Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDBEE892DA4A11EF8C0B9DAE762E951A.roa
File: CDBEE892DA4A11EF8C0B9DAE762E951A.roa (raw, json)
Hash identifier: 1A9TStXMGCZQmeYPlc8TNiGrZ90r9M45ve/1LL1pKX4=
Subject key identifier: B5:D0:A9:A9:55:D2:FA:AC:8D:D9:F6:65:74:AD:6B:AE:86:79:D0:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014669
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDBEE892DA4A11EF8C0B9DAE762E951A.roa
Signing time: Fri 24 Jan 2025 12:00:29 +0000
ROA not before: Fri 24 Jan 2025 12:00:25 +0000
ROA not after: Wed 05 Mar 2025 12:00:25 +0000
asID: 202656
IP address blocks: 154.222.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83561 (0x14669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:00:25 2025 GMT
Not After : Mar 5 12:00:25 2025 GMT
Subject: CN=679380dd-df41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:89:49:48:4f:dc:05:7b:92:bb:26:00:64:
6e:82:3c:a8:2a:91:a3:62:8b:1e:00:db:15:1b:47:
fe:bb:bc:b2:57:33:b3:16:45:d9:4d:73:37:73:d3:
bf:c4:d1:24:a0:da:16:0a:87:6e:08:3c:8c:f2:d2:
b6:3c:50:16:70:fe:5b:bf:09:5e:68:82:ce:b7:6a:
34:a0:e0:72:04:d0:e9:d1:54:1e:1b:f6:b7:9f:18:
45:96:5b:a7:62:81:f1:3e:c9:e1:86:93:99:50:aa:
fb:87:5a:0e:00:ed:72:d2:cc:bd:70:0c:8c:4d:01:
82:bf:18:35:43:0b:7c:a5:c0:ad:af:d0:99:4e:ad:
99:85:51:35:a1:12:e0:9b:62:02:22:e2:aa:e6:91:
60:6e:16:d3:04:f8:e2:f3:96:19:ba:ff:e6:d4:3e:
8c:6c:a9:01:a6:ac:70:ba:8d:41:04:ea:c5:87:9a:
9b:5d:a7:e2:4d:ce:ef:eb:ab:34:3d:3e:5d:55:25:
f9:f1:3d:e7:8f:fe:d3:b7:7c:bc:72:7a:d8:1c:03:
e0:46:db:13:08:df:d0:9b:55:e4:c9:f9:e3:ca:de:
2a:f2:5d:d5:6e:0c:06:60:b8:26:e6:b9:7e:85:9c:
08:ad:f5:65:c0:dc:5d:66:4f:78:57:b9:70:ab:f4:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:A9:A9:55:D2:FA:AC:8D:D9:F6:65:74:AD:6B:AE:86:79:D0:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDBEE892DA4A11EF8C0B9DAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ff:6b:a1:84:cc:7a:c9:33:5a:7a:e6:5d:b7:ae:96:77:2f:
30:25:32:b4:21:5d:c9:bf:64:bf:90:5d:70:1d:1b:f3:94:85:
64:33:98:0d:93:50:4e:c3:b7:97:4e:a6:36:b0:eb:5f:ca:24:
c5:f6:e4:36:23:f7:34:50:c1:0c:20:9a:fe:1d:76:bd:04:00:
70:39:37:74:92:61:69:fa:e2:5a:bd:f8:6d:77:3d:3f:d6:2b:
c4:3e:a5:2e:2b:61:83:14:81:f4:13:b6:96:94:72:f7:72:06:
3a:b5:5a:02:89:78:cf:06:d4:0a:7e:f5:0b:86:ac:c5:3b:d6:
c9:08:e6:82:09:42:5f:2b:79:30:f7:78:c3:db:ad:04:63:9a:
0a:50:bd:a4:eb:f7:de:d8:b2:1e:4a:17:0f:f9:b3:d7:0a:04:
9c:96:68:11:9a:12:03:7a:3d:fd:d6:9f:fb:12:3e:7f:66:c6:
e6:b7:02:6a:50:64:47:4b:c2:5c:9d:e7:11:b7:6c:4c:51:c7:
16:bd:1e:5a:ce:98:56:b0:ff:08:dc:96:9c:a4:41:d1:d3:37:
0a:7e:95:0e:d0:06:eb:da:73:42:16:ce:85:67:79:e0:a8:18:
54:bd:cb:99:5f:9c:e9:49:ca:58:77:56:fa:86:17:00:2a:51:
1f:79:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:08:02 2025 by rpki-client