Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E6B4394DA6A11EF9083F584762E951A.roa
File: 0E6B4394DA6A11EF9083F584762E951A.roa (raw, json)
Hash identifier: pCoOxC7KmLjYbdUbnl9A5+CmOC8qbHw0ud1aQZ8tpQg=
Subject key identifier: 11:6E:3B:0F:1C:E7:1C:EF:4B:61:36:BA:A2:7A:E8:C0:76:04:0C:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E6B4394DA6A11EF9083F584762E951A.roa
Signing time: Fri 24 Jan 2025 15:44:12 +0000
ROA not before: Fri 24 Jan 2025 15:44:08 +0000
ROA not after: Mon 03 Mar 2025 15:44:08 +0000
asID: 203020
IP address blocks: 154.223.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84159 (0x148bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:44:08 2025 GMT
Not After : Mar 3 15:44:08 2025 GMT
Subject: CN=6793b54b-9438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:22:3f:70:71:00:c8:78:55:66:84:6a:e3:
46:7f:92:c6:51:ef:c1:7f:3f:d1:82:f6:f9:99:39:
13:68:c4:dc:ba:ae:68:9b:7c:9f:41:26:6f:d6:45:
40:d0:63:1c:f9:5a:86:48:6a:eb:57:89:fd:79:34:
7b:e5:ff:1c:2d:ee:3d:79:b8:c3:9b:20:51:82:d1:
b6:f8:27:36:36:37:26:d0:91:04:8f:92:29:7e:cb:
b1:66:d1:6b:50:8d:fd:84:16:42:6e:b8:68:3f:86:
09:30:e5:85:57:d0:c4:cb:08:3f:19:3f:a0:3b:9a:
06:a5:db:53:31:6d:2e:58:d5:d7:85:20:a6:1d:d5:
5a:be:bc:6d:44:3d:23:6c:c9:c1:ca:06:b0:fb:9a:
2b:4b:59:c6:8e:75:0f:28:da:a9:ae:5a:2a:9f:e7:
6e:4d:1c:3f:e0:55:d5:9c:41:a6:75:7e:25:83:a0:
a6:d1:10:a2:06:42:fb:2e:50:c7:be:77:f2:7f:e5:
0a:2d:7f:fe:f9:c4:98:91:fa:74:2c:61:9b:30:8a:
64:f4:6d:2d:c2:db:2b:ab:1d:06:1c:a7:e2:3e:d5:
d2:df:26:31:38:27:23:62:69:a9:32:59:06:59:07:
0e:20:46:b0:08:0d:ad:cf:80:d0:65:40:bd:b4:f4:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6E:3B:0F:1C:E7:1C:EF:4B:61:36:BA:A2:7A:E8:C0:76:04:0C:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E6B4394DA6A11EF9083F584762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.141.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ad:f4:b5:5c:72:04:9a:c3:6b:12:90:5a:db:4d:24:4a:93:
68:93:ae:14:cd:65:e5:c3:04:31:d3:80:fc:71:50:2f:27:33:
73:6d:a5:b2:43:04:05:4d:e7:ea:01:73:bd:a8:f2:71:79:ca:
9a:e0:8d:10:46:a5:5a:00:b0:55:c2:50:91:b6:bd:85:08:ce:
b2:d0:b2:60:08:77:52:f8:0d:87:85:41:88:6a:06:cf:97:17:
c0:de:c5:9c:62:a1:7d:b3:23:c2:bf:72:40:dd:cb:8d:8a:ca:
a4:3c:5b:bf:e8:d4:82:7c:51:29:f0:ef:c5:88:59:33:a2:e2:
bf:0d:9b:16:96:96:2a:1f:ee:92:e1:8f:82:63:2e:a3:17:1d:
86:d7:f0:38:6b:13:72:53:f9:3c:47:82:d5:47:5a:dd:5a:d8:
a5:fa:3c:8e:91:76:88:36:85:a4:c5:05:a3:79:8d:fd:fe:e4:
0c:8b:62:3c:b9:49:1d:47:18:59:fa:30:36:0b:ab:d3:f3:b7:
b0:4b:29:9d:ae:b8:ba:c1:80:ba:48:96:8e:08:20:70:2e:b3:
c8:78:f0:72:1a:48:55:46:11:cd:9a:4b:f5:54:4b:c9:90:a1:
9a:27:61:86:ac:dc:ef:f4:b5:c8:b2:b9:f5:bd:f1:cd:9b:bb:
8c:32:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:56 2025 by rpki-client