Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235E117AC9C911EFA8BBC646762E951A.roa
File: 235E117AC9C911EFA8BBC646762E951A.roa (raw, json)
Hash identifier: hLQq5QypNzSTfOrnkW0BnA2AfpoLgcjTV+yZh07clA0=
Subject key identifier: BF:D7:35:25:A1:55:89:F7:CB:0E:ED:CF:E8:3B:87:2C:25:95:60:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235E117AC9C911EFA8BBC646762E951A.roa
Signing time: Fri 03 Jan 2025 11:51:59 +0000
ROA not before: Fri 03 Jan 2025 11:51:55 +0000
ROA not after: Tue 04 Feb 2025 11:51:55 +0000
asID: 203020
IP address blocks: 154.207.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79036 (0x134bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:51:55 2025 GMT
Not After : Feb 4 11:51:55 2025 GMT
Subject: CN=6777cf5f-adf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:b5:9e:89:ed:14:56:d7:47:50:0a:7c:5b:
02:e5:80:83:4a:f4:93:64:ba:fd:6b:e2:7b:1b:77:
c3:8a:6d:01:c4:63:79:6c:3f:6c:fe:56:40:08:77:
bb:d3:a2:d2:45:61:4f:11:59:5d:0c:dd:d9:9f:de:
7a:44:97:5b:3a:79:d3:f5:58:b3:da:d6:4f:93:da:
58:f5:f3:e2:0a:be:88:27:e7:09:28:44:86:da:bc:
d1:a0:ca:fe:7b:b0:b3:40:c4:d3:94:1f:79:01:df:
3b:8d:c0:29:fb:16:8b:2d:93:e7:3d:e3:bd:65:b8:
7c:70:93:ba:98:31:3f:27:76:dd:68:76:c0:36:32:
4b:43:8c:2e:59:5a:bf:4a:49:4f:e7:0f:40:d9:f9:
a9:a8:4c:86:cb:8a:b4:71:fb:b8:ff:bc:68:1f:3b:
d1:42:a1:b7:4d:67:17:d7:e9:a8:ec:cb:f0:39:93:
e2:42:5a:e2:80:94:dd:94:31:a7:02:03:0b:14:e0:
b4:60:d5:be:9d:07:b6:61:3e:2e:f6:88:ba:10:b3:
41:77:3f:ce:c4:36:84:6d:92:77:df:3a:3b:9e:d0:
93:98:8e:59:19:99:a6:94:96:5d:02:54:fe:6b:4d:
d7:65:7c:51:73:27:dc:db:b9:41:4c:f5:a9:0b:14:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:35:25:A1:55:89:F7:CB:0E:ED:CF:E8:3B:87:2C:25:95:60:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235E117AC9C911EFA8BBC646762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.102.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:8e:c4:19:31:16:cf:5f:27:40:a1:fb:b8:bb:4f:84:c3:f8:
f0:01:c8:aa:68:1c:e3:4f:4c:08:04:ed:b4:67:eb:41:2a:58:
91:9e:cb:57:16:26:24:f5:24:88:41:d6:18:25:4c:82:e1:22:
66:d4:36:95:1b:e0:06:bc:76:65:ee:a2:0a:f9:98:f2:54:41:
3c:83:9a:a0:2c:20:8f:99:20:cc:35:6b:ab:b4:95:5a:44:74:
4f:a8:5d:a5:85:75:36:74:d5:b1:1d:28:e2:e6:eb:1a:ea:b1:
ba:d2:a3:9a:55:a3:35:d9:29:10:6c:9b:b5:5c:ca:60:10:60:
b4:7f:12:62:0e:ae:5e:b9:6a:10:50:d4:7e:0c:66:1a:25:72:
b5:8d:a9:2d:56:4e:19:a9:12:78:4a:3d:25:d0:de:ea:99:f8:
f6:11:dc:fb:79:e2:8e:30:c3:a0:17:65:de:c3:ef:d2:6c:30:
58:f0:5b:34:c1:5d:d6:68:62:46:e2:57:ab:9c:ae:32:49:2b:
6f:8d:8a:0b:21:2b:84:5a:2b:d5:57:6b:60:7f:b7:cd:94:e0:
b8:d1:6d:0a:0a:8b:9e:f8:7b:f5:58:8f:83:80:e1:dc:b4:39:
a2:c7:bf:e7:65:d8:ef:b5:10:7f:f9:12:0f:b2:4a:fd:6d:4b:
0b:5a:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:36 2025 by rpki-client