Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/203F6F84DA0911EFABA38278762E951A.roa
File: 203F6F84DA0911EFABA38278762E951A.roa (raw, json)
Hash identifier: MFk0cGweXQpHG1wXDZWmdUkcYAbV9vEDsh/GPlB1PcU=
Subject key identifier: 7A:F2:36:8C:27:83:6E:A5:38:55:72:F9:D9:8E:04:EC:78:D8:74:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/203F6F84DA0911EFABA38278762E951A.roa
Signing time: Fri 24 Jan 2025 04:10:20 +0000
ROA not before: Fri 24 Jan 2025 04:10:15 +0000
ROA not after: Sat 01 Mar 2025 04:10:15 +0000
asID: 44559
IP address blocks: 154.81.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82868 (0x143b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:10:15 2025 GMT
Not After : Mar 1 04:10:15 2025 GMT
Subject: CN=679312ac-2966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:66:28:2c:e8:3e:fc:78:c9:1a:ac:04:23:
92:7b:90:1c:ec:03:f1:bc:76:cc:0a:df:3f:ee:25:
22:04:73:c9:f8:6f:47:11:84:d1:49:b1:9c:2d:26:
4b:33:6e:c8:bc:35:3b:2e:92:94:32:4a:e2:cb:37:
b8:6c:f9:d3:cb:a3:24:d2:0e:4d:81:33:31:48:0e:
df:a3:81:24:06:b6:f8:1d:7b:99:0e:ed:85:a0:67:
05:82:22:76:a1:dd:bb:ef:53:bf:0a:94:ed:07:11:
39:76:96:36:ec:a4:2b:12:c8:fb:7d:9a:ed:6e:23:
1b:9d:67:5b:b8:73:ef:b4:39:ce:74:f3:f5:96:2d:
c9:5c:3a:50:84:2e:4f:1c:8f:7d:a0:d2:01:68:d5:
e9:95:b8:c4:b2:e0:95:61:c8:11:2c:67:6e:1d:7f:
a0:80:15:08:4d:4e:b4:26:39:ec:2e:5e:0e:a9:a7:
bb:86:02:fe:ab:ce:40:ed:e9:bb:8f:a3:d7:e6:59:
e2:dc:f0:f2:82:1f:65:2c:68:54:11:7f:60:2f:33:
8e:80:27:f9:b2:36:8f:99:7d:ed:f5:46:46:65:0e:
09:80:db:dc:dc:73:4c:33:23:d4:a0:f0:8c:d1:46:
03:20:ea:d8:ee:14:c4:b9:90:f5:1d:98:c8:b5:90:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F2:36:8C:27:83:6E:A5:38:55:72:F9:D9:8E:04:EC:78:D8:74:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/203F6F84DA0911EFABA38278762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ea:f4:8e:14:11:a1:f4:48:60:18:94:50:85:0b:ab:55:a2:
42:3c:d9:ba:fa:2c:d3:f0:75:95:9a:bc:1e:33:28:10:b1:85:
7c:e1:b1:3f:19:55:4d:c9:94:6b:e8:d5:d5:b3:2c:09:d3:6a:
f5:89:ef:f1:c8:87:46:c8:7d:59:9f:14:4c:fd:6d:d9:a9:72:
bf:9f:7b:fa:e1:74:ae:0e:c4:7b:82:48:ce:9d:fe:93:0b:d1:
2f:da:6d:d6:df:6a:58:38:8a:1c:a8:55:f5:88:1c:02:01:59:
f9:df:55:18:3f:b5:4a:be:f3:c8:3a:26:f6:db:2e:93:3e:12:
c5:77:95:50:35:34:d5:32:e3:93:ba:79:02:0f:6d:1f:84:bd:
2f:81:3c:96:49:4d:6c:04:2b:de:d4:36:62:23:06:24:90:90:
7c:80:d4:9c:3c:81:c7:82:ad:31:0c:59:57:85:84:be:67:3a:
1d:ae:81:06:0f:bc:02:05:77:5e:09:69:4e:7a:11:a5:fd:4c:
cb:27:79:64:53:2a:7e:90:70:71:4b:dc:11:53:b5:5a:4f:bc:
28:db:41:96:5c:53:e1:12:88:55:94:15:61:9d:12:36:cc:7b:
31:15:e3:1d:c4:46:89:b2:5a:53:5d:65:e2:21:5b:af:6b:9e:
c5:11:8c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:34 2025 by rpki-client