Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3615FED40611EF839CEB4D762E951A.roa
File: 7B3615FED40611EF839CEB4D762E951A.roa (raw, json)
Hash identifier: S4M6zTb1/RSGAYby2lrA+kVWCVDC2wEz+KteUkJLEXE=
Subject key identifier: E3:A9:C9:A8:23:60:36:AC:B1:A3:1C:E8:8A:02:EA:47:B9:CA:8B:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3615FED40611EF839CEB4D762E951A.roa
Signing time: Thu 16 Jan 2025 12:36:17 +0000
ROA not before: Thu 16 Jan 2025 12:36:14 +0000
ROA not after: Sun 16 Mar 2025 12:36:14 +0000
asID: 17561
IP address blocks: 154.206.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80952 (0x13c38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:36:14 2025 GMT
Not After : Mar 16 12:36:14 2025 GMT
Subject: CN=6788fd41-bc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:ff:2a:cf:72:1b:11:11:be:4e:93:40:fb:
9a:71:ce:65:52:53:4c:0c:13:29:1c:03:b1:e5:e0:
fd:95:f9:43:5c:d5:53:e1:6e:a4:5c:5a:28:95:00:
e4:42:d2:90:f3:05:6b:5a:fd:2f:55:14:c9:87:97:
ce:41:e4:34:40:10:79:46:3e:10:d4:1a:fe:b3:d0:
ec:ed:e8:9b:5d:19:52:ff:74:63:78:29:0b:8c:7f:
1a:04:db:6a:0d:09:64:1b:63:fc:24:87:29:d4:11:
be:df:c9:f9:8d:e3:d2:be:3f:8e:c1:98:31:65:27:
32:ad:df:46:c3:a1:af:86:0b:24:f9:70:c0:22:31:
74:bd:c7:ff:c6:42:6b:be:15:1c:eb:f3:7c:55:b9:
e1:30:39:5a:c4:26:81:33:ed:37:33:13:cf:c0:45:
0f:89:be:69:69:4c:95:01:17:1c:56:87:55:dd:b8:
5d:15:bd:ae:22:f7:65:37:38:47:82:d2:54:10:bb:
bc:da:68:66:d6:b7:e9:f3:07:f1:d7:4f:ce:83:e6:
bb:ea:02:f9:ce:d4:35:cf:b7:9c:97:68:64:21:a9:
96:00:60:e8:67:1f:29:0e:c4:2b:96:03:44:52:69:
26:75:e1:fd:11:27:b1:54:3c:f1:47:2d:4d:1c:60:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:C9:A8:23:60:36:AC:B1:A3:1C:E8:8A:02:EA:47:B9:CA:8B:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3615FED40611EF839CEB4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.222.0/24
Signature Algorithm: sha256WithRSAEncryption
94:69:d0:62:cb:0f:4a:23:e2:87:d6:a8:d3:57:ed:a2:8c:b1:
ef:78:85:48:39:f4:96:8e:cc:fd:b0:dd:a2:18:cc:4f:39:7b:
0e:26:15:dd:44:21:06:5e:61:57:7d:63:94:0d:9f:c6:fc:5e:
02:ed:73:ac:85:dc:93:11:45:44:0a:20:81:92:30:d2:fa:0f:
5c:ed:f4:98:c4:b8:fe:f5:82:c9:f4:17:27:6e:50:44:df:27:
f0:9c:77:85:3c:39:81:7e:40:0d:73:5d:fe:9a:7a:17:a7:3b:
95:ca:ad:a7:b9:3d:63:4f:1f:03:b3:21:9d:14:1c:3e:1f:cd:
a8:7e:02:bd:59:21:06:e9:46:90:ba:c1:33:e3:31:e9:04:8b:
85:0d:01:dc:a6:e8:52:7b:2f:d4:60:15:46:51:0e:25:40:3c:
28:b1:36:75:3b:23:ec:21:bb:da:ff:df:8e:e1:c1:57:8d:48:
42:43:2a:f6:ee:29:f5:3b:69:cf:77:99:3d:89:8a:63:1e:35:
02:08:1c:76:f0:8e:66:d8:b2:4d:96:a3:22:0d:ca:b3:00:f3:
df:a8:14:66:c1:ba:27:af:13:7e:f7:9d:6f:f2:98:e4:96:de:
dd:f5:fc:08:17:bc:3d:4e:d7:6a:31:5b:d2:5a:91:9f:a2:53:
10:dd:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:29 2025 by rpki-client