Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1927B2F2DA6211EF8927CA50762E951A.roa
File: 1927B2F2DA6211EF8927CA50762E951A.roa (raw, json)
Hash identifier: FglatZIN6GS8iHYq4V6VYBxb3e0F4aoAiLoMmbtYTJY=
Subject key identifier: 9B:C1:D8:C7:F6:20:28:FA:2E:66:34:19:BD:6F:5A:EB:C0:2C:C0:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014863
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1927B2F2DA6211EF8927CA50762E951A.roa
Signing time: Fri 24 Jan 2025 14:47:14 +0000
ROA not before: Fri 24 Jan 2025 14:47:10 +0000
ROA not after: Sat 01 Mar 2025 14:47:10 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84067 (0x14863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:47:10 2025 GMT
Not After : Mar 1 14:47:10 2025 GMT
Subject: CN=6793a7f1-7ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:e4:f8:fc:7e:4d:88:25:16:2f:95:3b:57:
69:6f:3c:f9:05:dc:cf:27:e1:82:ff:e5:89:db:2b:
f2:24:cb:3a:61:80:aa:23:d2:6a:93:65:5d:53:f4:
d0:0a:37:94:db:24:46:2a:33:df:35:12:2f:02:d8:
76:0a:9d:2a:9d:66:d9:1d:8e:f4:2a:71:94:21:ae:
c7:b2:ce:57:f9:53:83:0a:76:b5:f9:cf:d2:ea:06:
c0:9b:9b:92:d9:60:a4:a3:b3:c8:58:77:e7:b3:00:
9a:40:84:c5:cc:12:3d:89:9c:dd:5f:02:ce:6e:25:
e6:1e:2d:32:32:92:0a:04:c6:2f:58:cd:52:a0:32:
b9:17:47:25:8f:d5:7f:7f:2c:97:4a:53:a6:4a:d9:
00:05:f1:4c:2b:b8:ab:3e:98:09:24:64:b5:e5:7b:
8b:d5:75:b0:38:f4:91:36:ef:db:de:49:75:fe:5b:
07:53:95:37:3f:1a:43:ba:14:5b:c5:c1:f7:4b:2c:
4e:0d:c2:e1:f4:c9:83:7f:56:ff:6e:72:f8:d0:48:
56:3c:ab:d9:ab:4c:08:95:21:13:ad:6b:47:cc:e3:
1e:53:3b:04:8c:b3:34:f6:26:9e:19:2a:7f:40:df:
16:9a:80:01:88:d7:f3:1c:ba:c6:60:e4:fe:ce:12:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C1:D8:C7:F6:20:28:FA:2E:66:34:19:BD:6F:5A:EB:C0:2C:C0:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1927B2F2DA6211EF8927CA50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:19:c6:6a:15:f7:2c:07:8d:8f:01:31:99:e5:1f:a1:c4:35:
96:db:91:c0:a8:5a:23:d0:34:34:4c:c4:2c:99:c2:8c:40:0e:
5c:9f:53:2a:f7:0f:cd:c9:4f:2f:4d:fc:0c:b1:89:5c:c1:dd:
0f:ce:25:67:d9:2b:15:b3:06:b6:96:f5:f0:dd:33:70:5d:3f:
07:2f:79:34:dd:ab:bb:ff:b1:83:45:18:e2:97:64:16:bd:f9:
15:43:5a:81:9d:d5:a8:b7:6c:b6:78:10:9d:31:16:6e:b8:cc:
ed:da:8a:87:53:00:e3:63:83:69:dd:b4:0e:5a:da:6d:6b:f9:
31:2f:14:03:83:68:66:32:7d:40:b7:46:67:71:fe:64:3c:5e:
eb:75:59:af:74:31:05:b7:16:9e:62:15:97:cb:c5:f9:de:31:
56:36:66:85:18:b6:d2:3e:48:39:5e:34:34:2f:01:fb:a2:ca:
11:75:ed:37:36:3c:76:15:d7:7c:7e:43:b8:47:11:8f:b8:07:
d8:3e:a9:f1:39:d3:b7:5c:f4:8f:e9:c2:44:3d:6d:11:81:ae:
43:de:c8:ef:3e:42:e1:03:a2:b7:3a:c8:26:14:4a:f8:3c:48:
93:03:64:43:49:dc:1c:60:ab:80:cb:2c:f1:da:24:4a:18:d5:
5c:8a:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:36:05 2025 by rpki-client