Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCEEB554D4AC11EFA5BC218F762E951A.roa
File: BCEEB554D4AC11EFA5BC218F762E951A.roa (raw, json)
Hash identifier: AQbjWJUNdXBDxHgOK1zJEWQ5uCBqX9Z4SnVaemGaa+k=
Subject key identifier: FC:46:5D:1C:04:39:D4:FE:18:A8:18:81:CE:8A:9D:59:2A:0B:4D:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCEEB554D4AC11EFA5BC218F762E951A.roa
Signing time: Fri 17 Jan 2025 08:26:24 +0000
ROA not before: Fri 17 Jan 2025 08:26:20 +0000
ROA not after: Thu 17 Jul 2025 08:26:20 +0000
asID: 63199
IP address blocks: 154.208.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80959 (0x13c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 17 08:26:20 2025 GMT
Not After : Jul 17 08:26:20 2025 GMT
Subject: CN=678a1430-1a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:6c:2f:b8:76:a4:0e:d6:46:67:34:e9:6f:
f8:ea:d5:67:92:52:d8:ee:1b:5f:42:e9:31:c8:99:
2c:9d:b4:e5:31:75:63:2e:0c:82:7e:1e:9b:49:1d:
7a:c9:ec:18:3b:5d:bf:d0:a0:87:a0:e0:63:db:a6:
8c:fb:2f:79:dc:f3:51:df:70:c0:74:e8:9b:70:0e:
3e:ed:1f:77:60:0a:58:b3:8b:94:01:07:61:e4:2e:
70:6b:9f:b7:cb:c6:2c:0b:e1:6a:74:a9:ee:2c:84:
77:47:21:0c:8f:0f:bc:6e:c0:5b:b8:fc:6b:ce:95:
72:7c:77:cc:6f:7c:0c:df:9d:e4:27:20:7c:55:1e:
5a:0e:26:2b:8b:59:1c:91:f5:8c:a8:90:e8:5b:bb:
ca:15:76:f3:18:ed:4e:a6:8a:94:7e:a6:ed:45:79:
0c:b6:b6:3f:67:48:5d:7c:ed:c5:87:00:0d:f9:65:
fa:61:f4:9a:bb:53:85:b3:43:cb:7b:da:96:be:ad:
8a:be:2a:d2:1a:b5:cb:65:ba:08:f7:dd:90:d9:c5:
ac:9e:a5:8e:9e:c1:cf:63:bd:54:32:44:d2:96:11:
fc:f5:a3:e8:8e:66:7f:ff:90:11:56:cb:c0:4c:17:
0a:ae:15:59:9f:df:1f:ee:0c:e1:a0:1b:b4:3b:de:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:46:5D:1C:04:39:D4:FE:18:A8:18:81:CE:8A:9D:59:2A:0B:4D:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCEEB554D4AC11EFA5BC218F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.131.0/24
Signature Algorithm: sha256WithRSAEncryption
34:06:51:f3:0f:b5:ce:f9:f2:ad:c4:ae:32:72:ab:d2:5b:49:
8e:69:bc:21:29:b2:44:2c:91:7e:3b:8a:df:02:0e:16:3d:f1:
e0:4d:87:1b:56:ae:b6:3f:ad:ff:03:e0:66:15:9a:1b:a7:c0:
54:8f:12:20:81:a8:43:1d:b1:a0:fc:09:71:50:ce:f3:ab:c9:
bb:64:81:b7:07:a3:12:35:b9:84:26:2e:14:8e:b0:cd:dc:0e:
9d:71:00:04:49:39:44:99:13:f1:a6:6b:36:6e:17:79:6d:96:
c3:fc:3d:e7:2c:ed:bb:6f:1c:4e:3a:1a:3b:cc:69:79:96:47:
de:9c:64:ef:44:80:32:6e:15:7b:67:35:e9:f0:28:63:31:ed:
81:b5:94:fc:c4:90:d4:ee:11:3d:94:90:c9:be:b5:ec:91:e1:
cd:69:ae:d1:ba:7f:76:44:0e:b9:ce:28:8b:1d:06:09:7f:b9:
b8:4b:89:28:d0:b0:16:1a:cc:8c:a4:d1:e5:8b:54:df:c1:e5:
ab:49:d1:11:3f:10:77:68:fd:58:02:05:c2:88:c1:e5:05:87:
f9:65:c3:a0:93:93:e8:e6:1f:bf:26:92:04:4f:d8:70:2d:77:
be:5c:9f:30:d0:58:a0:b0:47:32:b2:59:ff:b6:dd:da:be:ca:
2d:5a:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:38:10 2025 by rpki-client