Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E97DD13AF44C11EF8785949F762E951A.roa
File: E97DD13AF44C11EF8785949F762E951A.roa (raw, json)
Hash identifier: ZFjDHRt2lPFCvcQfQPDzwFQH4XMViIQ1Zv1i67uUBpA=
Subject key identifier: A6:31:FA:13:8B:6E:16:38:B4:BC:87:D8:A7:4D:4C:52:85:AD:A6:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01643D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E97DD13AF44C11EF8785949F762E951A.roa
Signing time: Wed 26 Feb 2025 14:21:04 +0000
ROA not before: Wed 26 Feb 2025 14:21:00 +0000
ROA not after: Sat 19 Feb 2028 14:21:00 +0000
asID: 17561
IP address blocks: 154.82.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91197 (0x1643d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:21:00 2025 GMT
Not After : Feb 19 14:21:00 2028 GMT
Subject: CN=67bf2350-ffb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a7:09:44:ec:17:6e:e2:86:de:4f:b0:16:ce:
e3:e6:cb:96:28:75:2d:e3:d0:40:b4:60:47:9d:84:
c1:89:2e:ec:4d:4f:32:99:b3:b6:2b:aa:9a:22:ec:
a3:a4:a5:29:b2:5d:b7:e0:0c:4e:54:43:d4:69:b5:
43:be:ea:a3:f5:6d:d8:20:12:92:f7:b4:a1:3a:db:
cb:c4:99:24:b4:5a:8a:4b:9c:da:b4:f8:e1:a6:38:
a8:9a:c1:3c:5f:92:f4:cd:3b:b0:90:32:d3:82:cd:
f8:49:71:44:97:5c:4d:c9:cf:e3:42:e3:43:71:d5:
87:da:10:18:0b:32:50:4e:0e:84:b9:d8:95:a8:a5:
3d:e6:dd:0a:bb:96:06:25:23:d6:6b:4a:24:c4:91:
0f:23:4d:48:7c:3f:ca:3d:98:ab:07:6b:32:0b:38:
b0:1b:11:37:30:e9:86:ee:c7:de:19:47:21:27:90:
38:9d:3a:60:68:44:f6:1c:68:22:0e:42:9b:09:23:
82:94:dd:37:c0:b3:ad:c3:0c:d2:26:2d:a5:8c:18:
d9:21:e2:18:7f:cb:eb:fe:7b:9e:0d:35:96:2f:7d:
97:f1:3d:c7:8b:f6:d4:8c:f6:54:c0:ec:44:08:a3:
5e:27:92:c1:ed:26:10:ef:36:80:a0:e5:1a:cb:aa:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:FA:13:8B:6E:16:38:B4:BC:87:D8:A7:4D:4C:52:85:AD:A6:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E97DD13AF44C11EF8785949F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6d:f9:40:e3:3d:d4:c6:f9:04:1a:c0:09:fc:6c:0b:7f:a0:
78:be:70:b6:da:d4:40:48:86:5c:e8:0b:69:21:d0:58:72:60:
54:b1:ac:6f:e7:fd:96:30:b4:8b:40:31:d3:75:5e:dc:ea:55:
f8:0b:0a:cb:cb:e0:5d:6a:89:c9:74:8f:b5:15:cf:ca:87:21:
e0:bd:c3:c0:bc:ec:9b:ff:95:ec:76:1a:e4:42:97:fa:b6:a4:
bc:8d:a1:32:a5:f8:31:23:8a:00:f1:9c:45:21:5a:86:15:b1:
72:a2:9f:bc:45:42:fb:a5:91:27:10:a2:17:80:73:70:77:a6:
7f:cf:36:30:e0:35:6a:3d:b1:db:2a:d3:07:6f:06:be:2f:df:
0d:ab:78:f6:b1:cd:d0:a5:8f:3e:0a:f8:80:55:8f:2b:1a:48:
0e:d1:71:93:9c:73:67:35:02:a7:71:75:46:f5:b3:ee:e7:e7:
a8:dd:b5:7d:8b:93:9d:f4:c8:69:50:2d:97:1e:c2:d1:30:d5:
91:b4:28:b2:51:7c:9a:07:e5:9c:75:86:c3:5e:39:c9:74:f2:
09:93:b2:0f:c2:12:75:7b:6c:b6:86:4c:69:33:21:b3:ac:01:
66:bc:86:19:e3:e9:b7:ca:2e:a7:ae:34:fb:f4:9c:34:29:f1:
b8:d4:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:38 2025 by rpki-client