Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859D03BCB21011EF8DB5DB68762E951A.roa
File: 859D03BCB21011EF8DB5DB68762E951A.roa (raw, json)
Hash identifier: AXswtbKrghfB8Z3/NYKHCdJ29JMYSZGwUx7b03y9ZEw=
Subject key identifier: BE:03:75:82:FE:14:D5:43:AB:8E:69:0E:11:D0:3F:CC:00:80:56:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859D03BCB21011EF8DB5DB68762E951A.roa
Signing time: Wed 04 Dec 2024 07:22:30 +0000
ROA not before: Wed 04 Dec 2024 07:22:27 +0000
ROA not after: Sat 01 Feb 2025 07:22:27 +0000
asID: 150008
IP address blocks: 154.206.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71596 (0x117ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:22:27 2024 GMT
Not After : Feb 1 07:22:27 2025 GMT
Subject: CN=67500336-7ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:8a:53:13:62:58:81:15:ec:5c:e6:52:4a:
f8:e1:34:9c:f3:09:21:2f:f0:b8:7a:d4:f4:e5:a1:
da:13:28:36:99:e9:0f:54:78:c7:d5:94:d7:12:aa:
df:9e:97:05:c8:d2:33:bf:d6:0f:5e:26:94:e7:47:
e0:09:e3:74:6e:6e:21:4b:ca:91:09:c7:45:bf:c1:
89:8b:c9:6b:6b:7c:d8:99:f1:9b:e2:c7:75:d8:90:
51:32:8f:1e:ca:a6:db:3f:f7:ef:0a:91:8d:be:ba:
12:5e:a1:2f:7e:d2:c3:e1:9d:e8:63:70:86:7e:ce:
c3:2e:6b:07:2b:0a:58:e8:27:c7:81:5d:09:db:7e:
f1:39:99:6a:b6:54:96:c3:26:34:17:1a:28:8e:0b:
20:7b:b8:44:0e:45:5a:b6:bb:e0:6e:14:eb:b7:61:
48:9a:c2:3a:9e:4c:66:6a:11:38:78:bb:e0:6c:18:
ef:53:fa:fd:76:99:a7:d2:38:68:6a:ee:b7:4d:60:
ef:0a:f4:0f:7d:6d:60:63:3c:5c:97:ee:72:f8:a1:
86:f5:ef:24:85:24:4b:8a:8c:bb:00:8f:53:0f:b9:
76:0a:af:4e:49:22:b7:4f:ed:5c:24:97:b4:f7:f9:
77:13:e9:3e:13:c8:77:50:3e:ca:bd:b7:bd:90:f7:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:75:82:FE:14:D5:43:AB:8E:69:0E:11:D0:3F:CC:00:80:56:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859D03BCB21011EF8DB5DB68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.21.0/24
Signature Algorithm: sha256WithRSAEncryption
89:41:c9:44:af:8f:7f:b5:4c:57:a5:37:9b:42:0f:69:2b:0a:
bd:8d:31:c7:b4:c0:26:d0:db:dc:e2:a6:1f:5b:e9:a2:98:0a:
f2:9c:64:7e:06:73:b1:03:67:a9:d0:bc:8e:ed:d4:3b:dd:64:
dd:0b:af:e8:92:ef:46:7a:12:02:1c:36:bd:9b:b7:a3:76:24:
f3:34:16:a0:9c:9e:2a:4c:19:ed:2a:d3:b9:9a:7a:ed:02:b9:
d4:59:96:0e:3d:7b:ab:90:f5:ec:c0:89:00:7a:72:b5:b8:13:
0d:ac:73:cf:7c:e8:10:56:a6:ba:3b:f9:c5:ce:83:1b:3c:4c:
e7:d1:43:1a:41:8c:d7:6a:4f:e7:f9:c7:3b:24:61:ac:50:1c:
6a:5f:83:90:f2:d1:5a:8d:85:99:51:28:da:f0:f5:dd:49:25:
08:c7:d4:48:4a:c2:4e:4c:85:63:49:ea:9f:36:8b:e6:a1:b6:
30:7f:c5:41:3b:b0:7e:d2:76:53:17:09:15:d4:11:49:60:4b:
ae:88:dd:43:96:59:dc:1e:d1:ef:ed:4f:72:ca:7c:8f:4b:02:
2e:ff:de:2c:24:32:ad:10:4d:76:f1:2b:4f:05:56:70:12:58:
b1:ed:98:74:d3:8c:e3:e1:4e:0a:c4:25:f8:4c:3f:2f:98:d0:
32:f2:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:22 2025 by rpki-client