Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A75E3EC26711EF9B80E850762E951A.roa
File: 55A75E3EC26711EF9B80E850762E951A.roa (raw, json)
Hash identifier: CvyZIImUmFuAQXaLVv7PFVb9YRcfh43MVarKvTSD4nA=
Subject key identifier: BB:91:3A:94:30:E1:52:CB:57:0D:81:BF:59:4E:93:7D:9F:25:85:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A75E3EC26711EF9B80E850762E951A.roa
Signing time: Wed 25 Dec 2024 02:24:15 +0000
ROA not before: Wed 25 Dec 2024 02:24:11 +0000
ROA not after: Wed 10 Dec 2025 02:24:11 +0000
asID: 984
IP address blocks: 154.199.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74744 (0x123f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:24:11 2024 GMT
Not After : Dec 10 02:24:11 2025 GMT
Subject: CN=676b6ccf-5e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:7a:df:07:a2:74:41:b0:ec:f5:7f:9a:15:
6a:16:49:6e:27:31:13:eb:07:d7:b2:11:79:96:fc:
c8:f2:bc:3a:c1:82:c8:e1:8c:db:1e:2f:c8:25:af:
cd:c4:65:d4:d8:35:57:b5:f0:70:6f:be:c3:22:e1:
d1:55:93:2e:29:84:b6:c6:9d:b0:89:bb:23:d7:af:
e7:55:dc:db:4e:87:50:f7:e4:4a:57:9d:ba:fb:99:
b4:a8:64:41:94:f9:4e:db:ea:71:70:2b:76:62:59:
9c:69:e2:83:71:e6:c3:77:1e:41:93:61:9f:e4:86:
b0:76:5c:fc:53:9f:56:14:ea:4f:84:71:e8:f1:59:
49:3d:ce:cc:09:23:b2:81:b4:3a:02:88:3d:3e:1a:
2a:2b:e0:3e:b2:50:eb:d6:09:80:7a:7d:58:30:1c:
5e:a8:4c:94:37:18:df:c2:f5:46:73:1e:ee:bf:34:
24:63:27:2a:a6:b1:9b:54:d5:02:b9:bf:ed:4c:de:
a0:1c:e9:ae:f8:8b:21:a0:f9:1d:b8:4c:29:59:91:
9e:6d:a9:72:6a:6e:6d:7c:36:4d:66:d9:ed:ce:cf:
f0:5f:62:73:c5:83:dd:e3:24:d0:6e:54:7e:dd:85:
70:f6:fe:90:8a:be:55:bb:9d:0d:fb:92:0a:17:5e:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:3A:94:30:E1:52:CB:57:0D:81:BF:59:4E:93:7D:9F:25:85:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A75E3EC26711EF9B80E850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.206.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:f9:91:10:e3:4f:1b:95:ea:ff:b5:53:21:40:c1:6a:3e:2a:
a1:1c:d7:87:da:98:d8:ef:71:ac:57:5b:e0:dd:e0:5f:0a:82:
94:76:c9:77:99:56:74:ba:88:43:b7:74:41:09:2d:85:60:c2:
74:94:bf:35:17:34:70:8f:43:dc:f6:ad:08:79:14:4f:68:77:
81:a1:dd:c7:0a:9c:eb:24:19:bc:f9:97:21:66:30:12:22:28:
14:8c:24:7f:f9:32:82:84:68:78:b8:8c:64:69:5e:01:5c:cd:
97:d6:7a:f5:56:20:17:fb:3c:ae:e4:1e:33:72:99:75:e9:a9:
dc:d3:ad:32:77:78:53:c8:3d:cb:d9:23:49:08:ad:21:03:a4:
5e:26:d2:d1:70:b4:6a:86:20:39:48:57:aa:a9:8c:9f:6e:d2:
89:b2:c5:0a:23:e0:07:55:54:76:d8:52:2e:15:ce:e1:17:56:
40:42:30:f8:ff:db:4e:6b:24:a1:26:3c:0a:0b:d1:15:69:02:
8b:11:50:69:4c:66:da:28:8d:55:75:ae:69:c6:10:c1:cc:f1:
76:b6:fb:e5:0e:56:53:c7:79:8e:a3:c7:5e:a3:5e:09:55:24:
a1:f1:78:cf:d2:f1:0d:63:aa:f1:38:9f:0f:0a:98:1a:d2:b3:
c0:55:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:14 2025 by rpki-client