Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/206F1B7ADA4611EF902D2990762E951A.roa
File: 206F1B7ADA4611EF902D2990762E951A.roa (raw, json)
Hash identifier: zMEDIzZ++RboZYZYFFP8LelNJOZ/+sesaVJMmYt2MpA=
Subject key identifier: 4D:07:72:33:9C:6D:2A:21:54:9C:8C:20:F3:31:B5:C0:6D:FB:1B:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01460D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/206F1B7ADA4611EF902D2990762E951A.roa
Signing time: Fri 24 Jan 2025 11:27:00 +0000
ROA not before: Fri 24 Jan 2025 11:26:56 +0000
ROA not after: Fri 28 Feb 2025 11:26:56 +0000
asID: 62240
IP address blocks: 154.196.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83469 (0x1460d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:26:56 2025 GMT
Not After : Feb 28 11:26:56 2025 GMT
Subject: CN=67937904-6dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:22:df:7b:be:75:dc:2c:a0:f1:6c:98:61:e7:
82:c2:0d:bd:95:77:49:7e:fd:d7:fc:f3:a9:79:0a:
ce:50:d2:e1:fa:18:b4:46:25:01:aa:ca:72:d0:88:
f4:ac:52:d1:de:97:d4:ca:d7:35:f9:30:e3:a4:9b:
76:2a:66:10:e7:16:5f:ff:e5:97:3d:9a:c2:1d:c6:
cb:53:59:ba:e4:52:1b:56:82:7d:93:e7:79:88:d1:
30:cc:af:ea:2c:a7:cb:c5:55:c4:4f:80:12:ee:c3:
bd:82:df:36:6e:5e:1d:6f:dc:80:77:e4:ab:8c:e3:
39:71:9d:8f:c3:ad:d3:81:7e:b7:4d:a7:bb:4c:f1:
8b:c0:3d:d6:f2:76:1f:0b:54:eb:f5:35:96:3b:aa:
9d:06:19:bf:ae:7e:30:d6:10:fe:ee:e4:c4:78:43:
5f:71:b5:89:58:d6:d0:3c:a3:bc:a1:e3:e6:d4:7e:
60:01:25:61:26:a0:13:3a:a7:f2:85:84:a0:ee:5a:
56:c3:d9:6e:dd:20:dd:cc:3e:66:16:9b:85:6c:cb:
83:d1:f2:ba:13:d2:a6:97:eb:2d:74:f7:4c:50:10:
66:a2:98:10:e0:8b:87:d1:70:83:5f:a6:db:6a:b6:
dd:c4:23:a3:0e:b1:ec:ea:23:9a:76:2c:e8:d6:7a:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:72:33:9C:6D:2A:21:54:9C:8C:20:F3:31:B5:C0:6D:FB:1B:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/206F1B7ADA4611EF902D2990762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
56:79:52:8a:42:68:55:b1:ab:61:e1:32:5e:07:89:62:d8:36:
c2:c9:c9:a9:bd:39:b8:a7:9e:aa:1c:ca:ca:67:82:7d:99:5f:
8c:75:dd:31:ab:20:5c:1e:9f:e8:73:95:6e:4a:9e:29:2b:87:
7e:80:62:33:a0:fd:18:5f:42:10:1a:5a:b6:7a:b5:bc:f0:f4:
a9:c8:5f:d8:fa:be:b8:a2:fc:22:f8:59:80:ac:7a:cc:c1:06:
1c:3e:0f:2a:7e:c4:dc:13:3a:10:2f:ad:3d:7e:72:4c:bf:e5:
b1:03:49:37:c7:ea:29:9d:6f:a4:11:27:a8:d9:31:97:3f:20:
14:ff:fc:f1:46:95:eb:7b:df:37:5a:ad:98:4e:51:67:92:c2:
d7:0f:e1:bb:c1:a8:54:e2:76:2d:3e:fa:10:b0:04:ec:f5:24:
4d:f5:10:4f:18:73:9b:89:a9:2e:89:c3:ec:84:37:59:ce:eb:
43:8f:46:06:eb:49:f4:82:6d:f7:70:5c:7f:f0:d4:19:87:7f:
ed:74:4f:bd:cb:ce:db:36:96:85:14:ce:1a:b3:60:a8:48:51:
e1:fb:4e:8c:17:74:07:dc:24:4f:90:dc:a9:57:24:f5:48:39:
66:8d:76:09:59:88:31:f6:e4:14:aa:4b:96:57:12:bc:8d:7b:
5a:e2:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:15 2025 by rpki-client