Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/283BEF26D97A11EF93C524AF762E951A.roa
File: 283BEF26D97A11EF93C524AF762E951A.roa (raw, json)
Hash identifier: FNuInkB68sTuFFcSDa+rnh04ynbJ52Z6fC/nwJaL0b8=
Subject key identifier: B2:DB:D0:87:18:C2:CF:C9:89:57:3E:54:50:62:F4:5D:EF:7E:5C:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014175
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/283BEF26D97A11EF93C524AF762E951A.roa
Signing time: Thu 23 Jan 2025 11:06:56 +0000
ROA not before: Thu 23 Jan 2025 11:06:50 +0000
ROA not after: Thu 13 Mar 2025 11:06:50 +0000
asID: 63139
IP address blocks: 154.203.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82293 (0x14175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:06:50 2025 GMT
Not After : Mar 13 11:06:50 2025 GMT
Subject: CN=679222d0-f86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:1b:b2:15:db:6a:1e:ba:14:ce:d0:39:1b:
0d:ae:ee:bd:6c:a9:6d:a8:1b:46:31:54:51:e4:24:
39:b7:f2:6a:15:24:c4:f3:36:cf:bf:fb:1f:1f:c2:
62:f6:15:57:bc:c6:1d:47:35:7b:7b:e9:be:98:1e:
8b:99:7f:05:0f:62:82:be:d3:b0:01:90:76:05:e3:
58:a1:83:ad:dc:99:2b:16:fe:13:6e:ac:ae:90:b2:
7d:f2:58:4c:57:3e:69:45:96:bb:a1:04:e6:69:04:
f5:05:08:53:e3:39:26:a6:02:a3:71:12:c8:3e:ad:
ad:3a:16:b0:76:e4:4d:ad:4d:07:bc:10:7e:4d:f0:
61:74:96:61:4d:58:03:45:f9:01:2b:d8:8f:e6:a1:
7f:fb:99:ae:3e:20:0b:ba:8e:90:7d:eb:a1:27:03:
5b:a7:83:84:76:5c:09:67:b5:82:81:b1:91:2e:39:
a3:41:7e:f5:8a:68:db:19:ee:53:a9:fd:78:83:f0:
9c:94:11:2a:83:d0:a3:a6:f8:75:37:62:11:4a:87:
04:9a:89:14:f0:96:ed:eb:c5:f7:46:5e:aa:86:21:
77:83:77:1f:d7:94:9a:59:5c:d9:e3:6b:24:e8:62:
d4:e6:98:7d:0d:fa:c6:f2:ea:9f:dc:3a:ad:1e:f6:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:D0:87:18:C2:CF:C9:89:57:3E:54:50:62:F4:5D:EF:7E:5C:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/283BEF26D97A11EF93C524AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:44:e5:db:4a:fb:8e:f8:1c:45:ef:43:b6:77:ce:b2:ca:8b:
d2:0c:ff:9f:26:f0:fc:a0:29:a8:55:a2:f8:56:56:94:f7:08:
ca:0b:b6:46:93:c8:b0:51:bf:6d:9a:a9:e2:e8:2d:f8:9d:37:
7c:22:5c:31:28:55:b8:5c:87:d1:15:f3:ec:ad:5f:1e:78:7e:
00:82:21:df:c2:9a:2c:0d:f0:45:37:3c:44:8f:b3:fe:44:74:
e5:ec:b1:9e:bf:71:bf:86:eb:88:b1:3b:14:8f:c6:f1:f6:ff:
23:f6:c5:36:3f:af:9a:15:d2:17:bb:54:93:ae:98:5a:11:35:
b8:da:2c:fe:42:ce:c7:52:d8:02:a2:4b:d0:32:6f:35:bb:07:
53:0c:7b:8f:25:77:39:55:c0:01:9d:2e:26:1e:bc:00:b4:db:
8a:6b:7b:7b:65:74:2c:07:16:64:34:f2:c4:ea:33:e7:5e:3f:
ba:87:b5:0c:92:b7:f1:c5:46:7e:c5:14:b6:bb:62:7e:2e:e4:
dd:6c:4d:f6:5d:13:c9:43:06:57:61:1b:84:47:08:62:45:76:
08:bb:61:46:60:81:6b:53:f5:02:2c:d3:65:d8:36:12:16:a0:
db:45:a3:fb:c2:da:48:97:ab:63:16:e4:c1:ed:07:6e:42:f0:
30:b9:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:30:16 2025 by rpki-client