Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E872191AD40111EF810D3AAF762E951A.roa
File: E872191AD40111EF810D3AAF762E951A.roa (raw, json)
Hash identifier: 2+5k+bH7n+4kLdN89Ggy8/bggp2wTp71V3QvNVOFoaI=
Subject key identifier: 8C:FD:9E:E1:C1:8D:89:2B:EF:69:3D:76:8E:12:82:FE:13:5E:7A:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E872191AD40111EF810D3AAF762E951A.roa
Signing time: Thu 16 Jan 2025 12:03:33 +0000
ROA not before: Thu 16 Jan 2025 12:03:29 +0000
ROA not after: Sun 16 Mar 2025 12:03:29 +0000
asID: 17561
IP address blocks: 154.206.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80918 (0x13c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:03:29 2025 GMT
Not After : Mar 16 12:03:29 2025 GMT
Subject: CN=6788f595-c7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:9a:b8:ba:40:f9:d3:68:c1:f1:28:29:d6:
9d:2d:47:83:c7:92:d3:09:3f:3c:49:c4:09:44:64:
33:c0:03:26:b8:02:9b:92:3b:b9:8b:c3:72:85:a1:
e8:d2:a9:5e:fc:81:34:2c:48:7b:2e:36:69:df:63:
3a:69:f8:5d:9c:f0:02:a0:6b:c9:7d:2e:fc:b6:f3:
e6:6d:33:40:e5:b6:20:86:37:4a:14:6c:e8:b3:51:
c3:1a:41:a3:8f:72:cc:13:20:0e:b6:6b:25:bb:c6:
a3:84:2b:b5:cd:a9:9e:a4:e9:05:9f:1f:7a:05:1b:
51:20:e3:04:91:4c:c5:fa:47:ec:b3:f6:32:16:b4:
a1:47:4c:8f:d1:b9:15:be:ef:d8:0e:e9:f4:d3:dd:
ea:23:c2:4d:13:78:08:7b:73:e7:4a:e3:73:5f:bf:
ea:f1:71:4b:be:a9:c0:98:7f:5e:55:80:00:1b:7d:
5e:05:11:27:65:a9:26:02:2c:5f:d8:59:2c:f0:40:
7d:e2:7a:21:e6:2f:4d:22:1f:ee:82:af:81:71:f2:
88:ad:b6:af:d1:3f:c2:25:e6:0a:ad:b3:8e:f3:b8:
af:d0:48:4c:ed:f9:53:94:d3:32:fb:5c:12:e9:f1:
cb:a7:4f:b8:7a:c1:6b:a7:93:62:5a:e4:96:4d:a8:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FD:9E:E1:C1:8D:89:2B:EF:69:3D:76:8E:12:82:FE:13:5E:7A:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E872191AD40111EF810D3AAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d4:5c:48:63:12:c7:ed:c8:29:11:76:c0:b8:da:97:ef:1e:
b6:35:a5:0b:0a:23:e6:16:3b:85:19:96:77:c7:9c:0e:67:10:
7a:2f:f4:b8:33:22:9b:0c:e0:bd:c6:f7:b3:44:82:9d:a2:ff:
31:d9:bd:31:8a:d6:0b:88:d9:cd:45:36:ee:77:20:8a:f5:b2:
78:56:2f:f5:01:08:70:8e:42:6a:1a:e4:6a:4a:c7:30:63:d9:
54:2e:e8:f6:98:c9:a7:ea:b3:f7:5c:c0:db:b4:52:7a:50:62:
c4:51:96:8c:79:b2:51:e3:0e:03:d4:d4:7b:13:15:b0:21:a9:
66:fb:3c:9c:cd:40:3c:69:0e:bc:68:14:83:a0:b2:8c:eb:53:
07:f5:85:36:f2:a7:d0:84:83:e1:7b:86:48:2f:b9:13:a0:75:
0c:f2:1e:1b:ee:b1:14:63:02:4e:c1:44:16:41:de:c5:32:5d:
26:9c:0b:47:d4:74:8b:9b:89:65:15:18:e8:1f:1d:6b:84:55:
8a:df:77:5e:5e:7d:0e:21:d6:10:16:1d:76:5f:7c:2c:b4:28:
8f:25:14:ac:41:83:11:1d:65:1d:42:7c:f4:42:10:fa:88:d8:
8a:1c:96:69:e0:93:81:a0:69:b9:41:5d:3a:02:72:ae:d3:00:
5c:ba:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:25 2025 by rpki-client