Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6ACC034E23E11EFB8276B52762E951A.roa
File: F6ACC034E23E11EFB8276B52762E951A.roa (raw, json)
Hash identifier: vPruSVwojSvNGXNkquKoWo5ZEr3aj6mwtBATDB0nyVw=
Subject key identifier: 80:7F:63:33:A6:07:4F:BB:CF:E0:6A:E3:E4:B5:60:F4:18:C5:CB:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015023
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6ACC034E23E11EFB8276B52762E951A.roa
Signing time: Mon 03 Feb 2025 14:55:53 +0000
ROA not before: Mon 03 Feb 2025 14:55:49 +0000
ROA not after: Wed 30 Apr 2025 14:55:49 +0000
asID: 150008
IP address blocks: 154.209.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86051 (0x15023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:55:49 2025 GMT
Not After : Apr 30 14:55:49 2025 GMT
Subject: CN=67a0d8f9-de57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:a4:34:ec:51:b0:2e:bb:4a:fe:05:ed:0c:
8f:6a:e8:d9:1c:78:67:9b:30:e9:01:85:ad:2c:9f:
77:99:64:b7:0c:09:b5:a3:da:63:ff:e7:23:46:e8:
64:cd:b2:58:05:5b:c2:c1:39:3c:8d:cc:33:17:18:
0d:dc:f8:de:47:cb:3c:74:32:c8:11:80:67:b7:8f:
03:28:4f:57:0b:26:fb:63:fa:2c:5a:da:4d:96:d2:
5d:0d:65:19:be:9c:ed:c7:e8:4e:23:f1:ae:13:2c:
ed:e7:e0:b9:5a:4d:b6:92:3a:f2:3e:d7:d6:dd:fb:
30:10:f3:c2:e9:19:9f:08:4f:04:9d:c4:1a:a3:72:
e5:f2:95:47:46:36:d2:da:6c:74:9e:63:66:a8:17:
55:7e:d1:d0:84:bf:0b:c8:90:f7:8a:e0:e8:f8:7a:
8f:66:d7:ea:f6:f5:19:ff:e7:a3:73:9e:64:14:29:
bf:64:0d:d9:8b:83:d5:a0:44:0f:66:67:1d:59:7e:
66:2f:0b:db:5d:9c:da:53:13:97:ac:6b:83:0b:fd:
f9:3a:33:88:b6:16:83:e7:81:08:19:07:87:94:8f:
00:51:95:b8:e3:c6:2b:ee:de:1b:ac:19:e5:f0:49:
0a:70:8c:c2:df:1d:ba:fa:68:46:02:af:12:3c:4c:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:63:33:A6:07:4F:BB:CF:E0:6A:E3:E4:B5:60:F4:18:C5:CB:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6ACC034E23E11EFB8276B52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ca:5a:76:1d:44:18:a7:39:a8:e7:10:bb:c0:13:c3:ed:05:
cc:91:c3:12:46:20:c1:b2:7b:34:9b:c2:0a:c2:65:58:d8:45:
db:10:a6:55:bd:85:e5:e5:50:4f:81:b3:d4:6f:6d:7c:5c:52:
f6:17:bd:12:5e:fb:38:48:86:84:1e:01:df:62:ad:93:81:6e:
7b:eb:73:64:c3:f3:21:ce:2c:7d:5f:33:4b:dc:a7:98:c1:f0:
e7:36:ce:f2:f2:ca:6b:09:0f:ba:b9:41:1b:2f:42:ce:3d:62:
e8:ac:6a:11:c8:ca:27:76:63:47:58:89:67:7e:78:25:e0:02:
75:52:41:d6:c8:6b:34:ea:91:83:fe:c8:2d:cc:d4:b2:ac:48:
9b:41:26:fc:3e:7c:c4:09:1a:50:3d:d9:4f:bc:61:52:eb:f6:
6e:01:2d:e8:ae:13:2f:a4:df:c3:19:c3:7a:a9:5e:e9:c0:e4:
80:d8:43:c6:c8:ec:56:88:95:f0:7f:c6:4e:73:93:07:56:2e:
81:c9:7e:e1:81:14:87:9d:e2:12:ad:cb:0e:f3:3d:3f:55:00:
2f:78:29:96:2d:26:9e:25:d7:66:15:f9:45:9b:a2:dd:f3:6a:
4a:cf:42:6b:bc:cd:73:fc:ea:e8:a8:29:99:bc:ec:6f:0e:b0:
d0:93:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:34 2025 by rpki-client