Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC23606CF61411EFBB0FE35F762E951A.roa
File: DC23606CF61411EFBB0FE35F762E951A.roa (raw, json)
Hash identifier: 6hWUKUKLTEhEo1hU9H4RLrz6S3YTxGp3vy4MmVGB4lE=
Subject key identifier: CC:42:5D:34:F7:97:2F:57:C3:F4:D0:E0:C8:85:73:23:9C:8C:C4:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC23606CF61411EFBB0FE35F762E951A.roa
Signing time: Fri 28 Feb 2025 20:44:53 +0000
ROA not before: Fri 28 Feb 2025 20:44:49 +0000
ROA not after: Sun 13 Apr 2025 20:44:49 +0000
asID: 138915
IP address blocks: 154.206.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93189 (0x16c05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:44:49 2025 GMT
Not After : Apr 13 20:44:49 2025 GMT
Subject: CN=67c22044-300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:22:dc:08:44:b6:3b:d7:ab:27:96:e7:a2:
7a:dc:93:41:41:2b:78:9b:fc:62:94:68:48:8b:2d:
16:6c:06:76:dd:1c:68:dc:08:f2:68:74:02:20:5c:
7d:75:41:1d:43:6d:b6:f0:7e:84:cf:96:76:8c:6f:
92:5e:80:c1:99:f5:93:7f:a0:77:aa:b8:0e:33:39:
c6:36:bd:18:33:a9:2a:e1:7e:a3:a1:bd:46:22:2d:
b3:31:a9:2c:79:03:46:62:61:0a:e4:9a:56:1b:ea:
f0:12:a5:c9:9b:82:39:23:32:f5:f9:5d:13:25:44:
1d:4b:d1:62:c8:46:78:c4:85:92:42:5a:19:69:cd:
ff:50:97:86:31:13:b0:48:49:9e:55:f2:ac:ad:43:
db:50:06:62:a2:c6:c2:15:3d:97:8f:4e:62:93:06:
fd:bb:6b:40:b7:5a:18:b9:5c:f8:4f:17:d1:5d:83:
05:60:90:d2:d1:cc:2c:af:7d:03:3d:08:95:d8:56:
bf:9b:9d:5c:f7:3e:a1:72:79:7c:05:5f:e7:fc:6a:
a4:91:70:75:52:40:5c:81:cf:90:87:e0:bf:42:06:
39:62:6d:45:14:e8:ec:4d:f2:ca:49:72:fc:35:b4:
1d:56:4f:90:f0:34:0e:61:15:36:ea:e8:ab:b4:95:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:42:5D:34:F7:97:2F:57:C3:F4:D0:E0:C8:85:73:23:9C:8C:C4:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC23606CF61411EFBB0FE35F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.67.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a7:a8:04:22:64:a9:fa:15:fb:39:c7:53:4c:51:9a:46:0d:
fb:d6:9b:94:e0:ef:d7:c6:36:e4:90:7b:62:f6:ca:4a:e4:10:
1f:cb:00:c5:18:75:a3:b4:fc:ba:13:66:5f:d5:3d:bf:a6:81:
02:69:f9:c0:fd:22:25:7c:30:c2:2e:60:1c:43:4f:06:f6:10:
1a:93:74:57:b4:30:07:78:81:5f:6a:b5:13:e2:24:8b:cd:ad:
59:1d:df:8c:30:87:f3:59:cd:fe:cf:21:fd:73:36:8d:cc:4c:
a6:5b:30:12:2b:38:6e:e4:01:a6:23:f4:f3:14:97:42:f8:aa:
b1:9d:ce:3c:b2:6f:42:33:b4:cb:30:b4:17:d0:c9:09:d5:5d:
67:1b:d3:b1:09:eb:4d:8e:9f:7b:6d:86:5c:de:0a:1f:af:77:
13:03:c2:e8:df:43:b0:dc:e2:da:2c:89:d6:ec:b9:76:8e:87:
2d:e1:19:f7:dc:69:b4:2f:62:6b:43:9c:f2:ff:b4:7d:2d:4f:
48:aa:94:69:35:50:66:19:01:d3:36:b5:fd:5d:ff:1f:ec:b4:
d8:d4:6d:a8:fd:26:06:05:6d:0b:24:04:1c:00:3d:fc:06:21:
95:22:0a:ea:2c:f8:61:7a:23:22:3d:f7:e9:97:38:89:a9:2d:
54:52:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:22 2025 by rpki-client