Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB2A6F8D3FE11EF9583709B762E951A.roa
File: DAB2A6F8D3FE11EF9583709B762E951A.roa (raw, json)
Hash identifier: VAjf8XB3qne/OFkPgJXL2FFPhK5HvHkU5FprysDCSac=
Subject key identifier: 79:66:16:50:4F:3E:F9:50:50:86:BE:1E:14:01:E3:57:9B:F2:58:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB2A6F8D3FE11EF9583709B762E951A.roa
Signing time: Thu 16 Jan 2025 11:41:42 +0000
ROA not before: Thu 16 Jan 2025 11:41:37 +0000
ROA not after: Sun 16 Mar 2025 11:41:37 +0000
asID: 17561
IP address blocks: 154.206.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80898 (0x13c02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:41:37 2025 GMT
Not After : Mar 16 11:41:37 2025 GMT
Subject: CN=6788f076-35a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:b2:2f:17:16:01:61:64:24:0a:91:ff:a5:
c1:53:27:cc:73:fe:dd:6f:35:9b:ff:93:8e:3b:a9:
c0:d3:43:02:ff:11:cb:af:c0:1e:7c:ec:19:33:28:
2e:e8:07:23:17:6a:8a:4d:bf:83:98:37:90:99:23:
d2:fb:14:46:20:a8:13:33:1e:70:73:3d:b7:39:81:
39:eb:05:ba:93:ea:38:c7:e8:80:39:9f:0a:2e:62:
93:96:a6:f2:cd:a6:a4:00:9a:53:5e:c6:fb:5a:8a:
da:83:b5:50:6a:d4:be:e8:e0:27:d9:c1:99:71:f6:
25:24:19:19:6e:42:4c:52:85:0d:28:7c:95:9b:43:
1c:91:50:dc:6d:3e:96:9e:fe:9b:80:0d:63:60:88:
a3:3c:7d:34:52:86:56:9a:48:f3:d5:ac:36:ea:8d:
fc:6d:93:53:38:3d:b7:d1:9a:00:f6:91:01:21:00:
fc:dd:b1:3d:4e:cf:01:74:3e:51:12:5b:a1:1d:83:
96:86:40:76:bb:b3:96:67:28:5e:d2:f3:68:ab:32:
73:32:ff:5f:a9:e5:5e:29:9d:fd:fb:5b:7c:d5:7a:
48:aa:64:6b:1e:92:6b:9e:31:d1:9c:a0:fb:f8:dc:
e2:d1:cb:2b:de:e5:ce:00:96:2d:62:48:55:bc:d2:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:16:50:4F:3E:F9:50:50:86:BE:1E:14:01:E3:57:9B:F2:58:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAB2A6F8D3FE11EF9583709B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:82:42:78:16:2c:5c:c6:55:48:80:b0:dc:1b:28:65:71:f9:
a6:2e:8a:29:fc:b9:fc:3a:0d:5a:7d:70:ab:99:72:40:4a:73:
1f:b8:86:3f:bd:35:2c:04:06:7a:96:e0:0a:f0:0f:18:fe:5d:
8e:bc:2a:74:5a:12:80:b3:4a:4a:f7:da:8d:71:d8:66:78:c1:
89:bf:3f:57:3a:68:9a:f2:78:f7:25:fa:7d:ba:08:31:04:6e:
56:6f:93:da:40:b0:b2:dd:7d:75:5b:fa:4a:8c:41:6e:aa:4d:
9c:4d:fc:3d:c7:dc:04:2e:58:75:8f:af:ea:34:39:68:cd:71:
26:5a:9d:c3:57:c8:b5:51:cc:82:d0:36:fd:53:7a:3e:b5:02:
1f:af:18:96:cb:3d:8e:b1:71:06:1c:a6:af:4b:02:3c:c2:8f:
52:d7:fc:40:0b:a0:27:32:31:e1:f2:8a:fa:57:b0:ae:54:83:
2d:22:1b:e9:1a:67:59:7d:eb:31:d4:f4:37:57:d9:ed:ba:cf:
e1:63:b3:fe:dc:e1:9b:3c:1a:5c:11:9b:b1:b8:27:4e:98:cc:
72:77:5f:bd:77:16:de:32:91:c8:86:5f:33:09:4c:6f:6b:e9:
53:4f:66:59:b6:a9:5e:5f:b1:a2:9c:1d:ce:e0:2a:a9:19:a1:
fc:98:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:59 2025 by rpki-client