Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8F3B450DD7511EFB034EA97762E951A.roa
File: B8F3B450DD7511EFB034EA97762E951A.roa (raw, json)
Hash identifier: Vra2sczizgfOaAsd+sNlctc4Iob4/RH1BsbF7T4ui+M=
Subject key identifier: 4B:72:92:FE:E4:FF:11:7B:C7:B8:B3:B5:D4:01:9F:A0:28:D1:3C:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8F3B450DD7511EFB034EA97762E951A.roa
Signing time: Tue 28 Jan 2025 12:45:16 +0000
ROA not before: Tue 28 Jan 2025 12:45:12 +0000
ROA not after: Tue 25 Feb 2025 12:45:12 +0000
asID: 5065
IP address blocks: 154.206.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85270 (0x14d16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:45:12 2025 GMT
Not After : Feb 25 12:45:12 2025 GMT
Subject: CN=6798d15b-db07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:dc:10:d4:94:75:a7:1f:00:e4:82:b5:b3:
ba:58:41:f6:1a:e1:78:e1:3a:0e:9e:12:2b:5d:2e:
95:30:a9:ea:b2:da:a8:3d:9e:53:e2:33:d9:35:c3:
ab:6a:34:1e:f3:8f:c6:a4:1d:d0:ec:01:26:10:a6:
65:b9:97:13:95:ac:a5:92:0a:1a:9d:57:4d:0a:4b:
f7:21:11:0d:b9:08:4c:6f:a2:c5:ef:02:15:b2:b6:
22:6e:f9:27:08:9a:80:2f:bf:05:27:7e:8c:06:ed:
c5:9d:12:e1:1f:c3:01:08:09:5a:0b:59:9f:21:81:
ff:f3:d6:28:b3:95:2b:d0:2a:10:4b:0a:90:77:1e:
64:41:c9:6d:33:6a:25:de:4f:87:4d:e7:b4:c9:9a:
99:45:94:18:e3:53:d7:64:e5:94:de:50:56:ea:93:
aa:88:00:13:29:09:88:0b:a4:d0:eb:8a:56:7b:49:
14:53:33:f7:19:39:c3:1f:33:69:95:60:13:43:89:
ba:ff:48:11:cb:d5:2a:1d:ab:9c:d7:94:20:a4:4c:
c7:14:1e:ab:5a:1c:13:44:d2:c9:38:63:f4:3d:61:
2c:1f:b9:11:47:02:a9:53:df:29:1a:a0:22:52:bd:
9d:96:fc:72:8f:74:fb:4c:db:4e:ab:47:55:2b:a6:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:72:92:FE:E4:FF:11:7B:C7:B8:B3:B5:D4:01:9F:A0:28:D1:3C:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8F3B450DD7511EFB034EA97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.42.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fa:52:85:46:b9:bf:84:d4:1a:47:be:c3:bb:32:a0:1a:07:
c3:d8:40:87:73:34:bd:fb:52:ca:16:5c:77:8e:48:7d:a0:e8:
39:23:42:46:c5:c9:e2:88:74:58:81:94:c7:21:30:f7:69:04:
e4:55:d5:e0:58:ef:f8:b3:8f:2d:5c:0f:10:41:20:5a:14:69:
85:3d:e0:cc:f0:d1:ff:63:b6:89:24:2b:53:0e:73:55:8d:af:
08:2e:26:13:5e:ac:98:32:91:bd:6b:4a:2d:9b:b8:33:ed:a0:
0e:db:2e:a0:86:a5:b3:f8:c7:66:df:35:e2:39:db:b3:f5:78:
de:d8:ab:2a:24:1c:ca:25:07:7d:1e:80:9f:e7:e3:73:24:dc:
f7:91:eb:e8:95:50:3c:f1:96:5a:b4:2f:46:1c:24:27:2f:0b:
bb:71:f5:2e:6d:b9:79:6d:79:cc:4e:a7:e5:18:0e:e1:a3:2e:
ea:38:fb:5f:5f:8c:e0:bb:3b:a7:02:7e:45:d7:b2:72:dd:56:
f9:8b:86:82:03:87:b9:51:f0:d4:62:7a:34:c7:61:64:2c:ad:
d1:0f:34:3c:2d:82:7a:b1:a4:29:c6:9f:de:fe:71:f6:9b:cd:
66:4a:98:f1:a1:58:ba:ae:5c:ad:39:0f:3c:07:62:45:28:f4:
82:8a:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:16 2025 by rpki-client