Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C73362CC2A411EFA7FBE458762E951A.roa
File: 2C73362CC2A411EFA7FBE458762E951A.roa (raw, json)
Hash identifier: M1kBl9dffsOq4OU326F5TQZ0fQJ0tD2r3jOP3+33pgo=
Subject key identifier: 2C:AA:A4:B7:72:41:F6:92:A3:0C:A8:8B:C1:18:4F:81:18:77:17:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012554
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C73362CC2A411EFA7FBE458762E951A.roa
Signing time: Wed 25 Dec 2024 09:39:45 +0000
ROA not before: Wed 25 Dec 2024 09:39:41 +0000
ROA not after: Thu 13 Feb 2025 09:39:41 +0000
asID: 138915
IP address blocks: 154.203.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75092 (0x12554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:39:41 2024 GMT
Not After : Feb 13 09:39:41 2025 GMT
Subject: CN=676bd2e1-398a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:11:5c:8f:29:a0:01:61:78:25:c6:67:f4:
63:91:ca:04:07:16:73:3a:96:d6:b4:49:75:be:88:
e9:b5:b4:3b:12:73:c8:8c:27:69:b8:3f:8e:30:06:
66:3a:e8:24:ca:3a:28:30:9f:0b:68:7f:0c:f8:23:
cd:c4:90:d8:4f:4b:f0:00:bb:15:22:f4:99:bf:48:
53:95:a1:cb:a1:44:6d:1a:bc:f1:03:e8:69:6f:64:
89:73:1b:68:9f:1f:d5:f2:a4:35:1e:c3:fb:e8:80:
30:86:28:89:27:3c:6a:47:16:70:59:0a:3a:21:73:
fe:11:a5:12:42:78:bc:8a:2f:86:d8:e0:1a:9c:09:
7f:5d:cb:43:c3:ed:18:38:fe:45:c7:38:8e:81:c5:
d4:db:d4:cc:ea:ec:0d:cb:48:bc:26:b8:30:9f:84:
ef:7e:d0:32:86:97:b5:fb:91:f7:da:78:d3:95:83:
a0:15:c6:6c:8b:71:51:85:1d:ad:84:0a:33:14:ca:
3d:a9:e0:97:9d:ab:f6:11:06:5e:f7:d7:d6:85:f3:
f3:81:76:7f:0b:57:dc:2e:d7:e4:8e:10:09:1c:79:
85:52:62:66:f2:bb:f4:93:a4:10:b1:46:18:5d:67:
06:0d:b7:3e:33:cd:5b:26:e0:d5:1f:7f:a8:13:5a:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:A4:B7:72:41:F6:92:A3:0C:A8:8B:C1:18:4F:81:18:77:17:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C73362CC2A411EFA7FBE458762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.148.0/22
Signature Algorithm: sha256WithRSAEncryption
72:01:ba:82:0e:b9:a2:8a:9c:db:bd:fb:18:ba:51:bc:2a:f2:
dc:22:c1:df:c9:d6:aa:6c:01:54:ca:b6:a7:50:a9:28:6b:a9:
94:1b:90:be:4b:40:ce:ea:e1:21:ce:20:78:dc:0c:b8:e2:b2:
d7:b0:6b:9c:4f:35:9a:24:0d:bb:8d:7f:a3:56:f0:a2:26:10:
fe:c8:d1:10:f6:5b:e6:03:bc:4b:cd:d2:bd:66:1d:7b:3a:07:
28:13:32:7e:80:8f:25:16:44:0c:f2:40:e4:be:29:c6:a7:d1:
7a:6c:55:20:7a:2b:53:c4:60:30:cd:42:24:2c:31:49:1f:bb:
24:c8:3f:f5:91:23:4e:ae:69:21:d2:e4:98:91:19:6e:68:81:
03:1e:f7:d4:85:44:50:d7:e3:69:f5:08:93:f0:87:42:17:69:
9b:41:bc:b2:0b:dd:83:f9:10:60:6c:01:c4:13:03:9c:12:f0:
63:3d:b4:b8:0a:61:50:31:e7:8d:d3:ee:0d:fd:46:cb:64:65:
c3:4f:57:e5:ef:65:e8:e1:fa:5a:5b:19:f3:fe:6f:f4:09:22:
7d:63:30:c4:4a:47:79:84:eb:c5:d1:f1:f5:9f:e4:fd:68:4a:
02:c3:18:32:35:ce:5b:c1:f6:69:ff:c3:94:76:5d:90:8e:cc:
cf:b0:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:25 2025 by rpki-client