Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD717716D8AF11EF83F6C65E762E951A.roa
File: CD717716D8AF11EF83F6C65E762E951A.roa (raw, json)
Hash identifier: HFI0VSBIun4s13QQJk/zhsMTgDFu0Igj63kLWbCLXjs=
Subject key identifier: 0C:20:E6:CC:DA:C1:6F:CD:56:83:B6:F7:D4:1B:26:99:D6:50:DD:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD717716D8AF11EF83F6C65E762E951A.roa
Signing time: Wed 22 Jan 2025 10:58:25 +0000
ROA not before: Wed 22 Jan 2025 10:58:21 +0000
ROA not after: Sat 08 Feb 2025 10:58:21 +0000
asID: 150008
IP address blocks: 154.206.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81634 (0x13ee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:58:21 2025 GMT
Not After : Feb 8 10:58:21 2025 GMT
Subject: CN=6790cf51-328a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:d2:7a:c0:61:43:80:d5:81:b2:c2:76:74:
fa:c8:97:50:02:8c:b3:da:9d:5e:67:31:79:b9:72:
de:ac:60:9f:39:ea:69:2a:97:28:05:03:45:61:0c:
28:39:26:f6:37:e6:7e:cc:32:d5:fe:fa:25:ab:d1:
ff:eb:a8:2e:c2:1f:bb:28:48:d5:b0:52:b5:c8:6b:
26:2e:1f:29:68:ac:94:d1:de:1c:ee:ba:4f:dd:a2:
70:7d:e4:bd:1f:63:76:dd:16:0c:36:53:42:bd:f5:
f6:e3:ef:cd:05:fb:46:e4:19:e4:d7:95:24:8d:d8:
fa:7c:75:08:e9:92:6c:cb:4d:41:e2:7f:ab:69:1e:
32:f4:e5:d5:4d:f9:43:5a:7b:53:2b:16:32:c9:d1:
54:a2:21:17:6f:92:e9:b9:7f:48:b8:37:99:d8:ce:
1e:e4:b7:62:84:65:f9:0e:59:b2:a5:6d:82:64:09:
13:71:b1:b5:ac:84:a3:bd:01:ea:8c:de:df:4e:09:
c7:a4:6b:6b:82:e4:1f:79:3d:ba:1a:6e:f8:43:e8:
cd:ca:63:3e:ea:02:96:55:e9:21:e0:35:c6:bb:97:
15:2d:fc:85:86:4f:6d:9c:f7:0a:13:14:98:e8:6f:
4b:33:0c:a9:ad:7b:3d:02:19:c7:39:c5:47:02:7c:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:20:E6:CC:DA:C1:6F:CD:56:83:B6:F7:D4:1B:26:99:D6:50:DD:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD717716D8AF11EF83F6C65E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0f:d3:a7:9f:cf:bf:e7:0f:07:6f:b4:f8:8a:e2:0b:b0:51:
1a:3a:be:b5:34:1b:c2:9c:b6:8c:aa:ff:1c:42:a5:b5:02:c7:
12:e8:93:6b:aa:37:2b:2d:2b:49:f3:8d:de:38:38:4f:f5:3d:
05:f7:56:4c:82:4e:e8:89:88:eb:9a:24:5a:36:e9:b3:6c:37:
93:46:ed:b2:a3:e6:49:8d:14:dc:e2:b4:08:45:4e:8a:c1:d0:
78:b5:c1:93:05:6d:18:c9:fd:3c:24:59:3a:4f:2c:61:ad:4f:
87:1d:a8:e1:f7:d1:a1:c9:bf:31:8e:2c:99:c7:fb:5d:55:26:
21:1d:36:ee:96:3e:14:e2:09:32:84:54:a9:fd:f2:4c:a0:b9:
7d:32:03:b5:16:15:2b:b0:58:a0:9d:8e:82:1e:2d:c6:88:39:
d7:02:9e:f0:e8:47:f9:46:c0:ca:98:ec:e6:cf:d8:55:7a:3a:
10:34:bb:db:f2:06:c9:8a:ec:e5:d7:88:95:50:0b:1b:ab:38:
e9:84:4d:19:7a:9b:de:ef:dd:2e:2d:9c:71:c3:20:f9:03:17:
bc:61:25:e5:fd:be:33:7e:8b:46:43:5b:72:55:d8:c7:09:4e:
a0:2e:09:a8:07:7f:7c:43:af:b4:43:f7:3d:14:d6:13:f4:89:
53:15:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:07 2025 by rpki-client