Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC806A8D3FF11EFA6DCF0A1762E951A.roa
File: BEC806A8D3FF11EFA6DCF0A1762E951A.roa (raw, json)
Hash identifier: XV771ul0m2HiVYM2ufspasKlV2rCxIgjkozHE4szoCA=
Subject key identifier: A4:37:F3:0E:F5:92:C6:89:05:38:06:B6:8D:86:9F:0D:C1:F6:18:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC806A8D3FF11EFA6DCF0A1762E951A.roa
Signing time: Thu 16 Jan 2025 11:48:04 +0000
ROA not before: Thu 16 Jan 2025 11:48:01 +0000
ROA not after: Sun 16 Mar 2025 11:48:01 +0000
asID: 17561
IP address blocks: 154.206.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80904 (0x13c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:48:01 2025 GMT
Not After : Mar 16 11:48:01 2025 GMT
Subject: CN=6788f1f4-2ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:a6:78:30:26:2d:93:b8:5e:42:48:ac:3f:
14:f2:b6:29:1f:ff:58:2d:38:8a:58:f5:95:16:79:
bc:21:58:8a:c4:fa:a1:65:08:37:b7:b6:bd:7c:c7:
dc:86:ca:a1:fe:ee:57:f6:09:3d:ae:a9:c3:30:f9:
3a:ec:ae:37:ae:e8:38:84:eb:a7:00:cf:72:b9:66:
e9:7c:96:bb:50:46:f7:7e:28:50:61:64:18:d4:d7:
74:5b:89:b3:be:97:9e:82:4c:cd:15:8e:d8:24:9e:
af:91:8b:87:66:83:e2:f2:4e:9b:7a:55:12:02:40:
09:0b:83:f7:22:55:7a:7b:aa:77:8b:51:0e:7a:3d:
46:96:4c:3b:ad:7f:bd:4e:26:97:26:20:6c:b0:21:
fe:6c:12:66:12:22:36:f0:87:fe:9e:56:e8:7e:68:
b0:a0:57:99:20:76:38:ca:2a:dc:1b:88:18:10:ca:
5a:5a:d7:f9:5d:07:88:6e:5d:06:00:87:71:75:4e:
5b:2c:61:c3:18:0f:02:e9:d6:89:46:1b:c1:47:6e:
d6:2b:f6:4c:d8:c6:a3:71:87:9f:a1:96:90:6d:69:
0d:61:a5:e8:53:e0:4d:fd:c5:79:a9:64:a1:64:b3:
2d:d1:67:da:7c:73:13:3f:59:53:ab:04:5c:cd:8e:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:37:F3:0E:F5:92:C6:89:05:38:06:B6:8D:86:9F:0D:C1:F6:18:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEC806A8D3FF11EFA6DCF0A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.198.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cb:31:3a:41:ca:41:5c:65:a6:54:61:67:78:83:eb:54:53:
ce:a5:18:a0:bf:cb:e5:19:44:41:f8:15:91:f0:ae:19:29:44:
83:b4:59:d5:0a:c7:bb:db:37:cc:0d:af:52:d4:3e:a2:71:27:
70:c5:e0:0d:c4:88:1d:d2:23:25:80:e2:8e:12:f4:6f:d5:f2:
6f:7e:b6:f5:d5:66:ed:8e:17:c3:4e:9b:38:94:24:91:8b:10:
d7:14:24:34:5b:81:d8:4a:8c:09:75:18:b8:22:21:20:f9:06:
3f:30:5b:4c:66:0f:65:87:71:a9:14:97:02:f1:09:af:07:28:
c7:79:35:7f:d6:12:f9:c3:a9:f4:90:14:58:2f:b4:b6:4d:21:
f5:7a:4f:4a:7e:07:10:0e:a0:31:6c:0c:13:d6:01:05:2c:16:
c2:ff:6c:4a:11:e2:3c:a0:bb:80:d6:7d:73:d4:2e:ab:eb:87:
c7:29:fb:f1:86:76:7b:94:d1:e2:a9:6e:bb:d1:16:01:cd:16:
af:fc:08:0f:e7:5d:fd:36:61:b7:d2:0e:f1:8c:95:03:35:d9:
4a:70:d7:76:83:aa:d6:47:99:c1:38:62:38:8b:6e:a3:44:2d:
7a:6d:ee:fd:9b:8e:6c:d2:a0:ac:58:50:a3:d6:b1:51:00:77:
f7:3b:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:37:23 2025 by rpki-client