Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256ADB06D97D11EF93045645762E951A.roa
File: 256ADB06D97D11EF93045645762E951A.roa (raw, json)
Hash identifier: PcorM7LgtUhyKCDk4Oani2KaihzIdQ60rgwEMUAcNMU=
Subject key identifier: 95:1D:AE:B1:F6:17:82:51:73:7D:0D:90:19:9B:FC:28:F2:1A:5F:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014199
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256ADB06D97D11EF93045645762E951A.roa
Signing time: Thu 23 Jan 2025 11:28:20 +0000
ROA not before: Thu 23 Jan 2025 11:28:08 +0000
ROA not after: Thu 13 Mar 2025 11:28:08 +0000
asID: 63139
IP address blocks: 154.203.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82329 (0x14199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:28:08 2025 GMT
Not After : Mar 13 11:28:08 2025 GMT
Subject: CN=679227d4-6ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:26:3b:fa:44:52:88:cc:09:4d:7c:d0:2d:f5:
7b:6b:05:03:1c:de:44:61:95:2a:fa:73:08:fa:d5:
15:2a:75:df:96:f9:d5:10:80:93:b2:2e:94:80:77:
6e:f5:60:cb:9b:e2:eb:df:08:c9:7d:c0:e4:8e:5b:
95:57:77:81:55:d0:63:e4:27:48:a4:ee:b3:11:65:
1b:79:a3:a2:be:94:bf:c0:8f:7e:fe:2c:de:06:41:
09:3c:a6:10:a4:68:0c:3c:f5:be:fe:9c:c2:b7:58:
70:66:7a:73:1d:c9:1f:0c:9f:75:ba:09:c9:ae:a3:
f3:5e:e2:b3:6a:2f:82:28:f6:83:f7:d2:dc:22:e7:
c2:15:8f:42:04:67:65:94:07:30:a4:58:20:ff:9c:
2e:4f:0c:67:ed:0d:f9:63:5c:2f:16:4e:13:a7:30:
43:a8:6b:0d:07:9e:fc:68:94:28:bf:26:77:00:8a:
59:4e:3b:b8:41:cd:06:9a:b5:67:f5:c1:a4:da:e1:
84:ad:7e:a5:0b:31:56:df:5f:09:84:ea:d7:aa:2d:
93:e0:1a:56:e4:65:8b:bb:c9:2b:f1:d9:87:46:e5:
57:3e:24:f9:d9:b9:de:2b:13:75:8c:f1:58:0c:e1:
8e:e8:d9:7c:8a:61:e2:cf:b1:ba:bc:c6:4b:98:b2:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:AE:B1:F6:17:82:51:73:7D:0D:90:19:9B:FC:28:F2:1A:5F:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256ADB06D97D11EF93045645762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0c:dd:b4:b9:9d:61:ba:5a:62:53:32:20:0b:ff:14:83:50:
a9:e1:4f:a3:09:52:7c:5c:e5:23:a8:88:41:9d:1d:e4:b5:69:
60:df:a7:16:2e:bc:ad:9b:ae:20:1d:9e:37:3b:bd:da:ac:7b:
78:3f:46:9e:f2:88:87:6f:37:bd:3e:34:42:9f:2b:0b:0c:17:
0c:c9:ad:b8:f4:80:be:8f:f6:0e:4b:e0:11:47:73:74:f5:87:
22:88:da:1c:de:9d:05:a9:51:a1:4f:fe:f1:80:01:69:69:04:
da:a1:b2:8a:27:7d:f4:4f:c7:87:97:f5:31:35:6d:b5:3a:f4:
f6:36:b6:03:8e:f1:c1:c7:a3:7c:f7:59:2d:d1:76:51:a4:c8:
82:10:2c:a0:d5:96:71:08:40:1b:13:3a:03:87:9a:20:5b:7d:
3f:1e:1a:55:0d:5e:88:15:bc:51:59:70:08:cd:77:65:aa:88:
4a:9f:40:12:c4:d1:bf:7a:93:48:ea:ad:0c:26:81:f8:c7:b6:
47:ed:9c:a5:66:51:c5:81:c4:42:d1:c9:44:48:ee:04:8a:2f:
4b:1b:06:76:eb:eb:16:4e:5b:16:a1:c8:e8:2e:01:62:c5:e7:
bd:16:df:26:e7:c3:4f:d5:bd:ee:65:c9:eb:df:20:1b:6a:94:
80:af:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:34 2025 by rpki-client