Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28026BE4D97911EFA4E44EA8762E951A.roa
File: 28026BE4D97911EFA4E44EA8762E951A.roa (raw, json)
Hash identifier: S7/5ymmuQ+emixtz5Aa/T5YIGIikSSjFJunaYCRr3dE=
Subject key identifier: 93:49:F0:F0:8B:45:99:A5:47:CA:DF:D6:3F:E0:E9:2E:28:47:C5:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014169
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28026BE4D97911EFA4E44EA8762E951A.roa
Signing time: Thu 23 Jan 2025 10:59:46 +0000
ROA not before: Thu 23 Jan 2025 10:59:42 +0000
ROA not after: Thu 13 Mar 2025 10:59:42 +0000
asID: 63139
IP address blocks: 154.203.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82281 (0x14169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:59:42 2025 GMT
Not After : Mar 13 10:59:42 2025 GMT
Subject: CN=67922122-729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:4f:a8:e9:88:fe:ee:f5:1e:9a:5b:92:5f:
26:c5:72:a0:1b:7a:06:f9:d1:b5:a3:80:3a:78:7a:
56:bc:f5:2c:1a:a6:86:a7:00:7d:8b:c0:20:e4:28:
8f:a6:91:d4:ef:ec:a0:49:e2:2d:64:47:4c:0a:56:
85:bc:49:67:73:69:28:c1:9b:06:e5:41:ef:5b:f0:
d8:87:dd:1a:81:e9:ef:55:7c:d9:13:f7:06:65:87:
dd:69:70:62:74:b5:b3:41:d2:fd:cc:57:c8:5f:de:
70:80:96:54:99:5a:a8:d0:c7:be:5a:f9:54:8b:ca:
0c:1c:5f:55:b1:57:7c:62:d3:05:ab:fd:87:e9:1e:
c0:03:ef:ab:e6:cf:59:2b:00:34:07:1e:0b:52:4b:
21:a4:5b:fe:17:5b:6e:49:f4:51:b3:9a:8d:91:82:
c6:49:4b:e3:51:18:61:79:3a:73:e8:65:e4:c4:2a:
ae:5d:a0:83:0a:89:d9:79:b6:2f:ad:ce:05:dd:36:
ad:59:13:74:c9:0c:67:04:66:6a:83:dc:be:6e:43:
a9:8b:dd:ab:de:b4:41:0e:3e:be:06:ae:4d:fe:7b:
65:54:ce:e1:fa:62:bc:53:6c:42:97:9a:71:5c:7a:
48:0b:b8:bc:af:eb:97:ef:bb:c1:09:58:db:b9:5c:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:49:F0:F0:8B:45:99:A5:47:CA:DF:D6:3F:E0:E9:2E:28:47:C5:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28026BE4D97911EFA4E44EA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.171.0/24
Signature Algorithm: sha256WithRSAEncryption
59:19:2e:9d:e0:67:88:73:b8:0e:03:34:2d:eb:7e:0d:a3:2e:
ed:0d:70:03:89:1b:96:f4:81:69:7d:5e:8e:f8:5f:10:33:e9:
0e:a9:87:b5:d1:28:36:12:2d:23:4a:ba:fd:33:8e:5f:19:6a:
51:54:d7:d4:0f:bf:b9:1f:26:52:e4:38:8a:d1:4c:a7:bf:02:
7e:0c:d6:2c:9e:a2:fe:87:ec:a3:99:cf:f6:26:37:68:13:0f:
7b:4c:d0:e6:a0:ae:0c:08:4b:90:19:d8:ee:61:12:fe:3e:4a:
5f:89:77:20:0b:c9:8b:4c:26:40:d5:83:f4:73:9d:9b:38:09:
f4:f5:7f:50:9e:15:33:21:56:5b:4c:70:bf:bf:8c:cf:d0:9e:
fc:7f:26:a7:3b:68:9a:95:d0:04:7f:45:17:30:cc:3c:20:9e:
64:36:e3:41:39:5a:4c:26:2d:07:d6:d2:8b:63:cc:3e:a3:46:
a1:a7:47:ea:b2:c5:5f:17:e6:90:48:9e:c3:7d:a7:05:d7:63:
a6:25:60:6f:8b:1f:84:bf:54:c1:f6:d7:cc:2b:65:50:cd:7f:
dd:4a:4a:20:f3:a7:4d:4c:fe:33:5c:a3:a2:8a:a1:96:8a:c5:
c6:d7:d7:62:4a:ea:08:dd:c8:33:91:38:57:e6:3b:91:12:2c:
aa:fe:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:37 2025 by rpki-client