Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBB50D06D40411EFA90C6144762E951A.roa
File: DBB50D06D40411EFA90C6144762E951A.roa (raw, json)
Hash identifier: s/oABfW92gLmcD5mIyiL3abbfjzJcHWSWchR67quebw=
Subject key identifier: 5A:A0:C8:FC:35:5D:5A:CE:BB:3D:ED:CB:E3:4E:24:29:E3:3C:3F:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBB50D06D40411EFA90C6144762E951A.roa
Signing time: Thu 16 Jan 2025 12:24:40 +0000
ROA not before: Thu 16 Jan 2025 12:24:37 +0000
ROA not after: Sun 16 Mar 2025 12:24:37 +0000
asID: 17561
IP address blocks: 154.206.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80940 (0x13c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:24:37 2025 GMT
Not After : Mar 16 12:24:37 2025 GMT
Subject: CN=6788fa88-d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:6f:43:1c:56:14:8f:dc:20:85:58:d9:3d:
fa:46:eb:cc:ef:20:dc:aa:3d:92:fd:3a:ca:bf:db:
88:bc:da:f7:28:27:ad:e7:aa:97:9a:99:a2:36:1d:
37:0a:ab:ed:47:df:e8:32:dd:ff:86:a0:9f:33:ad:
d8:14:3a:a4:69:04:9c:3c:30:f3:87:f0:2c:9b:b0:
cf:d1:0d:30:dc:ea:54:dd:50:dd:10:71:ed:1c:90:
76:72:a8:6d:dd:2e:59:48:ea:31:11:2b:e5:23:d5:
cc:4b:db:40:64:b4:22:56:be:78:ae:20:3d:53:73:
7a:52:d6:86:17:e3:45:0c:66:3a:41:95:8e:6c:da:
ba:53:be:11:b2:71:48:b1:8c:4e:fc:64:bf:17:35:
b6:2e:45:45:43:bf:2c:23:7a:06:54:86:34:86:70:
a2:e5:3d:01:c1:d8:0e:26:bc:9f:ac:92:be:df:fe:
35:60:9e:32:7b:bf:dd:e6:3d:fe:a3:85:f0:43:be:
4f:cd:50:97:bb:6e:6b:59:9a:18:43:34:6a:cb:f3:
f8:f2:bd:e9:40:9c:fa:c2:c5:8a:74:2e:2b:77:81:
73:1d:83:2f:c4:3c:be:db:69:1e:61:15:c9:82:b4:
20:4c:33:9f:dd:43:99:28:e4:31:47:0f:0e:a5:ba:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:C8:FC:35:5D:5A:CE:BB:3D:ED:CB:E3:4E:24:29:E3:3C:3F:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBB50D06D40411EFA90C6144762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ac:22:a5:1a:bd:c7:9c:84:0b:8c:1a:14:0f:77:38:1d:3e:
6f:70:02:57:38:54:60:47:6f:92:77:f3:0d:8f:af:4a:30:26:
1a:72:0c:93:2e:0b:58:01:d3:66:98:1c:76:72:eb:2f:f8:48:
37:51:05:1c:7c:be:71:64:a6:02:04:b2:f5:b2:a1:cc:1f:f2:
2b:9a:ea:a1:da:12:93:9b:73:83:59:45:31:61:70:ad:31:a0:
6e:d5:27:42:6e:b9:04:98:24:43:10:7f:89:2b:74:75:b3:01:
da:9d:49:01:6c:da:c1:9c:7c:f0:5a:50:29:54:ab:02:37:ea:
9e:91:25:29:41:44:aa:c2:39:ce:e5:bb:52:91:38:87:95:e3:
f4:62:fb:93:f7:21:85:5d:71:00:6c:de:be:f0:fe:b4:18:f6:
d2:d2:e8:eb:d0:7e:86:90:24:0a:d1:79:2e:1c:b6:67:ca:b7:
02:c5:24:45:d7:36:f7:65:f7:17:de:cb:f5:f9:cc:b1:88:c7:
c4:f8:1e:4f:1a:e8:ab:48:62:c5:81:80:dc:ee:bb:5d:50:11:
45:3f:7e:03:42:a1:78:27:d7:15:ca:62:51:f2:dc:59:7c:a1:
22:01:f2:34:74:7c:08:1d:11:7f:c2:40:c8:a8:08:1a:48:f3:
ed:9f:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:22 2025 by rpki-client