Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6927D1FEDBD111EFAB219481762E951A.roa
File: 6927D1FEDBD111EFAB219481762E951A.roa (raw, json)
Hash identifier: /aG+8nmD0LAWxtCXYKzrEmPXEPCwrnxfNPSNKScbkdY=
Subject key identifier: C9:D8:B7:9B:4E:58:5E:A6:BD:17:6C:06:F5:E7:24:68:CA:FF:5A:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6927D1FEDBD111EFAB219481762E951A.roa
Signing time: Sun 26 Jan 2025 10:36:33 +0000
ROA not before: Sun 26 Jan 2025 10:36:29 +0000
ROA not after: Mon 03 Mar 2025 10:36:29 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84597 (0x14a75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 10:36:29 2025 GMT
Not After : Mar 3 10:36:29 2025 GMT
Subject: CN=67961031-1da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:50:fa:cf:13:f6:27:72:5b:37:6c:5e:03:
29:cf:53:f6:ed:02:19:ed:33:8f:e3:1c:2c:bd:17:
af:a1:76:29:06:97:a8:04:70:ca:fa:b2:78:a7:6b:
0a:0f:23:b3:74:ce:71:62:85:f0:c6:fa:d1:22:c3:
ad:ba:2c:c1:10:02:98:1a:c4:be:b0:79:9f:97:fd:
ab:94:bf:c7:ef:1d:10:e1:b3:0d:e0:aa:ad:ee:98:
c5:12:8b:36:81:0f:2c:54:7c:09:dd:6c:9d:02:25:
08:61:b5:6d:ca:30:36:35:96:ac:43:b2:ea:bb:0a:
bc:2d:56:13:56:53:f0:61:29:b4:a9:ca:77:bb:66:
9f:cd:e7:af:76:7d:80:a1:98:6a:3b:55:4f:84:84:
32:b2:08:83:21:7e:a1:82:90:85:3e:b4:1c:a3:e1:
05:47:da:70:f2:05:55:f9:f9:76:12:90:f5:cd:92:
f6:71:87:92:78:a8:ab:fd:f9:b3:97:43:6e:cc:af:
67:55:65:18:bc:11:e7:ab:59:d0:d0:0e:ad:2f:6a:
92:65:16:66:5c:13:5b:d3:68:2d:f7:43:e3:ae:2c:
b8:c8:f4:e5:e6:47:62:67:16:68:06:0b:5c:e5:bb:
1c:4f:ea:f6:00:85:4a:49:2b:99:23:4c:e4:2a:01:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D8:B7:9B:4E:58:5E:A6:BD:17:6C:06:F5:E7:24:68:CA:FF:5A:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6927D1FEDBD111EFAB219481762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b1:07:27:04:04:ba:84:b6:e9:02:fa:73:c0:b3:46:7f:c1:
8e:55:f5:0a:67:73:11:cd:b1:d9:60:6b:0b:8e:fd:3f:52:a2:
e3:50:5c:4c:20:c1:6e:98:78:d8:bc:7e:cd:bd:c3:eb:31:cc:
d2:5e:bc:d0:84:b2:ac:4f:98:7c:74:8d:29:75:81:a3:29:72:
30:ea:9e:d1:5b:47:b5:bb:b6:ee:45:d6:fc:40:b9:fa:e2:2a:
f6:82:54:cb:bf:0a:5e:ab:e1:79:29:75:b0:65:7f:18:a8:92:
43:1e:79:43:a1:19:27:a0:c1:0c:db:f3:d4:ec:16:c3:ce:77:
4c:ac:0a:a5:45:e3:d3:20:2f:b2:c4:55:b5:1a:42:50:e7:e0:
a2:c9:59:d7:6e:67:6c:2b:a0:0b:4f:a6:24:ac:36:96:9c:a5:
63:c6:06:4c:2a:b6:5c:92:e9:b5:f2:d2:10:09:42:f1:4d:64:
d4:77:ec:b9:2a:9a:11:0b:b8:9e:e0:de:02:39:e2:c8:1d:c9:
16:ba:03:80:ff:e6:de:eb:c4:9a:49:85:3b:23:79:82:a3:65:
6c:5a:7b:54:b0:3d:ab:1c:11:c9:00:e4:a0:a8:40:01:a5:f1:
1e:14:2f:ab:ca:12:10:83:6b:c9:28:2d:f5:bc:d8:81:08:eb:
62:cc:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:16:25 2025 by rpki-client