Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1CCECCED40311EFB5B98CBA762E951A.roa
File: D1CCECCED40311EFB5B98CBA762E951A.roa (raw, json)
Hash identifier: UuoYvKey+Apa60I3nxOPRy+nzACTbIwkD+F54a0i900=
Subject key identifier: 4D:FB:DF:C3:B4:DD:FC:FD:CE:2E:33:D1:B6:68:BB:B3:79:7C:47:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1CCECCED40311EFB5B98CBA762E951A.roa
Signing time: Thu 16 Jan 2025 12:17:14 +0000
ROA not before: Thu 16 Jan 2025 12:17:10 +0000
ROA not after: Sun 16 Mar 2025 12:17:10 +0000
asID: 17561
IP address blocks: 154.206.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80932 (0x13c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:17:10 2025 GMT
Not After : Mar 16 12:17:10 2025 GMT
Subject: CN=6788f8ca-9d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:50:43:90:1b:76:3a:3f:ec:3b:d7:21:6d:
a3:7d:07:c5:ce:4e:8d:49:b9:63:90:5e:1a:c3:36:
2f:53:35:60:26:18:9f:6a:14:91:92:6a:06:cc:03:
56:86:f6:31:7a:ee:71:2e:1f:00:24:01:8a:3a:e2:
72:d0:80:2b:7f:bf:d2:ea:8a:52:f2:44:f8:32:70:
bf:6f:e6:ec:ad:32:34:a7:27:3b:71:9d:f6:58:69:
da:d9:89:0d:d5:d5:7c:f7:2f:1d:86:6a:c7:3c:be:
ac:f4:5e:dd:f7:46:ad:fd:48:ac:8c:c4:61:81:6d:
f6:df:67:71:3b:f0:b4:06:69:59:7d:6b:62:28:c1:
d7:79:38:3a:29:14:6d:bd:05:32:26:1d:1d:f8:30:
67:6d:71:f1:aa:e9:79:8f:60:a4:bd:58:0f:9c:4c:
5d:d6:cc:4c:d2:e4:19:bf:0d:f4:1b:60:4f:ba:56:
7d:69:e0:f1:e9:8b:65:f0:b2:12:ce:56:d1:cb:40:
99:c7:97:8b:36:6d:a4:47:98:e6:7e:01:a6:c0:92:
45:7e:1b:a2:19:3f:08:23:e0:a2:b5:c3:d0:98:36:
cf:14:3f:dc:27:12:e1:1c:0b:43:af:8b:5d:d1:40:
fb:96:9d:99:47:41:cb:a8:ed:00:54:14:62:ec:96:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:DF:C3:B4:DD:FC:FD:CE:2E:33:D1:B6:68:BB:B3:79:7C:47:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1CCECCED40311EFB5B98CBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.212.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7c:75:76:74:9e:2a:00:fe:aa:52:b6:9d:06:bc:b2:6c:ca:
50:d7:52:f3:85:af:bd:f2:31:e0:1c:53:8c:29:8c:51:5c:81:
b8:90:0f:45:d9:5c:9a:f0:b0:49:7e:dc:ab:f4:35:e7:60:ee:
4e:1c:56:b8:fd:bc:a8:09:c1:8c:f3:d0:1b:cb:73:88:eb:25:
91:4c:88:0e:78:32:0c:fd:85:88:69:f6:9a:a2:0f:05:2e:82:
08:e6:67:95:95:73:bc:f1:10:88:58:b3:15:ad:62:c8:15:56:
0f:22:e3:34:fd:9d:5b:95:f5:cd:5c:c9:2b:4f:85:f3:73:8c:
95:f1:45:45:27:e6:b3:c6:71:b4:b4:de:13:35:25:9e:e3:1d:
21:2c:74:bb:9c:bb:9f:8d:b1:17:4f:b4:90:b8:a6:c3:38:a7:
ad:5d:bf:3d:a0:5f:c0:52:ab:3b:8b:eb:b2:57:a9:2f:ad:1a:
88:05:6a:de:19:72:44:2c:92:19:53:5f:b2:a3:13:39:10:e4:
ef:01:84:e4:e9:e7:67:2f:1d:86:c0:92:61:c0:04:9a:61:d2:
8c:61:6a:ae:02:56:51:61:a7:a7:ff:12:f9:46:f3:75:3d:cc:
61:d5:84:54:83:2d:c0:09:6f:5a:b9:af:a6:35:a5:02:55:15:
f3:2d:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:17 2025 by rpki-client