Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07BCAF40DA3011EF9E897F7B762E951A.roa
File: 07BCAF40DA3011EF9E897F7B762E951A.roa (raw, json)
Hash identifier: jBkxzrK5VnIZ6LJjLWmRgDyrMpLa//6qeMqV5AvNSnE=
Subject key identifier: 4B:26:E2:3E:5A:D5:57:94:0A:2C:2B:99:B4:F8:FB:FF:A8:10:BB:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014491
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07BCAF40DA3011EF9E897F7B762E951A.roa
Signing time: Fri 24 Jan 2025 08:48:49 +0000
ROA not before: Fri 24 Jan 2025 08:48:46 +0000
ROA not after: Thu 13 Mar 2025 08:48:46 +0000
asID: 63139
IP address blocks: 154.203.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83089 (0x14491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:48:46 2025 GMT
Not After : Mar 13 08:48:46 2025 GMT
Subject: CN=679353f1-6284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:fd:b8:db:92:d3:f2:da:3c:8e:2a:fd:2b:
15:4a:52:02:60:f4:23:35:a3:21:99:85:31:39:16:
08:f5:05:bd:dd:99:e6:e4:a7:5d:70:55:cc:7d:9b:
16:61:36:45:08:dc:84:a8:9a:17:ff:9c:c7:f9:66:
fb:8f:f6:40:20:41:85:65:f8:1a:93:b3:cc:7f:55:
4b:f9:c1:be:08:b4:8f:37:7f:82:b4:9a:5f:22:01:
f4:0b:87:12:03:6e:5b:7f:12:59:ec:93:9b:a7:a1:
85:ec:16:c6:d7:3e:c5:9d:63:56:f2:45:1a:d4:5c:
06:cc:56:33:b9:f7:eb:ee:9b:4a:ab:70:b6:7d:29:
89:32:b9:dd:36:bc:94:ce:fa:0a:6a:f3:3d:09:db:
80:d3:89:96:53:85:c8:22:65:e0:7f:5c:8f:58:44:
1c:c3:bf:d6:9c:78:fe:ae:a9:90:88:4d:e9:68:65:
f8:a9:47:8a:ac:6a:dc:52:56:30:27:d4:23:a9:aa:
b2:f7:e3:46:8e:35:e9:a9:8a:90:74:8f:1f:57:9d:
ad:8b:ad:6f:d6:06:51:a5:a8:1f:3c:26:0d:c7:18:
90:83:ee:0d:18:3b:76:31:1d:f4:f1:db:92:97:5d:
5b:84:e7:bd:94:cb:17:31:d2:16:5a:fd:ba:eb:06:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:26:E2:3E:5A:D5:57:94:0A:2C:2B:99:B4:F8:FB:FF:A8:10:BB:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07BCAF40DA3011EF9E897F7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:16:f5:bb:16:0f:31:c4:9e:0a:4c:62:bb:ff:06:4f:74:ff:
e0:00:e2:a0:f8:e4:b5:9e:1d:94:a4:19:e6:b9:65:98:2b:81:
ca:8b:87:89:08:8a:86:e4:46:32:95:07:0c:f8:76:d3:75:83:
54:14:f5:2e:7e:07:da:93:ea:c2:c7:e2:54:34:c7:94:47:7e:
91:a8:8f:0a:c1:a0:19:4d:5f:9f:34:c3:75:2e:cf:a6:2c:0b:
ea:97:49:d2:ff:a1:ec:22:91:81:21:52:28:20:f2:c7:da:f3:
97:8c:c9:df:79:f7:36:bf:0f:79:45:ef:c6:a3:0f:be:21:6c:
cf:fa:7b:5d:38:64:91:3c:13:18:13:93:0f:02:06:c4:79:1d:
09:1c:14:1d:91:16:b1:1b:ad:87:39:a9:b1:4e:ae:bf:fe:e1:
53:81:5d:44:cc:ae:e3:bc:5b:2b:22:f3:5e:38:2a:dd:c8:c5:
b1:3e:e3:97:97:eb:9c:26:34:dc:0b:65:e6:4c:3a:38:cd:cd:
f7:99:74:bc:ce:7f:2e:e3:c4:13:4a:61:68:76:d6:60:40:cd:
b1:75:09:ef:ca:3d:4a:65:b4:de:ef:ea:c1:6e:d5:c8:27:ee:
98:61:53:d3:ea:c3:d7:2c:c3:88:b1:cc:38:96:3e:97:f4:16:
1e:72:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:56 2025 by rpki-client