:32:66:5a:1a:98:af:
62:3c:16:cc:f9:86:de:b8:7c:6c:8b:f5:7b:e5:b9:c6:6e:0b:
8d:a2:86:c4:6b:40:54:95:f3:0f:37:51:54:84:44:94:59:e3:
fd:a7:e3:74:db:45:df:70:b5:a9:6f:9d:e9:4e:a8:e9:2c:c9:
77:a7:ed:9b:48:df:0b:15:01:71:ab:64:0c:8b:30:d5:c3:d6:
ad:86:3f:5c:d6:2b:a8:da:b5:95:16:88:26:6f:f1:4b:c6:10:
86:fe:6c:60:8b:e2:8c:e2:d8:72:b3:37:44:73:77:cb:eb:41:
28:a5:86:61:64:51:ac:70:0c:50:4b:3f:81:a6:94:aa:8d:09:
ba:d5:8f:8d:b9:1e:ea:45:9e:85:7c:56:dc:45:9f:b7:bf:26:
6e:94:fd:a5:eb:8d:c0:59:5a:fe:3d:9c:e7:5e:d6:10:10:38:
2d:2c:72:4e:0b:e9:df:09:f6:de:24:66:28:7d:a8:c5:6b:12:
c9:32:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:17 2025 by rpki-client