Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/001C5F52D40311EF8016EFB5762E951A.roa
File: 001C5F52D40311EF8016EFB5762E951A.roa (raw, json)
Hash identifier: UuNo3KG+xllLOh9eQE0yd70WnXQwwUduQvOxsiWa7kQ=
Subject key identifier: B0:B6:AE:E2:8B:2C:C7:3D:51:05:61:E4:B1:20:DC:6B:B3:3D:15:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/001C5F52D40311EF8016EFB5762E951A.roa
Signing time: Thu 16 Jan 2025 12:11:22 +0000
ROA not before: Thu 16 Jan 2025 12:11:19 +0000
ROA not after: Sun 16 Mar 2025 12:11:19 +0000
asID: 17561
IP address blocks: 154.206.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80926 (0x13c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:11:19 2025 GMT
Not After : Mar 16 12:11:19 2025 GMT
Subject: CN=6788f76a-0ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:9b:bd:0d:f4:3b:35:b5:e7:c3:31:75:cb:
48:99:c4:8b:33:13:d2:b4:00:99:bf:2b:e8:36:58:
d6:f2:e2:ba:9b:e2:4b:70:76:39:12:07:0c:cf:bb:
d4:25:ab:67:ea:e1:b0:74:9b:4f:4e:72:5e:3a:f3:
53:c0:89:a2:7d:00:1c:92:90:57:f8:8f:58:d3:9f:
e7:f5:2c:3c:ba:7b:7c:06:06:f1:b7:29:ea:7d:1d:
d3:6e:94:c6:11:78:56:3a:ad:9a:a1:1d:7e:d4:06:
a1:96:ea:94:16:a0:bb:63:45:df:aa:78:80:94:d4:
18:d9:d7:1b:9b:1e:49:d7:96:00:ee:5f:83:8e:a2:
39:37:42:c9:11:7f:e0:39:75:4b:3a:db:dc:c6:fa:
7e:74:6d:f1:81:22:f0:99:f9:8d:ab:52:65:5f:dc:
52:2e:e0:fe:c8:92:88:c7:bd:7a:b3:27:75:ec:2e:
2f:97:f8:02:b0:ff:c4:34:9d:71:46:99:73:ce:1a:
d9:0e:0f:86:03:cb:9a:54:e3:a1:73:83:8c:1b:7e:
db:fc:7e:4f:28:25:24:e8:41:5a:9c:04:49:bb:32:
87:89:1a:2f:00:34:87:b1:f0:ed:04:3a:22:11:b2:
fc:9c:5f:63:f9:d3:82:9a:d8:1a:e1:43:bc:76:74:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:AE:E2:8B:2C:C7:3D:51:05:61:E4:B1:20:DC:6B:B3:3D:15:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/001C5F52D40311EF8016EFB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b7:2f:16:f5:61:09:69:36:83:c8:c6:50:3f:0c:de:97:84:
c7:da:86:ed:2b:12:15:82:28:ad:61:bc:06:24:f4:14:e7:5a:
d7:d3:4e:1e:37:00:79:92:51:d8:7b:be:e3:9b:bd:af:e7:31:
d9:46:97:b3:e2:62:a9:07:ea:53:a2:73:a3:23:7f:a8:51:78:
a7:74:05:0d:b8:f1:11:de:e7:fe:fc:e5:a9:16:f8:c3:0f:d0:
3f:54:08:22:34:68:25:a9:dc:8a:c2:94:ba:94:4a:97:3d:31:
48:f9:70:e3:20:7e:1f:6c:f0:7d:fc:66:0e:68:9d:38:e7:d6:
6b:6e:18:94:40:b1:1d:6e:57:36:65:21:3a:70:88:73:0b:9f:
c3:4b:e5:1a:d8:fc:2c:8a:e8:52:1e:5c:b4:a8:99:2a:f8:70:
20:cc:bf:9a:72:38:01:70:82:48:76:cd:b4:06:ec:2c:3a:a2:
78:6b:58:60:69:08:1e:69:a9:17:9d:23:5d:9a:75:a7:23:a4:
f6:c1:7b:0e:b7:be:c2:9a:58:6a:15:d7:0b:fd:ad:cf:0e:14:
2d:04:9a:56:9f:14:54:ec:08:bf:44:7a:84:b8:e0:92:b5:18:
90:e8:3e:14:c6:3a:78:b0:61:e0:50:25:ad:0d:00:9f:e5:96:
d6:d8:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:27 2025 by rpki-client