Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/186C2818D97F11EFA3CDC252762E951A.roa
File: 186C2818D97F11EFA3CDC252762E951A.roa (raw, json)
Hash identifier: MraTL0j9qNsMc33K/kUHleh9Q/17TmfzSoAqA8zxR5I=
Subject key identifier: 4D:9C:E9:BA:0E:70:16:2F:C3:AC:A8:DA:6B:AB:74:B7:12:9F:5C:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/186C2818D97F11EFA3CDC252762E951A.roa
Signing time: Thu 23 Jan 2025 11:42:16 +0000
ROA not before: Thu 23 Jan 2025 11:42:13 +0000
ROA not after: Thu 13 Mar 2025 11:42:13 +0000
asID: 63139
IP address blocks: 154.203.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82359 (0x141b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:42:13 2025 GMT
Not After : Mar 13 11:42:13 2025 GMT
Subject: CN=67922b18-3b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:9b:29:d0:62:cc:39:e4:6b:75:1a:ad:2a:
92:6b:cc:08:73:b7:19:e8:59:e2:fd:ac:57:98:58:
cb:e0:b9:d3:3b:ca:bd:62:30:bb:82:5a:cb:86:ee:
02:69:65:3f:1d:4f:b9:da:d6:b7:46:59:09:37:97:
c8:63:59:d0:2a:6c:ca:13:ec:48:b1:a6:3d:e1:7d:
6a:4a:74:fa:6b:c7:d6:c6:73:50:f9:f9:a5:df:82:
32:e9:25:51:4a:10:09:5c:8e:31:d4:ac:50:c4:78:
96:39:f4:df:de:2a:f8:64:06:0e:6a:a3:64:7a:03:
19:fc:73:ed:c4:e9:0f:b1:67:d1:40:ad:ec:16:fb:
97:fb:7a:c9:42:47:a5:d8:56:a9:19:92:97:a6:8c:
05:ed:71:0c:5d:c8:6f:08:15:2d:64:1d:0b:b8:04:
b2:23:1e:98:10:a9:18:64:28:b2:2b:91:18:d8:6a:
d6:44:f2:d9:bb:92:6d:6a:51:db:d6:fb:21:8d:70:
e2:45:a2:b0:c5:e5:02:18:0a:60:1f:82:83:a0:b8:
4a:88:48:09:80:04:42:18:42:bd:0a:72:71:79:dc:
2e:56:8b:df:bd:df:8c:00:a1:60:31:68:92:d4:b5:
02:8c:4f:36:db:42:84:07:44:50:36:ea:a1:da:06:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9C:E9:BA:0E:70:16:2F:C3:AC:A8:DA:6B:AB:74:B7:12:9F:5C:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/186C2818D97F11EFA3CDC252762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.161.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6c:5f:0e:84:4f:5b:9b:7b:2c:b6:75:81:4d:93:34:f3:e1:
7b:b8:88:59:f6:a4:24:8e:06:20:3d:af:f5:64:3e:f5:cb:2f:
c5:a8:d0:a4:26:b2:94:0f:e1:74:fb:71:5d:5d:f7:ab:fc:96:
b9:0d:23:f6:b6:8c:01:90:47:89:97:18:8e:7f:b6:bc:d9:fe:
0f:e4:c9:b2:9e:3c:8d:7a:ab:21:72:3c:b6:df:f7:9f:0a:b9:
c6:b6:73:97:48:72:08:ef:0b:0b:4d:31:ab:27:d3:51:df:53:
d8:8d:f2:ed:b3:3a:ac:65:68:1b:82:bf:e3:7d:52:31:6f:df:
93:ee:15:70:26:12:02:89:a1:4d:85:23:a8:03:dc:13:98:4c:
d7:41:85:92:8a:19:ac:68:e0:6f:b3:7a:50:93:3b:4a:07:0a:
92:c2:d2:be:e4:c7:da:51:18:f9:76:4d:20:32:eb:ee:a9:d3:
da:05:d1:4d:10:72:9b:19:cb:64:fe:06:30:76:8c:11:1e:54:
70:14:cd:32:8f:96:54:c5:71:93:17:47:84:a6:60:e4:20:0a:
bc:9d:8c:96:37:f5:31:c2:50:05:7d:9b:b4:60:dd:b1:1d:5e:
64:f4:09:0e:81:89:73:42:71:1f:54:cb:7a:1a:59:72:0d:69:
01:30:3d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:31:36 2025 by rpki-client