Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E7E896F61711EF8FBB1E72762E951A.roa
File: 58E7E896F61711EF8FBB1E72762E951A.roa (raw, json)
Hash identifier: ddHrluuEN8slXsB5FCvw02NkQhSCesZkxIYbt1e6qqM=
Subject key identifier: E7:13:50:19:AB:B1:CF:E9:38:3B:23:EB:6B:DB:C6:73:06:77:D0:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E7E896F61711EF8FBB1E72762E951A.roa
Signing time: Fri 28 Feb 2025 21:02:41 +0000
ROA not before: Fri 28 Feb 2025 21:02:37 +0000
ROA not after: Sun 13 Apr 2025 21:02:37 +0000
asID: 138915
IP address blocks: 154.206.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93213 (0x16c1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:02:37 2025 GMT
Not After : Apr 13 21:02:37 2025 GMT
Subject: CN=67c22471-f3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:8c:9c:c0:72:3a:24:67:2c:7f:b0:80:2a:
c7:19:0c:05:fe:73:f1:bf:ff:85:a2:ca:08:ef:5a:
7e:f8:54:fe:a6:3c:38:bb:0e:de:a3:8d:81:63:fb:
fa:38:d5:07:9f:fd:cf:5b:41:65:2f:bd:17:1e:49:
31:66:1a:43:49:a9:01:2a:42:b1:fb:cb:de:ad:53:
c5:89:ab:25:a0:c3:9e:1a:8e:b2:f3:77:21:90:a1:
22:e3:2a:94:85:bc:5b:25:8c:b5:f8:c3:fd:71:85:
54:99:be:c5:38:4c:c6:8a:b6:4b:49:ec:cb:e2:22:
be:d6:25:26:52:da:93:fa:96:87:79:d3:5b:4d:cd:
f8:8f:07:9c:d1:15:2c:c1:61:6c:88:5d:4a:1f:90:
d8:63:e5:7e:d1:d0:f8:ea:fd:6d:c4:7c:25:62:49:
24:eb:6d:14:60:b2:4a:67:3d:1e:2c:d6:be:28:13:
74:df:18:b4:47:4a:e6:c1:b0:20:76:02:58:09:54:
1e:8a:95:49:9b:bd:95:db:69:c2:5c:8a:43:62:db:
8c:c2:a5:2f:80:9b:45:0e:a8:fb:e9:68:15:48:0b:
f7:6b:26:dc:7d:f8:f0:88:27:4e:ba:51:89:0f:60:
c0:4b:e7:77:45:07:de:8f:e3:8e:19:3e:6f:37:2d:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:50:19:AB:B1:CF:E9:38:3B:23:EB:6B:DB:C6:73:06:77:D0:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58E7E896F61711EF8FBB1E72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a8:d4:c8:ed:0d:95:7e:8f:ce:f8:93:66:ca:97:0f:9a:45:
a9:4e:b2:7e:59:e9:db:f7:76:9c:5d:22:e7:ce:59:68:5f:d2:
3d:c3:e0:46:e8:16:cb:50:a6:a1:7d:18:16:9d:13:65:ca:8d:
4a:67:00:59:2e:a9:fa:6e:7f:be:3e:e5:9b:31:66:f6:a3:31:
ef:d6:03:2c:b3:8a:b6:b5:2b:85:2c:f0:70:d5:98:d6:f7:33:
05:b0:76:01:43:51:95:ed:f1:9c:8e:51:9a:cf:68:f6:f7:12:
d6:1a:90:8a:f0:fb:e8:47:8d:ef:f4:98:5a:5b:66:29:89:9f:
e9:cb:57:72:fe:61:3a:34:b1:da:88:f7:c1:62:6f:ad:17:84:
25:4b:18:5d:c7:c8:5e:fb:f8:d3:38:ce:9c:c2:95:03:dc:92:
0d:33:5d:7f:8f:a1:e2:9b:61:59:e5:ed:8e:d8:dd:33:69:d9:
09:b9:0f:b9:f8:eb:f2:ed:2e:91:a6:fe:57:d2:7b:c3:e7:e9:
51:28:ca:88:5f:47:a0:ad:10:ee:f0:27:60:41:32:26:97:91:
e6:a6:9f:fe:6b:fd:bc:d0:0b:b9:5d:91:4a:79:c2:ec:60:69:
a7:41:2d:3e:1d:80:49:18:01:a9:d2:45:d7:73:73:73:4e:87:
5a:37:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:53 2025 by rpki-client