Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/031F68ACCCCE11EFAC961F6D762E951A.roa
File: 031F68ACCCCE11EFAC961F6D762E951A.roa (raw, json)
Hash identifier: Lv+ZgJhoogEdH4tj0gRlqQqERWefOhMiyz+Mw8u5M+0=
Subject key identifier: 0B:00:2B:81:F3:05:6C:07:72:E8:9F:9C:13:B8:1C:D0:FD:64:B6:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01366F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/031F68ACCCCE11EFAC961F6D762E951A.roa
Signing time: Tue 07 Jan 2025 08:04:26 +0000
ROA not before: Tue 07 Jan 2025 08:04:22 +0000
ROA not after: Thu 13 Feb 2025 08:04:22 +0000
asID: 203020
IP address blocks: 154.201.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79471 (0x1366f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 08:04:22 2025 GMT
Not After : Feb 13 08:04:22 2025 GMT
Subject: CN=677ce00a-1d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:03:f4:42:e8:93:4a:6e:fd:50:23:75:89:
43:87:f9:2f:15:f8:4a:ea:3b:c8:58:29:6b:7c:d0:
ac:fc:5d:d1:88:0f:f0:17:cd:a4:49:96:74:ed:1f:
a1:fb:91:90:36:e3:61:b6:7b:9a:7c:25:da:4f:81:
f3:fa:3c:56:c5:00:b5:38:6c:1b:67:c3:3b:6e:15:
5e:2f:f3:d4:cb:a3:fc:a5:db:01:e7:4e:8a:79:90:
dc:d7:bf:3c:94:89:45:43:32:5d:f3:20:25:1e:ac:
1f:a4:00:7e:54:aa:f0:94:a7:57:ab:69:93:b2:6c:
08:4a:f9:d5:10:67:80:08:17:21:bf:18:a8:99:0d:
77:f8:45:37:55:bb:3d:6b:7c:e9:72:ef:e7:3e:5e:
3b:54:e6:6e:20:e0:13:95:e6:cf:86:f4:85:5e:f4:
5f:5d:e3:c7:64:2e:54:b3:ff:d2:12:31:49:71:42:
15:8c:9e:c3:d9:7d:f6:2e:79:ea:1d:c8:92:b3:4f:
a6:d3:d2:86:e7:18:40:44:08:f6:59:0f:d9:f1:1d:
73:61:37:50:c8:d3:07:8e:13:1b:ee:18:d5:a0:60:
d5:64:2a:71:ec:a7:0c:7f:14:1e:2a:3f:1e:cb:29:
eb:e0:8e:43:7d:77:c9:51:59:f1:77:61:50:0c:3c:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:2B:81:F3:05:6C:07:72:E8:9F:9C:13:B8:1C:D0:FD:64:B6:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/031F68ACCCCE11EFAC961F6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:00:1b:de:61:79:57:38:94:6b:c1:5f:83:c7:95:cc:ff:fa:
32:a3:54:ab:45:a2:69:b4:cb:73:53:b1:3e:09:63:69:6d:d8:
53:a7:06:5d:7c:e8:8f:0c:ad:be:e9:6b:65:e6:fb:b3:86:af:
fb:7a:19:d1:8c:9a:83:1d:01:c5:c5:02:84:57:2a:24:29:af:
76:4c:7a:ee:bc:c8:b6:6b:dc:c7:96:2f:1f:4e:b7:e8:45:d1:
82:8e:32:ef:33:92:1a:44:fe:9c:c9:7f:97:b7:0f:d0:79:a8:
5b:31:82:a0:db:21:64:73:5f:64:75:53:06:df:21:46:c4:e2:
66:32:98:29:6e:dd:f4:af:7c:58:5d:e6:30:dd:99:51:d7:ff:
47:ec:ae:95:ab:d8:71:db:b3:4c:92:f0:77:25:00:e7:ba:0d:
66:6c:04:9c:f9:a1:48:2b:b7:5e:d4:20:dc:76:d4:5a:1d:5b:
62:24:11:88:92:d7:54:18:b6:df:a9:4f:2e:bb:9c:50:f9:31:
29:49:83:7b:00:52:49:e9:b1:05:69:5b:b2:54:86:d8:ac:c8:
68:26:17:75:8e:67:5f:f8:c0:fe:61:cf:1e:ee:fc:a9:0f:47:
c5:0c:b7:97:3d:bd:e6:97:3a:c1:3f:03:83:98:b7:7f:b8:a7:
de:21:ea:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:55:22 2025 by rpki-client