Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD21BCCDA0511EF88DB6960762E951A.roa
File: 6FD21BCCDA0511EF88DB6960762E951A.roa (raw, json)
Hash identifier: ubOxeqe3oLOwcyPbEwlRWZm9PFey7nrWzWfjK95+Q9s=
Subject key identifier: 44:80:48:83:84:80:6A:A4:AE:9D:7E:51:7B:2C:B6:8B:32:C1:CC:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01439E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD21BCCDA0511EF88DB6960762E951A.roa
Signing time: Fri 24 Jan 2025 03:43:56 +0000
ROA not before: Fri 24 Jan 2025 03:43:52 +0000
ROA not after: Sat 01 Mar 2025 03:43:52 +0000
asID: 44559
IP address blocks: 154.203.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82846 (0x1439e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:43:52 2025 GMT
Not After : Mar 1 03:43:52 2025 GMT
Subject: CN=67930c7c-5b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:81:c1:59:b9:e6:68:bd:29:e0:17:a8:07:
b9:1a:e2:53:5f:6d:5a:02:8f:06:21:b0:d6:16:0f:
89:84:b1:f6:02:fd:66:45:0d:31:81:04:28:45:6d:
80:74:85:d0:bd:36:26:22:3b:03:ca:71:4c:dc:6d:
07:b6:26:e2:7f:88:9b:c6:fd:b7:46:31:96:af:21:
15:9b:71:1c:24:dd:d4:64:9c:d8:4b:d9:56:27:15:
d0:75:5f:50:41:42:2d:42:43:a0:9d:70:34:9b:9a:
f9:77:03:72:54:ec:d7:76:fd:be:4a:a9:a7:9f:b1:
ee:03:ad:9e:32:d6:2b:a8:0c:9e:bb:d1:d8:9b:6a:
b9:e8:cd:73:44:c1:9d:88:a4:a0:9c:10:58:be:d1:
8b:d3:67:a1:d2:6b:81:22:5c:24:c2:31:03:6b:31:
50:ea:84:ab:1c:38:3e:af:a9:df:a3:fb:39:2e:12:
7c:f6:d2:0a:98:28:51:fa:bb:68:1c:a9:45:5d:08:
56:11:49:fe:c2:88:bd:3f:ae:e2:8a:8e:26:eb:e6:
62:07:1b:f8:75:48:95:9b:b1:70:a8:f4:06:b6:75:
a1:0e:d3:e5:c9:47:3d:3c:01:c6:40:73:4e:55:0c:
94:e6:e4:1d:d5:32:aa:d7:fe:74:ea:82:af:99:18:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:48:83:84:80:6A:A4:AE:9D:7E:51:7B:2C:B6:8B:32:C1:CC:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD21BCCDA0511EF88DB6960762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.206.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:58:b8:21:b6:37:c4:7d:ff:d9:93:b3:e5:53:03:f2:03:9b:
fa:80:56:bb:8f:60:15:a9:20:04:74:ca:aa:72:44:50:ae:94:
62:2d:48:0e:23:16:c0:99:25:08:0c:f1:95:f5:09:cd:ac:c9:
3f:a6:54:98:c5:d8:18:dc:89:9d:ee:d9:4f:da:c3:c4:d1:ee:
b2:4f:16:e1:db:d3:7c:e3:18:f2:84:e0:f0:bf:94:ae:67:f4:
85:fa:51:e1:e0:2b:8c:dc:92:9c:0f:98:50:ec:9f:0f:92:4e:
46:eb:f1:32:93:7e:5f:28:47:81:97:5d:5a:7e:bc:f6:42:08:
c7:47:62:0d:d1:0d:be:de:c4:5f:69:6a:a9:f0:35:bf:76:78:
84:fe:ee:b7:67:b8:43:0d:ec:d4:70:84:cb:59:ed:f2:7b:b8:
95:a4:a7:9d:37:e5:16:5f:0e:66:17:3b:71:85:a1:67:b3:de:
db:d4:b4:6b:0e:51:57:02:20:5a:b6:e1:e2:77:f8:06:47:20:
62:38:97:8e:0b:35:a0:11:f2:1d:30:e5:0f:40:a5:81:ea:dc:
26:64:fa:7f:50:60:64:4d:d7:8f:05:31:19:a5:d1:06:4d:ec:
38:3a:b1:5a:00:11:e8:71:d6:8c:97:88:6a:2f:b4:bc:f9:6e:
d2:55:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:55 2025 by rpki-client