Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1F5AFD6BED611EF82A7F940762E951A.roa
File: B1F5AFD6BED611EF82A7F940762E951A.roa (raw, json)
Hash identifier: pSslvVn6q9zJfV/peW39obZpLt9BzzAIykbc052U/eI=
Subject key identifier: 21:0C:44:48:49:F9:BA:31:A0:3E:72:A1:82:C5:BA:4B:5F:1A:FB:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1F5AFD6BED611EF82A7F940762E951A.roa
Signing time: Fri 20 Dec 2024 13:31:19 +0000
ROA not before: Fri 20 Dec 2024 13:31:15 +0000
ROA not after: Sun 02 Feb 2025 13:31:15 +0000
asID: 202656
IP address blocks: 154.222.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72934 (0x11ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:31:15 2024 GMT
Not After : Feb 2 13:31:15 2025 GMT
Subject: CN=676571a7-5142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:b6:19:c3:40:fa:ab:44:ac:3e:96:a9:b9:
d1:f3:70:87:64:d8:b1:55:e5:fa:7c:56:bb:4d:f1:
ae:5f:c8:0b:bc:b3:ce:be:24:02:b6:2b:f9:9b:9d:
c8:09:14:f3:e0:b6:16:1e:f9:7c:b5:27:d6:42:8d:
99:61:31:ce:18:c9:ba:8e:a7:11:82:c5:52:49:d8:
bd:e4:85:80:68:97:4c:df:7a:c5:4e:ee:49:b9:fc:
a2:b3:55:b5:48:a6:56:d7:ba:a5:36:97:95:be:80:
e9:b5:9c:53:21:8f:20:c7:71:d7:68:88:08:95:ab:
8f:27:de:ea:fc:95:4b:14:ca:de:ec:60:25:15:97:
40:76:62:55:66:c6:29:d8:e9:13:53:79:4d:6f:61:
f5:53:c8:7a:84:6b:e8:20:b4:54:50:df:26:64:d7:
1c:f7:c4:ec:48:0f:d9:18:c9:db:50:92:77:6e:49:
ec:73:97:c2:29:f0:a2:e0:30:e4:3d:8a:ed:d3:4f:
80:b0:92:0d:52:2d:47:f2:90:9d:a0:f5:41:74:df:
b7:98:d4:f6:5a:97:9d:5c:4a:bd:6a:fa:7e:3f:ec:
bf:33:50:0d:96:9f:47:40:ea:fc:1c:b0:f5:b3:11:
6c:39:82:d4:79:f0:fa:63:7a:27:77:17:5d:45:c6:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0C:44:48:49:F9:BA:31:A0:3E:72:A1:82:C5:BA:4B:5F:1A:FB:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1F5AFD6BED611EF82A7F940762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:51:e4:89:2e:f3:e5:65:d1:96:b2:58:67:29:f0:d5:2a:b2:
be:bd:53:1d:76:d1:f4:81:e8:b5:2e:86:ae:96:31:20:16:18:
cc:91:46:01:aa:d3:47:b0:11:38:22:69:b1:9b:db:ae:e4:1f:
9c:e3:8e:a1:8d:cf:bb:b0:60:c8:5a:53:0d:43:97:be:eb:cb:
0e:f5:9e:52:43:c3:32:28:41:d7:18:9c:9c:1e:c9:0e:31:a2:
6f:09:65:1f:c4:70:ce:14:db:9d:85:21:0d:1b:06:6f:5a:1f:
de:af:71:23:ae:ea:1d:b4:7e:78:34:d0:ba:cf:59:57:c7:65:
1a:ea:04:1b:1c:d7:62:3d:ef:21:13:39:ed:58:0f:8f:9f:30:
b5:34:e3:25:79:a2:c0:c5:bc:b3:17:ea:36:77:ce:d6:d2:54:
d9:13:65:a5:d7:7b:28:13:9b:1a:32:be:2e:bb:74:32:f2:c1:
82:19:8b:ed:cb:0a:c2:2e:af:02:57:66:c4:4b:41:0f:f0:33:
ad:81:63:bb:f9:04:c9:8a:25:71:7b:28:8a:76:7b:17:57:53:
24:d7:23:ac:94:26:1c:c6:ca:cb:17:9f:b3:96:97:ef:e5:ef:
cf:91:27:35:14:c7:e1:37:23:45:46:31:af:af:1a:d4:52:7d:
bd:f1:21:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:31 2025 by rpki-client