Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4EEA4CDE1811EFB3E9E361762E951A.roa
File: 0B4EEA4CDE1811EFB3E9E361762E951A.roa (raw, json)
Hash identifier: wyF058RiZArJQc3ORxW5QNU/K0F8lvQnrdnqRdkeJIo=
Subject key identifier: 8A:3B:86:B2:31:F6:8F:ED:9E:8D:F8:EC:34:41:8A:4E:6E:DF:34:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4EEA4CDE1811EFB3E9E361762E951A.roa
Signing time: Wed 29 Jan 2025 08:07:12 +0000
ROA not before: Wed 29 Jan 2025 08:07:08 +0000
ROA not after: Wed 05 Mar 2025 08:07:08 +0000
asID: 203020
IP address blocks: 154.203.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85316 (0x14d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 08:07:08 2025 GMT
Not After : Mar 5 08:07:08 2025 GMT
Subject: CN=6799e1b0-20d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:23:ad:9a:1b:6f:d4:0b:e6:cf:89:4e:fc:
65:6c:09:25:49:7a:4f:a0:00:11:63:8d:cd:d9:84:
2f:bb:db:41:5e:59:ae:66:ea:a5:77:80:71:ec:6a:
f3:b7:c9:ba:b9:80:06:15:99:46:41:4e:db:12:16:
c1:2a:2c:68:c4:c2:37:0a:8d:5e:20:66:34:2b:b3:
25:4d:92:97:37:d8:11:82:03:c4:9a:48:8e:fa:4f:
a2:82:b7:ca:cf:f8:43:9f:3d:cb:56:60:b6:ab:b6:
5b:12:cb:4a:c0:d1:d5:7f:4d:98:51:3c:37:17:e5:
34:ea:90:ae:18:09:79:76:fb:0f:e4:41:64:4f:85:
db:52:7e:9d:52:ac:15:c7:0a:93:7e:c1:97:52:ae:
84:43:c8:49:c3:58:31:29:66:b4:9e:00:f3:84:92:
db:9d:0f:36:13:16:5a:c5:0b:a1:ec:25:fe:fc:dd:
85:c2:ee:4a:b3:73:be:0e:ad:9e:91:aa:0a:21:2f:
7c:6c:43:90:ef:cc:a8:0a:b5:94:c0:f4:a7:12:96:
80:e4:c8:de:e7:dc:71:36:69:74:d2:bf:9c:d0:49:
8d:5d:cd:9a:32:dd:58:ef:e0:8c:5b:3e:5e:3f:c9:
bb:5b:fe:25:26:1f:54:da:fe:81:79:38:8d:9e:b5:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3B:86:B2:31:F6:8F:ED:9E:8D:F8:EC:34:41:8A:4E:6E:DF:34:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B4EEA4CDE1811EFB3E9E361762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.63.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ab:7a:da:20:fb:46:75:a5:e1:64:68:78:2b:89:da:44:b4:
4e:a1:5a:e3:ba:c9:5c:42:f9:e4:b9:5c:5c:97:ce:9f:48:81:
96:4c:97:2d:ab:e7:38:70:14:b2:de:44:76:4b:76:9c:3d:32:
ee:94:e4:95:62:2c:4a:e9:c0:d7:dc:32:69:b8:de:13:63:b2:
9f:d7:33:f5:d0:06:91:f5:38:8d:bc:0e:a6:14:85:75:54:14:
68:45:48:73:ce:d0:a3:69:0b:e0:8d:d0:89:27:41:f0:b3:13:
4c:64:7d:d2:57:07:90:a3:40:e5:a1:a0:94:ba:de:83:30:df:
ee:92:be:9d:f2:5b:71:e0:fe:33:fe:1e:83:b2:d0:d1:6a:94:
0d:97:04:06:6f:4b:e3:9b:7a:df:df:fc:eb:5d:d4:79:e4:22:
d8:36:0e:95:c3:f0:a4:29:54:10:67:76:18:1e:d5:68:e6:83:
68:76:f1:24:ec:cf:6c:00:32:87:38:ef:63:56:ef:8f:a5:65:
ef:df:07:0f:dd:f0:04:37:10:9c:ed:09:68:76:ae:a3:2d:7e:
d4:47:9e:b3:e9:d9:0c:0d:53:ac:2d:5e:1e:6b:e3:63:eb:99:
f3:d6:18:2c:e5:65:57:66:ca:bd:11:e6:b6:1a:09:ac:ae:e9:
a8:27:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:48 2025 by rpki-client