Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E90615ED40211EF87F87FB1762E951A.roa
File: 2E90615ED40211EF87F87FB1762E951A.roa (raw, json)
Hash identifier: 6QDQNSROTzsFQjweQaZi/Ws88zjY9UifKOEDLYDtkFc=
Subject key identifier: 62:46:2F:25:C9:06:81:C5:3F:EA:DC:49:7E:69:87:C9:6D:CE:A8:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E90615ED40211EF87F87FB1762E951A.roa
Signing time: Thu 16 Jan 2025 12:05:31 +0000
ROA not before: Thu 16 Jan 2025 12:05:27 +0000
ROA not after: Sun 16 Mar 2025 12:05:27 +0000
asID: 17561
IP address blocks: 154.206.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80920 (0x13c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:05:27 2025 GMT
Not After : Mar 16 12:05:27 2025 GMT
Subject: CN=6788f60b-2111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:26:4e:2b:1c:d5:e5:a0:c1:3b:6a:e3:cd:
da:46:57:a5:3b:32:75:5f:7b:64:bf:e1:63:13:fd:
54:28:fb:80:72:c0:ab:7c:ef:42:62:54:e0:1f:4a:
2a:0f:cf:0c:e3:7c:25:36:eb:94:0a:f0:39:70:a0:
46:ab:f5:a4:b0:68:dd:9c:c8:e3:85:c3:98:c4:b8:
d0:a6:f3:f3:4c:94:d9:26:bb:bb:34:db:72:8c:51:
7e:21:9f:63:d6:4c:f1:8a:09:3e:df:21:f0:db:e1:
58:2b:0d:a6:4e:35:e1:27:f7:e9:ec:3d:2a:d1:9d:
91:07:d6:96:2e:b0:11:84:97:19:17:70:ee:ec:22:
d5:7e:b4:f8:bb:ff:25:a8:c1:67:c0:82:06:31:5f:
23:85:ce:2a:40:0c:49:9a:5d:9a:c4:cb:aa:d8:59:
e4:10:04:bb:d4:55:07:c6:de:33:f7:dc:cb:af:ad:
a8:29:81:c6:fb:7e:a3:6e:37:d5:6c:b7:6d:c2:7f:
de:ed:dd:fc:a7:d7:a0:ac:fb:8c:f3:b9:07:55:25:
db:06:d2:20:ac:a3:7c:15:f4:5b:b3:af:71:b6:69:
41:58:77:83:57:aa:1d:8e:a3:98:fe:6d:ef:e8:ec:
18:9a:f1:cf:bb:fb:55:db:ff:df:a2:3b:ef:bb:29:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:2F:25:C9:06:81:C5:3F:EA:DC:49:7E:69:87:C9:6D:CE:A8:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E90615ED40211EF87F87FB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.206.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2e:6a:c9:f8:22:1b:6d:11:95:76:6c:23:bf:16:e9:f0:60:
e0:dd:ce:a6:27:b3:23:bc:d4:09:0e:7a:c1:f2:74:3d:a1:10:
17:05:06:c3:3c:f1:a6:1f:08:35:a6:33:4a:f9:04:25:eb:62:
99:8b:46:f6:52:91:ac:34:dc:95:4d:8e:c6:98:61:2e:ba:0d:
f3:ea:b3:46:25:e1:2d:29:b8:69:23:3f:b8:98:c8:99:77:79:
36:a5:8f:e3:1a:b2:70:14:fa:a7:d1:6f:1a:df:c5:61:69:be:
3c:1a:30:24:84:0f:bc:55:4d:54:4a:64:07:81:e0:34:80:dd:
f5:fe:52:bd:36:37:7f:d0:29:c5:e4:40:d9:84:0e:79:ed:b5:
93:ec:88:66:44:cf:9d:a6:6d:f1:98:fc:3f:c2:a5:a6:16:38:
14:25:ee:73:44:c6:0c:25:90:63:4b:94:f5:e7:39:ef:37:9e:
5d:30:d3:41:8c:78:36:5c:54:7f:9d:ed:12:56:6b:7f:aa:33:
b2:ad:e5:be:78:56:5b:8c:bf:bd:87:57:f2:88:76:ad:ea:b8:
1b:76:4a:66:ad:c0:ab:e9:c8:39:ed:2a:0e:02:89:a7:19:d3:
55:ae:e7:25:74:9d:52:61:b4:cd:a1:cd:64:09:46:64:e4:00:
cd:8c:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:31 2025 by rpki-client