Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C57D3C4D68211EFA1F2608E762E951A.roa
File: 0C57D3C4D68211EFA1F2608E762E951A.roa (raw, json)
Hash identifier: izpw70ppTiLjSUx56D8zKiryYtN5dOWdgvjE7XTfzEM=
Subject key identifier: EC:9F:B1:08:DC:C1:EE:AE:E1:DD:44:D1:E4:68:80:63:E7:E2:FE:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C57D3C4D68211EFA1F2608E762E951A.roa
Signing time: Sun 19 Jan 2025 16:25:51 +0000
ROA not before: Sun 19 Jan 2025 16:25:48 +0000
ROA not after: Mon 24 Feb 2025 16:25:48 +0000
asID: 18779
IP address blocks: 154.203.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81413 (0x13e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 19 16:25:48 2025 GMT
Not After : Feb 24 16:25:48 2025 GMT
Subject: CN=678d278f-31fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:ca:1a:3d:62:9e:bc:b2:3b:b7:4a:8e:04:
bb:b0:9b:5d:f3:b8:7f:0f:2c:67:bd:41:3a:38:c1:
5c:7b:f0:23:cb:0a:e6:e1:c7:e7:15:52:e5:ba:f7:
03:63:ab:8b:74:f0:79:e8:b2:4d:9d:35:f8:98:71:
a7:38:c7:8f:68:01:6a:e5:77:d3:50:a2:f6:fa:6e:
e8:75:a1:a6:e2:6a:01:00:dc:9a:18:91:09:c5:43:
d2:37:84:a2:bb:0a:8f:9d:3b:af:29:53:60:53:eb:
5d:fe:81:51:ed:62:cb:dd:41:bb:04:f8:5e:32:32:
65:66:18:9e:1d:5b:67:9a:46:8b:33:d8:e8:4b:98:
62:48:37:5e:4d:dc:3a:2b:13:f9:45:bd:c3:1f:3f:
f4:d8:f7:f9:de:6f:85:53:12:f6:ac:83:67:31:dc:
02:29:b5:04:4c:10:cb:04:e3:5d:71:2c:d2:97:0a:
58:e5:e2:93:63:92:76:d8:79:d9:68:ec:40:5f:75:
40:ce:c9:f7:0b:a4:4f:51:b2:e0:27:27:57:a6:f7:
04:0d:a1:c5:fa:c8:cf:05:22:59:04:d7:fe:38:4b:
aa:03:d5:14:e8:c8:ce:0a:51:17:96:5f:f7:fe:b5:
b2:cb:9f:db:9f:0f:b0:b2:ad:04:00:f2:44:ee:00:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:B1:08:DC:C1:EE:AE:E1:DD:44:D1:E4:68:80:63:E7:E2:FE:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C57D3C4D68211EFA1F2608E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:55:f6:c1:e8:3f:eb:16:29:cf:c1:96:a9:fd:9b:71:17:b8:
2c:be:29:ed:0b:ad:6b:d9:a6:9f:24:e9:b8:01:4d:16:8b:f3:
49:e1:da:3f:94:ae:21:3c:e4:73:b2:96:96:1c:c3:a2:8c:d2:
24:52:2b:b2:19:00:b0:c9:2e:42:ca:e9:4a:df:00:b8:19:05:
d5:4f:43:35:a3:23:08:87:56:e0:3c:52:a2:76:ec:6d:71:2f:
e2:31:79:78:17:e1:e3:cb:22:ad:10:0f:25:64:a6:99:dd:c3:
a4:f8:81:67:9b:f0:19:2a:71:5a:6c:70:eb:43:54:b1:2f:55:
ea:06:14:f7:7e:21:69:b0:0f:98:1a:08:3d:47:06:37:9b:13:
08:0f:46:ae:5e:f1:75:78:a4:cc:03:02:d7:3a:a5:af:9c:9f:
45:f0:f8:d2:91:ae:5a:36:63:26:e3:77:91:a8:5a:03:66:4a:
0c:ba:0a:41:80:0e:84:78:b7:58:c2:6a:84:fa:91:75:59:0f:
0a:ec:bd:d3:b6:83:a7:5f:23:d7:69:8e:52:26:72:ad:5d:e2:
81:c3:02:d2:7b:ac:16:ed:d0:65:f6:6c:37:64:56:0e:0b:4f:
56:d8:06:47:e8:ed:fb:6b:de:3e:a1:ae:c5:6c:86:b2:05:ab:
06:b2:3d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:36 2025 by rpki-client