Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03ACE568D40011EF81BEC8A3762E951A.roa
File: 03ACE568D40011EF81BEC8A3762E951A.roa (raw, json)
Hash identifier: rGrY0Topz2dxf3bWsY4egXJV+8n9x+5eHuevSwiKErA=
Subject key identifier: 9A:99:C5:43:6D:80:35:49:99:5D:A2:C0:23:94:2D:A1:45:6E:C2:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03ACE568D40011EF81BEC8A3762E951A.roa
Signing time: Thu 16 Jan 2025 11:50:00 +0000
ROA not before: Thu 16 Jan 2025 11:49:56 +0000
ROA not after: Sun 16 Mar 2025 11:49:56 +0000
asID: 17561
IP address blocks: 154.206.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80906 (0x13c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:49:56 2025 GMT
Not After : Mar 16 11:49:56 2025 GMT
Subject: CN=6788f268-247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:bc:07:80:1a:90:90:9f:75:1f:04:8d:d2:
4f:f2:cd:7b:fb:b4:dd:55:58:e8:34:b3:bb:6b:a1:
71:27:5d:4c:2d:83:ed:93:88:6e:80:a5:18:68:74:
7f:dc:f4:64:b6:bc:04:50:b0:f9:65:a1:dd:5e:c0:
0b:04:7f:d1:29:e0:88:84:49:38:07:a8:45:52:fb:
ee:50:ef:7d:f4:96:e4:40:61:87:b3:a2:5f:81:b2:
ad:8c:d9:92:b5:1a:c7:fc:80:05:fe:64:73:9b:12:
51:1c:1e:b9:05:36:6d:d7:c7:61:e5:75:4a:99:7a:
45:64:09:53:60:b8:fc:12:09:3d:73:c8:ec:2b:06:
73:6b:ec:ed:c6:69:9b:88:19:53:18:8f:ed:ee:76:
56:1d:b6:f4:2f:01:63:53:14:38:5d:ca:bd:48:a8:
f4:f5:bb:c9:d6:fc:08:5e:1e:6d:45:93:8b:a3:0d:
84:52:2c:d0:46:02:ed:5c:9b:3b:60:83:aa:58:7e:
b0:72:90:0f:06:a3:eb:f8:cc:e7:0f:3c:d8:03:31:
e0:28:8b:ee:bc:7e:4d:bc:cf:6c:9d:1b:a7:c9:25:
3b:58:4b:f6:16:2d:38:b1:34:41:17:10:64:d1:00:
f1:8f:b1:0f:9f:d5:9e:6f:b0:31:6f:f9:7b:0a:99:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:C5:43:6D:80:35:49:99:5D:A2:C0:23:94:2D:A1:45:6E:C2:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03ACE568D40011EF81BEC8A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ae:9f:9b:63:4d:c5:38:2c:27:3a:43:05:36:e5:f4:48:ef:
fd:7c:40:af:08:26:82:58:ff:c7:bd:d6:16:b1:f1:04:b8:48:
55:aa:ca:2a:60:d5:b5:14:fa:57:cf:48:55:f0:3c:8c:d5:cf:
2a:80:01:f7:d0:15:b3:70:01:85:74:7b:50:bd:8a:28:28:f3:
95:ef:6c:f8:01:3f:6e:5b:2c:e2:c2:70:49:42:25:e7:fe:33:
f7:cb:44:6a:a1:b1:3a:57:d3:dd:ae:ff:f2:75:d5:e6:8e:8e:
06:85:7d:94:97:d5:63:56:fa:8a:d5:91:13:9f:06:45:c0:8c:
0b:e4:66:c9:71:c7:dd:2a:a1:d0:fc:bc:c9:8f:db:81:e5:09:
06:78:28:c2:83:cd:9a:39:31:96:01:86:67:eb:9c:5f:7e:7f:
66:f3:b8:66:b6:f9:87:8e:62:55:21:eb:b0:5b:84:30:75:14:
4b:85:bd:f1:f5:ab:98:4c:ad:f6:5b:4d:02:2a:17:07:9c:ea:
f4:34:fd:3a:a0:a4:85:49:b7:b8:06:d5:9c:84:90:25:8e:fb:
d8:c9:a5:ce:5b:6b:08:82:16:77:33:bf:a6:a2:79:bb:78:75:
ca:24:23:12:fa:b1:f0:4c:31:03:35:6a:f8:d2:1e:f6:cf:1b:
e8:de:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:01 2025 by rpki-client