Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615DD170C2A511EF8CD0A05F762E951A.roa
File: 615DD170C2A511EF8CD0A05F762E951A.roa (raw, json)
Hash identifier: 4hpturg5FUF3vMh8kke6LBH+DaUj+eF5sbdp2mXG8Wg=
Subject key identifier: 98:BF:37:61:5A:19:2E:78:6E:E5:31:C0:83:AE:65:4C:49:D7:B7:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012558
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615DD170C2A511EF8CD0A05F762E951A.roa
Signing time: Wed 25 Dec 2024 09:48:23 +0000
ROA not before: Wed 25 Dec 2024 09:48:19 +0000
ROA not after: Sat 15 Feb 2025 09:48:19 +0000
asID: 138915
IP address blocks: 154.206.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75096 (0x12558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:48:19 2024 GMT
Not After : Feb 15 09:48:19 2025 GMT
Subject: CN=676bd4e7-697d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:69:56:73:92:f7:b4:69:fa:0e:b2:8d:5f:
cd:c9:66:c2:9e:c3:6b:8d:e9:85:f1:e8:5c:b1:93:
db:45:ee:da:f0:af:1b:e7:91:c3:35:56:89:3d:fe:
19:74:21:66:51:3a:4e:52:35:d6:22:4d:d9:3d:9d:
56:44:2b:b8:40:2a:64:3a:91:4b:e1:9e:6f:de:49:
53:81:80:91:a6:f8:63:38:40:e9:3c:8c:2e:82:c4:
1c:f1:39:34:72:42:aa:f0:75:cc:c8:32:20:41:36:
8a:c7:98:b7:2a:cc:f0:34:bc:6a:52:c5:07:0a:40:
c1:0e:f1:fe:45:01:55:d3:20:1c:1e:6b:6d:99:22:
72:89:84:31:74:6b:69:67:37:91:b1:e4:04:f8:41:
68:3d:dd:71:12:7e:6e:71:00:91:45:f9:aa:9a:b9:
32:93:b0:86:58:66:fd:37:1f:c8:69:ea:d8:28:09:
fe:01:b2:7c:7a:2f:a7:ae:7a:0b:d1:b6:a7:0b:66:
d1:06:f2:79:ed:e7:e5:ce:f3:f8:d5:a3:2a:98:1a:
63:90:d7:40:9a:fd:f9:bd:f3:cc:2f:37:b2:fc:44:
2f:32:50:c3:f1:9a:19:cc:5d:67:d7:ab:be:d8:e7:
7a:5f:39:48:95:15:5a:28:b7:71:e2:fa:29:d7:16:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BF:37:61:5A:19:2E:78:6E:E5:31:C0:83:AE:65:4C:49:D7:B7:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/615DD170C2A511EF8CD0A05F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.96.0/20
Signature Algorithm: sha256WithRSAEncryption
cf:bd:ed:7b:c1:8e:a5:37:df:0b:a1:54:f4:62:dc:63:fe:91:
98:28:82:18:ae:65:4f:37:4d:d3:56:db:bb:c0:67:20:8e:2c:
ca:3d:8b:ba:b6:99:25:9f:6a:dc:a2:1e:ad:a4:21:a0:bb:f0:
43:4a:f4:fd:79:04:22:cd:62:a8:d7:ad:da:e2:53:cc:e0:fa:
0f:aa:52:28:28:2b:0a:92:f0:ee:82:39:0c:76:77:19:1f:a6:
c8:67:3b:a5:87:2d:4c:ae:62:59:21:29:b0:02:e6:6e:82:c2:
91:cb:f9:9b:2c:88:56:52:06:1a:30:21:50:b9:51:d5:cc:62:
1a:89:a5:ec:e5:21:e4:7f:65:a7:82:91:a7:10:94:ac:21:a5:
f1:97:89:90:ae:1a:00:fe:5f:1f:84:a5:94:21:c6:82:ec:b3:
d5:e1:c1:8a:b8:27:64:03:69:81:a0:ab:ef:b3:fe:19:9a:3c:
ab:d2:3b:62:f4:19:64:4b:d0:f5:3d:67:ec:4a:54:a5:b7:e6:
d8:0d:ff:c4:af:de:30:6c:fd:24:af:85:b5:df:b0:78:1b:d7:
97:07:0a:54:da:4a:2c:73:04:cc:2e:9e:dc:15:21:6f:cb:9d:
a6:cb:3d:19:5e:d1:67:14:0c:5b:e2:67:6c:e7:51:5d:69:b3:
5d:0d:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:30:18 2025 by rpki-client