Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/184671A8DA5711EFB6E4E684762E951A.roa
File: 184671A8DA5711EFB6E4E684762E951A.roa (raw, json)
Hash identifier: TalXKxMPtG8huY3xAJ8DAfmbYLIR/8MiN7kwfqnIH/U=
Subject key identifier: 33:84:9C:01:CD:57:AC:01:9A:DD:5F:D5:48:A6:E7:A2:90:02:F8:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014777
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/184671A8DA5711EFB6E4E684762E951A.roa
Signing time: Fri 24 Jan 2025 13:28:28 +0000
ROA not before: Fri 24 Jan 2025 13:28:24 +0000
ROA not after: Sat 01 Mar 2025 13:28:24 +0000
asID: 44559
IP address blocks: 154.203.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83831 (0x14777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:28:24 2025 GMT
Not After : Mar 1 13:28:24 2025 GMT
Subject: CN=6793957b-fece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:28:92:74:1c:02:68:d2:0c:b8:1b:03:d0:
b7:ed:61:03:4d:f8:66:7d:f1:c6:32:44:91:e5:88:
60:87:ec:5d:99:98:9b:58:37:8f:7e:a0:20:5b:2f:
b8:88:45:86:0f:15:b7:98:28:d9:15:62:fc:48:3f:
f5:30:bb:b1:2e:cc:5a:8d:58:5f:ca:b1:0e:ba:2f:
43:e8:a6:74:91:00:ca:f9:d4:d9:66:04:e3:15:74:
6a:0a:85:7e:31:07:5b:cc:64:5b:0d:f8:1e:b3:62:
df:bb:fd:96:a4:1b:8a:4a:79:4b:58:20:ec:89:c2:
36:4b:1f:48:83:19:e7:94:42:af:8b:bc:a8:9c:18:
e3:c1:51:39:53:ce:f7:44:55:ef:c4:b4:3a:7c:81:
4b:41:c4:61:f4:15:07:b2:30:18:73:bd:ff:c7:74:
0e:3b:7f:e2:ce:bb:50:c4:cc:49:0a:3d:2c:ba:45:
9b:01:08:a1:12:1a:a4:30:10:1f:f1:32:57:86:3b:
70:5d:64:bf:8d:99:92:51:5a:18:a7:49:c7:4a:c1:
21:0d:98:e6:ba:69:ac:90:3d:83:53:47:37:af:b0:
ce:44:e5:d6:54:06:aa:3a:b3:42:97:0e:73:0f:3e:
89:3b:e6:76:cd:3c:21:a5:0f:31:fc:ee:de:5a:2f:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:9C:01:CD:57:AC:01:9A:DD:5F:D5:48:A6:E7:A2:90:02:F8:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/184671A8DA5711EFB6E4E684762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3c:2a:85:c6:82:fd:c2:f7:bf:09:a3:76:bb:2a:01:c3:4b:
b5:24:6c:8c:f9:71:da:8b:1d:1a:0f:18:fe:1e:27:26:e7:6a:
4a:65:c4:ed:58:f6:e9:cf:92:5a:64:da:72:36:45:97:e3:30:
be:80:06:aa:5b:e1:0e:7a:e4:e4:ff:b4:0b:96:4b:6b:c8:51:
79:1e:9c:59:e2:6b:3b:3a:1f:c2:b0:dd:cf:2d:0a:23:77:2c:
75:01:a4:64:05:b0:ad:36:fb:b9:92:c6:bf:22:aa:3a:4b:f7:
62:3b:5a:1d:6d:9e:78:f1:aa:a9:63:76:f3:33:07:2d:09:b9:
b5:78:5e:47:06:b7:bb:fd:8e:25:76:40:97:b3:af:56:c4:1c:
24:27:1c:06:8c:6c:4b:f9:a9:8b:6d:90:32:c0:50:02:40:43:
d5:24:e8:49:38:51:2f:df:ac:a2:59:42:85:76:5f:f9:c3:53:
df:8e:01:40:91:28:51:9d:4f:51:df:be:0a:b1:ff:07:5d:42:
fd:bf:15:54:5b:ba:cb:e3:14:d7:3a:d6:e9:9a:66:96:3c:f9:
2a:7f:c3:97:d4:21:0e:08:df:7b:ce:de:4f:92:bc:af:55:ce:
ca:10:d2:46:56:cc:b3:8d:73:0f:c4:89:b3:6e:6a:f3:a9:db:
10:ad:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:30 2025 by rpki-client