Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8734E556B5F711EFB7696C7A762E951A.roa
File: 8734E556B5F711EFB7696C7A762E951A.roa (raw, json)
Hash identifier: wqUbU7Xo0qP7tAFqLUeSMfOTGSUiBUQbLbuXGuYq/6g=
Subject key identifier: CF:55:60:60:2E:DB:04:0C:5E:E2:AE:C7:E9:C2:B1:8A:34:D7:B1:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8734E556B5F711EFB7696C7A762E951A.roa
Signing time: Mon 09 Dec 2024 06:33:40 +0000
ROA not before: Mon 09 Dec 2024 06:33:36 +0000
ROA not after: Mon 19 Oct 2026 06:33:36 +0000
asID: 149014
IP address blocks: 154.205.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72111 (0x119af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 9 06:33:36 2024 GMT
Not After : Oct 19 06:33:36 2026 GMT
Subject: CN=67568f44-8005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:94:b9:75:65:22:00:21:b4:f4:1d:53:c6:
d6:d6:75:ef:be:8d:f1:8d:f2:76:19:1e:31:2b:2f:
55:8e:d5:c5:23:dd:47:be:f5:ad:a1:17:43:5c:fc:
02:1b:bf:d2:d6:79:2c:94:9a:e2:a4:58:2d:5c:e6:
19:90:13:aa:9b:0a:fb:06:27:e1:44:3e:fc:53:8a:
dd:4c:56:c9:3a:bf:2f:76:b3:84:14:32:09:ad:c2:
c2:c8:ca:ac:f7:27:eb:cc:61:5a:59:60:79:06:29:
6a:86:fb:1a:08:3b:df:8a:04:0d:21:35:97:6b:20:
20:e1:18:44:f7:d4:d0:73:80:10:ab:d2:52:a0:fe:
7c:c7:a8:14:d9:0a:68:19:9e:0d:84:b1:19:6b:ff:
7b:43:e5:52:44:a4:89:3f:7e:8e:06:fd:4a:37:ff:
3b:52:5c:1a:93:f7:98:ce:30:09:df:28:b9:30:81:
1c:34:70:a4:84:d4:b3:70:a9:a8:d9:ac:2f:6d:3b:
02:b8:40:9b:43:dc:37:60:bd:12:64:ad:4e:25:88:
ee:40:14:90:5f:16:33:cd:cd:29:fa:56:4a:d5:58:
98:3c:90:0f:c4:5a:86:07:d6:48:88:94:ef:d5:8b:
21:9e:40:35:55:c0:6c:53:80:ab:74:1c:29:35:53:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:55:60:60:2E:DB:04:0C:5E:E2:AE:C7:E9:C2:B1:8A:34:D7:B1:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8734E556B5F711EFB7696C7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.6.0/23
Signature Algorithm: sha256WithRSAEncryption
70:e6:a5:40:df:1f:f7:43:2e:6e:a9:5f:45:2b:d3:ff:e5:ba:
91:4d:a7:26:47:eb:22:34:44:0d:c0:60:0d:95:06:59:82:ef:
2a:5f:16:55:25:eb:1c:db:63:aa:ca:f1:08:5b:b2:18:2f:a2:
a1:dc:be:2d:6c:14:58:8b:e3:b3:56:79:95:5c:d3:9f:87:e8:
8b:09:04:bf:e4:e9:a0:f8:ce:49:2b:53:ec:a1:22:16:a9:69:
24:c5:39:4c:bc:c1:58:90:56:ad:ed:e1:fd:bf:15:3d:76:6f:
4b:9b:b0:5f:cf:71:48:af:c8:c3:4f:66:72:42:bd:19:b0:7c:
46:2d:df:35:80:ef:d4:8d:b3:ce:0b:ab:44:d8:16:63:97:b5:
7e:6b:31:57:be:7a:16:fe:d6:f8:00:ff:84:6c:6e:36:a1:05:
34:ac:3a:f8:89:85:90:1d:76:e2:5e:4e:83:ad:ae:f9:25:3b:
9c:a9:68:48:7f:93:0c:8e:d4:08:d0:01:c8:87:b8:db:ae:9d:
bc:32:2b:62:16:0a:66:36:a8:97:d7:8a:2f:00:7f:c9:f5:1a:
3f:09:e5:cf:59:f9:6a:b9:28:00:b8:69:6e:2a:29:9b:c1:97:
9e:8f:1a:ff:80:58:57:16:5f:81:f3:0f:f9:f3:79:0d:e3:a2:
84:9a:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:43 2025 by rpki-client