Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3095C0D40211EFAFA975B5762E951A.roa
File: BB3095C0D40211EFAFA975B5762E951A.roa (raw, json)
Hash identifier: xYvwh1ALMYYuRGu+Xo3hnlC9TQ3jlOrbzLjfihDOht8=
Subject key identifier: 2C:5C:15:8D:2E:D8:96:62:51:32:ED:69:FA:B0:D7:2C:28:B7:AC:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3095C0D40211EFAFA975B5762E951A.roa
Signing time: Thu 16 Jan 2025 12:09:27 +0000
ROA not before: Thu 16 Jan 2025 12:09:23 +0000
ROA not after: Sun 16 Mar 2025 12:09:23 +0000
asID: 17561
IP address blocks: 154.206.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80924 (0x13c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:09:23 2025 GMT
Not After : Mar 16 12:09:23 2025 GMT
Subject: CN=6788f6f7-57ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:71:e1:0a:cd:f9:07:eb:42:31:12:50:fc:
c6:4f:9b:ba:40:7b:6e:45:aa:a0:5b:29:23:8f:c6:
6a:ed:04:4a:52:13:5b:be:b8:00:99:65:9b:d7:5b:
40:ff:d4:a3:9b:85:ea:c1:6f:b8:0d:6e:cc:ef:36:
2a:61:2b:53:78:19:c8:f0:f8:29:78:b2:ce:88:37:
ae:df:84:07:67:b1:b8:26:7f:00:d0:f8:a6:8a:51:
89:59:b4:89:c4:b0:44:9c:d4:24:dc:03:4f:af:1e:
ca:e2:3c:89:b5:ff:70:bf:35:bc:e8:5a:b5:c1:39:
25:90:cb:ad:c2:12:ae:e4:9b:4e:bf:aa:53:d4:21:
94:c2:f0:f6:fb:a2:bd:0b:1f:eb:58:91:79:cc:58:
d6:44:a1:10:c3:74:40:4b:2a:34:b6:bb:a6:98:36:
9f:f2:29:af:98:fe:78:4b:0d:56:b2:23:17:f6:3d:
df:e7:6d:78:6e:f9:76:7c:e2:d5:ce:64:f6:93:d8:
8b:b3:ba:94:6e:a6:25:ea:39:13:ee:f5:62:c6:2a:
3d:60:48:4c:62:0b:26:ee:3a:8d:0b:77:ce:54:3d:
79:0c:f8:0e:28:b1:98:e2:09:5b:c3:dc:a7:9a:9c:
16:fb:37:09:31:e3:dd:7d:0f:0a:ec:1f:9f:6f:ed:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:15:8D:2E:D8:96:62:51:32:ED:69:FA:B0:D7:2C:28:B7:AC:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB3095C0D40211EFAFA975B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
36:7c:97:9a:6e:fb:f2:ba:88:a4:03:d7:d3:c8:81:4c:96:17:
03:cf:44:73:c0:84:2f:1e:f7:84:d4:0f:d3:63:6b:f4:c1:bc:
dd:7f:c6:8c:26:93:ea:cc:10:af:77:64:ac:c4:a2:fa:64:d6:
86:94:84:af:eb:89:43:8f:a7:69:82:37:6b:37:7f:64:67:24:
b0:1b:48:f6:92:13:d2:75:10:94:ba:3d:7d:64:78:c4:7f:c4:
df:81:24:44:78:97:43:7f:81:cb:56:82:14:c4:40:fa:c5:9c:
ab:21:85:0b:49:e9:48:4f:3a:f7:f8:e6:5b:ca:c9:69:f0:be:
c4:b1:24:b5:c3:c3:38:0a:94:48:2e:00:91:5a:4e:2e:da:60:
3c:74:ed:eb:90:41:31:f1:66:79:27:43:27:3a:d9:bd:3c:eb:
e1:3e:25:42:05:d2:c2:fb:d3:d6:c8:97:5f:c4:91:4a:7c:36:
3e:1c:39:39:ec:78:5a:1c:17:62:1e:d1:ff:49:2e:56:85:f3:
7d:15:f2:56:ef:55:6a:14:14:3e:22:95:4e:6d:c9:a0:7b:ab:
e2:b8:c2:ae:57:70:1d:e4:b1:9e:f8:d9:89:9c:94:ab:40:ef:
00:8a:6f:d7:26:84:e1:71:e8:20:95:19:e5:33:90:cd:80:c5:
40:94:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:34 2025 by rpki-client