Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315906B0DA6111EF877B6A48762E951A.roa
File: 315906B0DA6111EF877B6A48762E951A.roa (raw, json)
Hash identifier: wTXdkJm+oIl6/GIq0Kt3sYM33oxAdwyDbmI0Hah5CZU=
Subject key identifier: 3F:22:E4:06:C5:D1:00:DA:D3:F7:BB:B5:78:DD:65:FE:B1:F9:84:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014850
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315906B0DA6111EF877B6A48762E951A.roa
Signing time: Fri 24 Jan 2025 14:40:45 +0000
ROA not before: Fri 24 Jan 2025 14:40:41 +0000
ROA not after: Sat 01 Mar 2025 14:40:41 +0000
asID: 44559
IP address blocks: 154.203.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84048 (0x14850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:40:41 2025 GMT
Not After : Mar 1 14:40:41 2025 GMT
Subject: CN=6793a66d-45aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:e9:1a:8f:af:d2:d5:30:43:eb:4a:c9:ca:
56:a5:f5:5e:da:4b:46:fd:29:cd:d5:10:fa:7c:63:
c0:ee:f8:b6:e7:76:2d:16:95:40:59:4b:39:5a:62:
72:19:77:58:5c:0f:c7:9b:97:7f:a6:12:23:85:87:
ef:63:2b:6a:dc:84:4e:25:3b:7f:0e:67:3f:4f:18:
39:d0:99:53:1d:8d:3e:10:9a:b4:27:82:24:fe:e9:
2e:b8:30:1e:05:b1:7a:62:f1:24:6a:f3:71:58:99:
9b:9e:c1:08:e8:41:79:5b:10:8e:6c:f5:a5:1f:95:
24:a9:c4:23:18:d3:a9:62:d0:34:8d:15:77:cc:f3:
1e:2f:e7:f5:d2:22:13:61:28:f2:25:0c:e8:29:ec:
d6:d2:9c:c8:da:ee:87:a8:79:14:01:76:b6:16:c3:
c4:30:68:75:4b:0a:5a:6b:6f:5a:0f:7b:18:6e:93:
e0:a8:4d:b4:f7:d0:09:9c:3d:7f:f4:20:98:a8:2f:
ce:27:97:33:73:84:22:ce:4f:3e:56:92:e2:76:8d:
cd:27:f5:09:2c:59:54:ed:31:c5:98:82:c4:1a:2c:
32:9b:0f:68:c9:e8:9d:75:a5:26:72:38:c3:e7:44:
c9:0b:df:d7:47:cb:33:59:a9:8d:d0:4b:91:2d:be:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:22:E4:06:C5:D1:00:DA:D3:F7:BB:B5:78:DD:65:FE:B1:F9:84:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/315906B0DA6111EF877B6A48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.229.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:81:39:ac:9f:9e:df:bb:bc:71:ff:92:60:c2:ac:ed:ae:05:
1f:3a:4a:6e:db:39:16:84:79:82:31:f5:7c:aa:6e:a3:23:75:
e0:cb:36:c1:5c:0d:0d:2f:33:40:4a:d1:32:d0:48:80:db:3b:
04:47:a1:62:c3:05:1c:17:bc:df:72:d4:9b:c0:47:9e:73:ef:
a8:b5:7f:93:1e:1a:6d:06:eb:79:1f:2e:3c:cf:27:d3:20:8b:
77:e7:ca:6b:62:eb:f9:38:6e:69:48:03:b5:8b:83:2e:54:34:
69:56:f6:7f:03:23:87:8f:3b:d3:bb:ce:25:ae:b7:80:38:e1:
a8:11:42:26:ae:d9:55:5c:ca:41:ef:01:b4:0e:e4:cd:c9:58:
73:a9:91:6f:3a:9b:04:7f:85:05:19:a6:eb:ee:be:6f:fb:92:
3f:85:06:09:c9:54:2a:d3:5d:53:79:12:29:01:1d:ec:c4:67:
b6:89:b0:63:26:c3:49:a3:c4:77:48:3c:df:da:27:4f:91:c6:
f8:43:b7:f3:51:1b:b3:b0:15:42:19:8d:77:63:2b:1c:49:ee:
92:ad:f0:97:75:4a:31:23:16:81:de:32:79:30:82:72:74:89:
28:2d:ec:52:5b:aa:a0:5e:cb:b5:bf:8c:0a:36:f7:38:0f:35:
3a:7a:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:01 2025 by rpki-client