Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23698A80DA3311EFAA4EB18E762E951A.roa
File: 23698A80DA3311EFAA4EB18E762E951A.roa (raw, json)
Hash identifier: PqScr2B2WCjV8JQvoYdemCkunw0tB3N2v5TQshJu7+I=
Subject key identifier: 8E:F2:FE:07:F1:35:A7:CA:BC:2F:98:6A:59:4C:F3:D1:8A:28:5B:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23698A80DA3311EFAA4EB18E762E951A.roa
Signing time: Fri 24 Jan 2025 09:11:04 +0000
ROA not before: Fri 24 Jan 2025 09:11:01 +0000
ROA not after: Thu 13 Mar 2025 09:11:01 +0000
asID: 63139
IP address blocks: 154.203.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83139 (0x144c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:11:01 2025 GMT
Not After : Mar 13 09:11:01 2025 GMT
Subject: CN=67935928-e860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:0e:1e:50:76:98:a7:3c:7d:ec:cb:c6:e3:
ce:74:9f:f2:30:b1:f6:fe:d7:fe:4b:8b:b7:d7:fd:
76:49:16:8c:f6:83:8c:6b:53:a9:7c:37:83:3f:ec:
19:4e:7a:02:80:88:2c:ea:f5:98:76:e8:26:25:70:
21:f2:ad:05:2a:7c:58:d9:2d:61:cd:6a:3d:04:08:
91:eb:41:ce:be:ec:1b:f4:10:12:14:e0:8d:45:25:
de:22:5e:85:9b:16:50:18:57:79:7d:88:65:27:db:
37:a3:94:eb:b0:1e:98:73:a2:c2:31:a7:cc:cc:de:
2c:79:26:dc:42:af:0a:53:92:22:be:c7:16:e4:63:
33:20:ca:c8:b2:31:c2:6c:83:63:92:d1:d0:a4:71:
90:0f:48:c3:94:9c:db:8f:a8:0a:7e:68:31:2c:f8:
8f:20:c2:2c:b8:d1:36:0b:cb:f3:03:09:d7:42:27:
da:61:2b:05:69:f7:cd:d2:28:f8:f1:ef:ac:ba:03:
34:70:75:8f:dc:03:9c:ff:c6:c3:e1:31:33:02:22:
ad:0c:28:30:c9:50:a3:27:f9:ac:e7:94:3e:fb:11:
07:50:0c:43:45:36:1e:10:35:f4:91:fa:18:1d:e0:
38:00:df:e5:51:77:1c:1f:6f:b5:f9:70:26:e9:38:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F2:FE:07:F1:35:A7:CA:BC:2F:98:6A:59:4C:F3:D1:8A:28:5B:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23698A80DA3311EFAA4EB18E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.177.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ac:47:ad:36:eb:37:7e:be:2b:eb:91:5f:24:49:29:59:3d:
1c:2a:d0:bc:99:9d:bd:6c:30:99:2a:88:62:35:99:1d:3d:15:
9a:e4:19:eb:5e:b1:b9:69:f2:2c:f9:c8:8f:81:4f:32:92:52:
6b:24:b3:1b:0d:73:43:b6:64:01:77:9e:a6:e6:43:2a:aa:80:
a3:1d:58:e8:8c:94:a6:c2:d7:a1:5b:b0:1c:01:5b:09:32:f5:
32:67:06:82:a4:dc:01:2b:63:28:98:c1:0a:71:05:d9:24:f7:
bd:12:6b:a9:d0:7f:2d:ac:f8:0a:b5:05:bb:66:b8:50:f9:0d:
ea:8c:1a:2f:61:13:8e:6a:22:cc:57:ad:b3:e4:36:92:70:95:
f9:76:d1:83:d5:9a:b5:bb:f8:87:87:66:2f:f6:b1:57:1f:6f:
a8:2c:c4:c4:7f:ba:8c:0c:fe:32:e3:c9:5c:19:83:30:a4:31:
4f:91:48:e1:d4:5c:41:a1:34:35:52:e0:5a:95:d8:d9:e3:be:
78:19:e1:40:7e:97:c7:61:2b:da:bf:1f:6e:88:a1:ab:15:e6:
f9:91:9a:68:52:3f:5f:0c:27:dc:16:69:f5:e5:2d:e9:6b:af:
86:e9:f0:f0:ce:3e:ea:4d:46:61:b2:ae:92:e3:64:f3:ce:d0:
fd:cb:a1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:05 2025 by rpki-client