Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266AA13ADA3111EFB9029982762E951A.roa
File: 266AA13ADA3111EFB9029982762E951A.roa (raw, json)
Hash identifier: 1nkQ6sbEfeSpnxZJqJ+jEs4htqcn4yI0qA/HxnUENkY=
Subject key identifier: 53:2C:9A:44:8A:EF:11:69:00:E0:50:03:33:DA:4C:E0:5A:3B:C3:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266AA13ADA3111EFB9029982762E951A.roa
Signing time: Fri 24 Jan 2025 08:56:50 +0000
ROA not before: Fri 24 Jan 2025 08:56:47 +0000
ROA not after: Thu 13 Mar 2025 08:56:47 +0000
asID: 63139
IP address blocks: 154.203.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83111 (0x144a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:56:47 2025 GMT
Not After : Mar 13 08:56:47 2025 GMT
Subject: CN=679355d2-7ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:34:2d:f3:7d:b7:8b:8a:b3:3e:13:c4:65:
3c:ae:04:19:ab:8e:ce:fc:84:24:0d:4b:45:0a:de:
ac:6e:18:b1:f8:ca:15:07:46:56:f7:8e:ce:05:37:
15:3b:eb:21:b9:0d:56:1e:10:d4:7e:e3:95:3c:b7:
40:b1:da:29:96:ab:3e:4b:1e:47:74:2e:98:f2:45:
81:1e:ec:34:c3:a2:a4:30:1a:df:36:4a:2a:cc:7b:
32:d4:1d:08:86:15:8a:13:e4:75:b4:d9:04:e8:f3:
96:5f:0f:27:2a:ff:aa:21:e8:64:81:ba:68:54:18:
70:b9:b9:ce:c4:88:ae:3f:a4:19:2c:5e:be:13:55:
70:6d:a2:25:05:2d:b0:cf:6d:e0:77:a5:02:d2:18:
85:9f:0a:3c:1b:88:8c:9a:42:43:c3:75:53:f7:ce:
ad:31:e2:59:d4:59:24:eb:78:e9:79:e9:30:3b:06:
99:c3:d7:81:5d:3d:bb:96:7f:de:8e:98:88:9a:f0:
0a:f5:9e:1e:12:89:c3:e3:65:82:bc:74:ad:f2:11:
19:c5:08:56:89:6f:ab:69:d5:77:f5:62:a8:31:1d:
9f:fa:b2:b6:92:dc:81:39:b1:3b:ff:4f:c8:8f:04:
55:d1:5a:6b:e7:0f:d9:e1:dd:a8:d9:ce:54:1b:27:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:9A:44:8A:EF:11:69:00:E0:50:03:33:DA:4C:E0:5A:3B:C3:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266AA13ADA3111EFB9029982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.181.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f8:78:87:a9:bb:a5:ab:ca:2b:0c:02:57:32:db:1d:25:27:
59:aa:4c:4a:06:fa:a9:da:36:d6:d4:a6:fd:c4:57:cf:2f:15:
a2:2b:fa:cd:af:88:a0:86:b9:2a:bf:04:d4:08:6b:40:03:66:
5e:4e:e6:f4:49:1f:5b:9a:69:1c:ba:2c:b0:be:b0:68:da:88:
5c:2a:b0:a4:04:93:0c:2b:28:10:77:48:1a:0a:c4:ee:93:83:
53:6a:73:17:37:94:8f:ac:c5:3c:39:46:0b:e7:81:ac:4a:e7:
9f:0d:9e:b0:55:35:35:3c:6e:34:f6:e3:50:b1:3f:0e:27:19:
fe:cf:d5:5c:89:c7:3b:cb:e0:95:0f:ca:0b:6f:7c:7e:a1:cd:
eb:2d:d5:55:b6:ec:1f:4d:3b:f0:06:04:c1:dd:77:dd:35:ea:
32:9b:12:68:58:11:ca:06:75:1c:24:cc:0f:fa:b4:cf:05:40:
5c:03:1c:bd:08:5a:f9:7b:a6:72:fd:48:e4:b6:ae:e3:0a:94:
c8:ea:75:90:90:36:bc:b7:ec:8d:fd:6d:db:4f:5d:c6:b7:4e:
c6:39:59:c8:9b:ff:d3:d9:c2:d9:07:a7:2a:4f:06:b2:b8:b6:
58:ed:d9:f2:17:7a:0d:6f:a3:f4:4f:de:f4:95:70:7d:bd:d9:
14:0c:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:44 2025 by rpki-client