Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBEC20CCDB2511EFA8CB107C762E951A.roa
File: BBEC20CCDB2511EFA8CB107C762E951A.roa (raw, json)
Hash identifier: N2bQVtfRzXcaDr1Lu6nu31Q0KEVMHiR9HC4fZQx9EqE=
Subject key identifier: C0:85:D0:11:38:66:22:13:77:95:3B:86:59:34:4E:6A:CB:F0:36:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBEC20CCDB2511EFA8CB107C762E951A.roa
Signing time: Sat 25 Jan 2025 14:07:38 +0000
ROA not before: Sat 25 Jan 2025 14:07:35 +0000
ROA not after: Tue 04 Feb 2025 14:07:35 +0000
asID: 7018
IP address blocks: 154.207.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84415 (0x149bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:07:35 2025 GMT
Not After : Feb 4 14:07:35 2025 GMT
Subject: CN=6794f02a-6a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:17:16:93:df:94:f2:cc:51:b0:5a:d4:16:
32:a8:14:df:8c:bf:b2:8f:c8:6e:63:6c:98:cc:09:
b0:54:e1:13:5e:e6:98:d6:df:f1:f8:0c:6d:80:72:
05:92:dd:f0:46:0d:89:74:13:f3:40:43:49:f5:24:
97:2b:7b:88:59:f3:23:49:36:e4:27:57:38:b0:4f:
93:e6:11:7f:a1:9b:9c:5d:22:6b:90:af:0b:2a:45:
b3:f4:e8:59:b1:2a:ac:57:28:9c:15:a5:94:28:ac:
80:e9:24:18:ed:83:be:15:7d:10:9a:05:e8:d3:c6:
66:98:53:a7:2a:c0:df:1a:68:2a:8b:aa:e1:80:af:
fd:76:83:27:51:60:ef:6f:74:16:fa:14:7c:a2:c2:
18:b1:01:cf:17:bc:c8:64:ef:83:8e:68:19:f9:11:
3a:6a:28:d9:7a:ca:87:e8:db:05:7d:be:6f:22:ee:
c9:ea:b1:92:94:78:ee:9a:8b:2c:00:e3:d9:83:2a:
3f:83:bc:f3:01:95:44:fe:34:12:bb:65:8f:51:a2:
1b:51:2d:f3:8b:7c:7c:31:41:06:c3:41:25:a2:33:
ec:77:0c:d5:90:01:49:5a:e6:ab:c2:58:64:a3:bb:
b8:78:dc:93:98:77:8c:64:b0:75:dc:e4:1a:f0:b9:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:85:D0:11:38:66:22:13:77:95:3B:86:59:34:4E:6A:CB:F0:36:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBEC20CCDB2511EFA8CB107C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.152.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:13:f2:88:22:57:e6:27:a9:09:ad:80:27:72:40:a4:a7:65:
55:71:e2:25:82:59:11:24:b5:bc:63:88:a4:ee:cf:8b:cc:5b:
25:a7:89:17:40:85:ff:d7:55:1f:e5:7f:c3:c0:63:eb:f7:6c:
f7:03:f8:c8:53:0e:f8:fc:a8:bf:74:3c:63:8d:35:70:c1:de:
67:9c:14:49:a1:2c:99:9b:74:8d:f9:07:10:ee:d9:7b:c2:83:
24:76:10:71:27:e8:d7:d8:2e:ae:0a:bb:aa:18:27:28:04:d0:
84:a2:57:12:1d:e6:f3:5b:b0:1f:3d:ec:fa:44:82:48:23:8b:
f9:79:aa:30:1d:22:7d:13:51:83:d1:26:10:36:12:a9:c5:54:
be:e6:1a:76:54:96:2d:e0:28:44:1d:de:9c:93:40:2e:ec:bc:
89:5d:79:5e:63:66:83:74:b9:91:83:3e:4d:25:86:7a:32:3b:
0c:0a:05:2b:4d:d1:1d:cb:f7:1c:56:54:53:6c:58:a4:ee:cb:
88:e6:70:be:2b:9a:79:f7:9e:4c:6b:26:b4:a1:71:65:df:4a:
ea:03:6f:96:c4:4e:97:35:1a:77:ab:8e:57:8b:3a:94:c9:d3:
a2:57:38:71:6e:25:7e:6a:51:61:51:77:c9:ec:b6:c1:21:63:
7b:0a:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:32 2025 by rpki-client