Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE2B59E4D8B111EFAF84726D762E951A.roa
File: DE2B59E4D8B111EFAF84726D762E951A.roa (raw, json)
Hash identifier: otCbrlZEOwKtVk2Ueok3t/36PTaJ8BIypZc0XGBNmZw=
Subject key identifier: D7:DC:B4:DE:16:68:E0:21:B9:E2:B4:74:D3:07:35:F2:FC:B7:02:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE2B59E4D8B111EFAF84726D762E951A.roa
Signing time: Wed 22 Jan 2025 11:13:12 +0000
ROA not before: Wed 22 Jan 2025 11:13:08 +0000
ROA not after: Sat 08 Feb 2025 11:13:08 +0000
asID: 18229
IP address blocks: 154.206.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81650 (0x13ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:13:08 2025 GMT
Not After : Feb 8 11:13:08 2025 GMT
Subject: CN=6790d2c8-35d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:1a:34:f7:4f:a2:b7:99:ad:99:2e:ed:43:
b0:74:ad:3c:80:e9:ff:7c:f0:cb:7b:83:ac:3f:f2:
69:87:7a:4e:ba:ff:24:56:da:db:f1:76:56:26:11:
62:30:5d:d9:47:4f:cb:40:73:dd:65:d4:4f:bb:88:
ec:93:7b:7b:f7:7b:f1:e7:41:53:d4:e1:cf:90:ac:
d3:f3:d5:3b:96:3e:b0:a8:96:a4:ec:18:ad:92:7c:
09:f1:74:e7:4f:65:22:d5:41:5b:14:b0:cf:9d:2f:
0c:8c:5d:b4:48:30:87:94:b7:b2:5b:3a:0b:38:6a:
15:d7:e5:09:22:01:28:f0:24:56:64:10:c0:25:fa:
63:f4:8c:ab:9f:10:3f:c5:9e:c7:e7:98:d2:20:0e:
5d:01:72:75:f7:8b:3c:01:31:46:00:60:88:d8:d0:
39:1f:ad:4f:45:da:26:79:13:89:6d:53:7f:a1:85:
db:ff:f6:94:7a:5d:ae:aa:72:4d:dd:8e:c8:dc:9a:
94:65:84:57:68:14:6b:b3:f9:12:92:59:ee:3a:29:
f1:42:36:9e:c3:e3:c9:c0:a0:8d:a5:90:11:20:da:
a9:c7:d1:f1:23:6d:4e:20:88:7d:5f:9d:56:83:2b:
4a:64:08:28:c8:bf:11:e0:13:32:63:5d:bc:7d:a2:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:B4:DE:16:68:E0:21:B9:E2:B4:74:D3:07:35:F2:FC:B7:02:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE2B59E4D8B111EFAF84726D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b0:51:52:cd:c9:16:1c:e3:df:6c:fe:cf:5d:4d:9f:e8:9e:
f9:2c:27:cd:03:7b:c1:4f:8d:24:41:d9:28:31:31:c3:09:a7:
c9:d2:31:df:dd:e6:41:30:59:87:db:7c:16:a2:c2:47:7d:e8:
e7:29:7e:85:eb:ac:31:4f:1a:d2:94:12:be:87:f6:b3:61:d1:
b1:75:48:87:fe:57:67:73:24:5e:db:19:8c:9e:3a:df:55:1a:
cd:a9:81:ae:76:82:76:37:37:bf:b2:77:91:2c:42:e5:e7:b3:
05:f8:b3:20:7c:f3:3a:07:08:3f:ef:94:0c:b1:ff:2d:2f:ab:
8b:0f:26:20:37:96:61:33:6b:d2:9b:ad:fe:23:fa:45:ca:c6:
8a:aa:60:8b:cc:8a:7b:2f:6d:7d:93:0a:1a:59:69:c6:e6:33:
51:d3:f5:53:94:37:7c:58:ad:92:3c:74:8d:e4:43:00:df:3d:
93:a0:ea:d0:56:df:ca:35:c2:4e:5a:25:6d:33:4b:31:b9:65:
49:ae:17:0f:34:8d:fe:0b:23:9e:8d:49:4a:a6:ad:66:55:c0:
d5:a4:95:52:7f:93:90:d1:b2:38:39:73:98:74:8b:84:2e:b3:
96:89:62:db:2b:1b:4b:69:8d:ad:25:0e:2c:6e:5c:f0:7e:9c:
09:69:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:52 2025 by rpki-client