Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32E0A204D98A11EF838F969B762E951A.roa
File: 32E0A204D98A11EF838F969B762E951A.roa (raw, json)
Hash identifier: lrzVxaoEdzZh2kfG2iTfiHzBZwavaYVnlM4XTD9N9fk=
Subject key identifier: 25:96:AD:A3:5E:2B:07:98:10:40:D3:66:CC:00:13:B2:CF:61:B2:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014255
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32E0A204D98A11EF838F969B762E951A.roa
Signing time: Thu 23 Jan 2025 13:01:45 +0000
ROA not before: Thu 23 Jan 2025 13:01:42 +0000
ROA not after: Thu 13 Mar 2025 13:01:42 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82517 (0x14255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:01:42 2025 GMT
Not After : Mar 13 13:01:42 2025 GMT
Subject: CN=67923db9-76ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:2f:84:69:07:b4:74:48:7b:fc:53:3d:16:
9b:68:96:02:d6:05:55:ab:f2:57:0a:c3:30:5d:51:
f5:16:00:ff:64:56:0b:62:9d:3b:a8:25:29:13:b9:
16:a9:ca:73:86:12:30:ac:d4:f3:25:f2:b9:dd:bb:
14:ff:55:7c:2c:06:e9:4b:6d:79:e5:5a:b6:36:12:
1c:1c:0f:50:83:50:5c:b1:3c:39:1f:aa:5a:16:dc:
2a:f5:8e:de:39:b2:3b:c5:eb:87:4a:15:f0:8b:87:
35:cd:67:b7:46:0f:84:13:5d:30:2d:b4:18:cf:51:
ac:37:63:c1:f1:f9:65:ad:3c:94:50:a0:44:f1:b7:
92:cb:4c:20:3e:df:6f:ca:8a:0b:25:42:d1:41:bb:
a1:dd:c4:0a:8d:77:51:96:99:17:1c:ed:c6:0c:69:
54:b7:9c:35:c3:a9:fa:da:3b:51:0f:db:82:00:7a:
c4:c0:95:f2:6e:b2:80:3d:8c:b7:5b:3a:43:7d:59:
bb:1f:3c:d2:49:31:ec:e6:6a:18:9b:97:b7:5f:5c:
e9:b3:9a:f8:95:f9:a4:dd:fd:56:b3:a3:3c:33:8e:
6d:25:ce:75:88:e3:9f:3a:f6:e4:58:8c:8b:78:5f:
30:ff:bf:ed:09:e3:8a:27:eb:6c:52:85:f2:76:08:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:AD:A3:5E:2B:07:98:10:40:D3:66:CC:00:13:B2:CF:61:B2:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32E0A204D98A11EF838F969B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:71:6b:af:12:5f:b3:08:3d:21:e0:b1:58:e9:40:2f:38:0a:
1b:98:46:fd:5b:91:f0:92:75:68:e7:c5:56:8d:bb:3f:9c:00:
19:9e:13:14:58:fa:58:8a:4d:42:5f:1f:db:53:e5:e5:1a:66:
4a:e9:93:53:26:e3:f7:81:16:8e:ba:1a:17:f8:12:f4:57:4e:
48:89:80:04:73:dc:84:7e:f3:d8:84:39:4c:a6:13:8a:f2:b2:
2d:70:92:f8:b5:2d:63:61:3a:71:67:5a:dd:69:43:26:b9:07:
7f:4f:2b:8a:98:37:9a:8e:51:c0:59:e1:92:35:4d:1a:06:c1:
a1:f3:d6:ca:ba:8a:a4:c7:98:a4:20:3d:5f:6e:c9:1c:06:c5:
90:e4:eb:fc:78:e9:df:0c:36:df:fd:46:21:c6:31:c0:e1:a9:
3e:c8:80:b1:e7:b9:27:5c:b6:60:a4:4a:61:58:c9:b0:2e:fc:
72:7b:a2:08:13:55:43:ef:a1:0d:bb:88:27:dc:80:69:b4:88:
3a:d9:94:db:a6:e3:4e:f5:93:2d:b4:57:79:e0:a2:cd:70:2b:
1a:89:2a:a7:e5:f9:76:5c:fc:ad:d2:c2:d9:e3:21:c0:f6:da:
4c:5c:ff:3e:39:be:17:db:63:69:71:bd:98:30:91:77:22:7b:
e7:a5:67:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:54:53 2025 by rpki-client