Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FAC25B0DA3211EF9D677A89762E951A.roa
File: 2FAC25B0DA3211EF9D677A89762E951A.roa (raw, json)
Hash identifier: bWj8JiUgfLvOwUZgvcJRi+z5XgzapkoXBdk1NRoLlIE=
Subject key identifier: 94:BB:EC:85:53:0F:E8:50:EA:76:00:79:96:5A:CF:04:8A:8F:53:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FAC25B0DA3211EF9D677A89762E951A.roa
Signing time: Fri 24 Jan 2025 09:04:15 +0000
ROA not before: Fri 24 Jan 2025 09:04:12 +0000
ROA not after: Wed 05 Mar 2025 09:04:12 +0000
asID: 202656
IP address blocks: 154.219.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83123 (0x144b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:04:12 2025 GMT
Not After : Mar 5 09:04:12 2025 GMT
Subject: CN=6793578f-adbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:28:38:4c:66:37:c6:4d:c7:44:e6:c0:35:
22:a4:c1:59:a7:04:58:de:62:70:21:20:7c:25:d5:
1b:a6:36:f6:8d:db:ed:3f:b9:81:cf:2f:e7:d5:2e:
c8:3f:3c:8d:4c:92:21:83:8f:7b:9f:60:02:15:b8:
93:a3:97:fe:58:1d:ef:e0:60:53:43:a9:11:30:e3:
fb:71:f1:c1:24:ff:a6:f8:5b:72:65:5e:ec:6f:1f:
ef:b4:13:f7:54:c0:32:15:3f:7c:71:28:3e:38:a5:
69:78:44:1e:e7:68:82:63:b3:e8:44:4f:5a:02:17:
2c:3a:1e:83:ff:ab:e8:4a:82:e5:d6:32:02:bc:26:
20:ec:f1:fe:0e:28:8c:42:83:19:83:25:62:57:ee:
4c:2e:18:3b:ff:da:a8:92:e3:66:ae:0f:d7:19:ba:
fb:12:26:4f:a3:b2:d0:c6:8c:b9:ca:c5:8d:24:78:
f6:65:f0:38:d5:d5:3a:57:b8:aa:99:47:93:e6:6c:
61:47:06:07:19:70:bd:11:f1:6c:b3:c2:45:2f:7c:
d0:ef:75:5e:bc:97:a8:26:7c:62:38:19:ea:91:96:
51:d9:50:9a:1d:3e:85:4a:f7:d4:cd:30:11:e6:84:
cd:12:9f:11:75:fe:79:74:ef:a2:20:eb:ac:61:31:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:EC:85:53:0F:E8:50:EA:76:00:79:96:5A:CF:04:8A:8F:53:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FAC25B0DA3211EF9D677A89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a1:1c:25:cb:b3:c8:59:c1:69:72:82:6c:dd:64:d6:cc:83:
c1:54:54:3f:d5:6b:2a:b8:0d:51:d4:99:b6:ff:e4:e6:35:f9:
e5:17:be:42:75:4f:44:67:12:7e:f7:25:6a:d3:82:4c:02:c7:
ec:65:1e:5f:6c:a3:17:9e:fc:e8:e0:8f:de:1e:f3:b2:35:9d:
55:b7:3d:54:92:7a:8d:5b:84:9d:02:a9:9c:6d:01:b4:19:af:
71:c2:f6:42:46:8a:74:10:70:72:97:20:9b:02:c2:6a:38:d2:
a0:d1:8a:d6:23:c2:21:64:35:7e:1e:e9:c3:7c:78:36:2e:22:
bc:f6:8b:ae:02:97:78:b4:b9:29:04:f1:e1:1a:f1:2e:90:99:
10:3f:bc:c1:01:c5:53:1b:60:3d:1f:6f:01:0b:d2:0a:95:37:
f4:dc:23:e6:c6:42:0e:fc:c3:8a:71:94:03:cf:1c:f9:ca:7b:
7f:a8:57:b7:ab:de:a0:35:33:06:51:bb:03:1a:2b:c5:61:07:
e0:15:ca:cc:e4:dd:86:33:a5:e3:40:e3:49:cf:c3:8f:7c:90:
a4:68:ec:2e:fa:04:ac:d3:8c:f1:7f:57:a9:88:0a:31:19:53:
47:e6:61:f0:3f:66:f4:7c:56:74:7f:8c:3d:6c:97:de:2a:44:
82:27:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:06 2025 by rpki-client