Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187A6B28BB7811EF86CE2C96762E951A.roa
File: 187A6B28BB7811EF86CE2C96762E951A.roa (raw, json)
Hash identifier: ZJpqTUdHngM8f8/ZU/wtgBsLOlqKVRcfJ7jP/OAOb0o=
Subject key identifier: 4D:9D:67:47:83:B6:C1:27:2B:A8:F5:56:16:5D:7E:E8:B5:87:DA:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187A6B28BB7811EF86CE2C96762E951A.roa
Signing time: Mon 16 Dec 2024 06:36:35 +0000
ROA not before: Mon 16 Dec 2024 06:36:32 +0000
ROA not after: Tue 04 Mar 2025 06:36:32 +0000
asID: 142403
IP address blocks: 154.209.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72592 (0x11b90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:36:32 2024 GMT
Not After : Mar 4 06:36:32 2025 GMT
Subject: CN=675fca73-467f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:6f:5a:77:a8:be:01:70:23:a6:bf:6c:e6:
0f:5c:c2:3b:09:d2:5f:db:28:f5:88:b2:f7:3d:65:
1f:80:db:f2:79:84:c7:c9:03:0c:af:2c:a5:76:d5:
4c:d5:cf:b8:20:9c:7a:43:18:96:cd:04:c8:2d:a1:
2b:40:eb:5d:4d:59:06:48:20:9e:3a:7b:dc:42:71:
82:cb:9a:6f:e7:5b:5f:17:4f:62:ff:fd:a4:4b:5c:
b5:e7:88:7b:62:fa:8a:5e:9f:09:3c:71:2b:e9:08:
e8:18:2a:33:47:0b:6a:c2:02:d7:50:1b:8d:c9:3e:
b6:86:b6:69:52:68:a1:d2:b5:be:51:f0:f3:97:22:
74:7a:bd:2d:a1:77:58:fe:d2:6c:58:13:8c:11:f3:
24:07:73:2c:3d:74:ac:44:b0:3b:8c:dc:e0:c5:e6:
f5:52:d1:64:8f:2a:88:3d:d3:0c:b6:fe:88:2b:86:
54:a5:4a:df:44:97:70:56:d8:2a:79:e4:84:51:4e:
63:76:f2:fb:af:6f:47:cf:4f:7b:c8:5f:ba:30:df:
be:37:bb:46:95:a9:19:55:a5:a9:08:e7:6e:8d:b9:
f0:73:c4:f5:a3:71:40:f7:0c:da:b0:32:d7:88:2a:
2b:38:a7:d1:a3:50:2e:fa:35:ad:e8:c1:95:5c:e5:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:67:47:83:B6:C1:27:2B:A8:F5:56:16:5D:7E:E8:B5:87:DA:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/187A6B28BB7811EF86CE2C96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.4.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:a0:9b:0c:2a:55:ef:18:41:fc:4f:72:91:95:25:6f:94:a6:
23:a2:b1:87:41:3c:94:f7:49:ff:9f:3d:d4:01:5f:dd:4a:49:
94:68:72:7d:77:fa:a9:05:29:e2:af:17:ee:0a:e4:12:59:84:
07:59:30:83:2b:9a:0d:90:16:60:cf:55:1e:cd:75:eb:17:a1:
8e:58:92:7c:86:b4:eb:e1:6b:99:c9:5d:6a:9a:42:7e:4c:d8:
10:de:15:01:88:89:ce:7e:04:05:fc:1a:d5:80:ae:55:df:02:
f7:be:18:7f:b7:e6:d9:48:f5:cf:22:6b:aa:fb:b0:b5:3a:df:
af:03:eb:67:a4:cd:a4:8b:15:2e:3e:fc:19:b8:76:fe:3a:98:
79:32:a7:cb:53:b9:73:74:34:88:2b:9f:87:01:84:d8:b6:f4:
4e:cc:56:9e:a7:66:c3:ec:1a:f1:b7:6f:96:aa:64:aa:ca:88:
ab:1a:87:6d:10:d4:11:53:24:89:e6:0c:17:88:b3:63:11:40:
27:ea:24:f0:2d:1d:b5:cd:94:5c:a5:9a:d5:74:1a:d3:4b:ef:
68:33:e8:e0:67:d3:5d:8b:23:86:9c:48:4e:48:6d:d1:06:36:
35:66:05:8f:41:aa:74:d1:40:09:39:de:a5:54:ea:13:37:1f:
b8:51:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:36 2025 by rpki-client