Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91550420C2A511EF8A210D60762E951A.roa
File: 91550420C2A511EF8A210D60762E951A.roa (raw, json)
Hash identifier: khdsw525TxYFoAnQT7g6Ho8RD3OtmJbA4D6oHyVIsmo=
Subject key identifier: CF:62:77:0E:08:BC:7B:EF:94:0C:65:BF:2D:82:09:3E:4C:D1:52:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01255A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91550420C2A511EF8A210D60762E951A.roa
Signing time: Wed 25 Dec 2024 09:49:44 +0000
ROA not before: Wed 25 Dec 2024 09:49:40 +0000
ROA not after: Sat 15 Feb 2025 09:49:40 +0000
asID: 138915
IP address blocks: 154.206.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75098 (0x1255a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:49:40 2024 GMT
Not After : Feb 15 09:49:40 2025 GMT
Subject: CN=676bd537-917e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:02:2c:ce:90:c5:ef:44:50:37:fc:83:3f:
31:dc:72:e4:8d:fd:ce:09:db:2c:6c:43:ac:f6:bc:
fe:14:bf:6e:64:33:cb:f1:6c:7a:e9:0c:5a:9c:54:
cb:6e:f7:51:5a:4d:05:de:3a:73:b4:8d:05:49:26:
af:07:9b:ed:45:b8:5f:c8:1d:7a:98:57:6a:a8:eb:
30:e6:2b:bd:67:6e:4d:7c:3f:eb:98:8b:61:b2:86:
0d:66:3e:5f:2f:cb:52:61:dc:41:ab:26:99:8c:af:
72:ff:c7:2f:7c:06:36:d4:26:6b:f9:5f:7a:b3:23:
bf:d9:c9:8e:03:fd:1b:88:68:e6:00:15:83:d7:24:
52:4b:4f:15:e3:25:8e:43:2c:c7:c8:04:83:6f:63:
7e:d8:61:fb:d5:a0:71:19:8d:09:96:c4:d1:1e:b6:
2d:14:1b:85:be:9d:62:6a:f1:7f:e8:00:0a:1b:7b:
96:08:7b:d2:dc:89:19:d4:94:7e:45:79:57:fc:1c:
1e:77:a9:b3:b5:c9:da:f0:b5:ed:1f:8b:28:73:f2:
17:37:db:4b:67:99:bd:6e:43:9d:65:03:7a:51:29:
ab:2b:c7:28:f7:e5:cf:39:48:b1:b1:7a:65:90:ad:
f6:3f:08:3b:e7:96:12:3e:36:9a:21:a8:47:39:2b:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:62:77:0E:08:BC:7B:EF:94:0C:65:BF:2D:82:09:3E:4C:D1:52:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91550420C2A511EF8A210D60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0/19
Signature Algorithm: sha256WithRSAEncryption
d7:b6:21:22:69:cb:97:a6:86:e0:79:01:d9:2e:63:85:53:39:
06:09:4e:7d:94:8f:44:01:1e:0f:a0:5d:53:df:85:78:d4:6a:
e6:61:4b:51:e4:96:7b:b0:ab:fd:2e:6a:0b:e4:86:1c:eb:86:
b1:4d:15:9d:9a:ab:87:78:37:5b:e8:52:90:dd:4d:14:18:f0:
a4:0c:02:1f:64:cf:1b:fe:b1:48:4b:52:1c:b5:68:5d:0a:59:
31:35:f0:ce:79:de:50:b5:b5:4e:1f:5c:6e:b6:dd:81:18:f7:
4a:1e:93:1a:99:b1:ef:c0:71:9a:da:a1:7a:c5:c1:40:92:ee:
2a:5c:b2:a7:82:15:d9:73:77:07:46:c5:3d:e6:cd:12:dd:3c:
64:22:33:1d:49:08:c6:e4:7a:3c:fe:48:0c:7c:cd:0d:f5:20:
9c:5a:1a:27:f0:6a:a9:b3:bc:cc:d8:13:12:a1:44:07:90:69:
b7:9f:14:e1:b2:61:36:4b:ba:60:13:fb:3b:d6:7b:b8:d9:b4:
8f:26:90:6a:58:cb:ae:9c:6c:2d:17:a2:83:c3:bf:82:50:59:
08:9b:c7:88:fd:7a:2d:6f:46:68:52:d2:88:d6:83:a2:9a:c7:
26:cc:79:60:70:5a:67:fd:b6:90:1c:df:57:f8:ca:c5:6e:02:
b9:0c:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:16 2025 by rpki-client