Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386D0ECACAD411EFA5C18159762E951A.roa
File: 386D0ECACAD411EFA5C18159762E951A.roa (raw, json)
Hash identifier: zb+xniOYCw4zY2nMEzrzRjg2UpYhbuk5XUiFQeuOXeU=
Subject key identifier: B7:E3:E0:07:63:F6:E4:DC:FB:0C:1B:F2:5E:E5:F3:F2:EB:00:3A:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013527
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386D0ECACAD411EFA5C18159762E951A.roa
Signing time: Sat 04 Jan 2025 19:43:50 +0000
ROA not before: Sun 05 Jan 2025 19:43:46 +0000
ROA not after: Sat 08 Feb 2025 19:43:46 +0000
asID: 203020
IP address blocks: 154.217.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79143 (0x13527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:43:46 2025 GMT
Not After : Feb 8 19:43:46 2025 GMT
Subject: CN=67798f76-7ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:aa:53:56:4e:a5:2a:66:ca:eb:b4:8f:9b:
22:9c:83:3f:97:4a:b0:59:62:1a:74:8d:19:52:b6:
04:66:75:21:77:d0:3b:61:18:56:2e:90:a3:0f:82:
79:4a:6b:db:67:a4:fb:85:56:97:39:0b:f1:d4:a9:
11:a9:15:cf:aa:6e:6a:10:f3:17:da:b7:d0:c6:4d:
1b:b8:89:a7:ef:92:81:be:61:0b:f1:5d:0c:c2:3f:
8d:13:af:91:48:70:99:a4:ff:46:33:00:0c:fb:c9:
9f:2e:21:65:b7:01:d1:ea:65:b7:95:7b:cb:3e:b5:
8a:9f:9b:e3:f6:08:11:33:86:68:cf:3a:92:66:c1:
33:dd:c3:7d:21:74:54:a6:65:47:46:5a:3a:0d:96:
4f:89:4f:80:fa:24:0f:ba:9f:3c:42:df:6f:50:4b:
3c:a3:15:fb:0b:4a:14:01:51:7b:d1:55:6c:de:17:
95:ae:31:40:7c:9d:14:1b:d4:55:1a:1f:b5:3b:5d:
5c:c9:e3:36:5a:92:15:75:f4:c1:5e:2c:fd:8d:f9:
52:b9:76:b9:cb:44:ca:6a:a8:b6:f7:9a:7d:0b:5e:
72:5f:b9:b1:9e:6c:99:91:38:a7:a2:5d:1d:06:55:
7e:4b:a1:d0:1b:c3:1e:91:d9:29:83:ae:97:48:37:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E3:E0:07:63:F6:E4:DC:FB:0C:1B:F2:5E:E5:F3:F2:EB:00:3A:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386D0ECACAD411EFA5C18159762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:87:48:d7:d6:43:bc:7f:6a:15:9f:d4:e7:37:be:53:3e:d4:
68:65:4b:91:63:8f:53:78:81:87:38:21:00:d6:45:12:7f:1b:
07:68:08:d1:08:a4:36:c0:73:2d:cd:83:7c:26:ec:13:e0:cb:
1f:c5:4a:cb:dc:72:73:14:82:30:80:43:8a:66:5e:21:34:85:
dc:8f:b8:fd:15:71:7b:dc:b3:22:d9:a2:62:a9:db:8f:5e:ec:
4c:47:4d:b9:cf:49:cd:74:64:b2:86:e3:0a:3e:f8:97:7c:26:
c7:6c:a6:5b:af:ea:be:1f:cb:1d:58:98:82:85:21:63:26:ab:
45:cb:59:49:ff:1d:86:21:13:4f:ad:7a:03:12:c4:06:3f:06:
54:4c:ce:b8:54:26:87:a3:a0:5a:e0:6f:d4:4f:89:ef:58:26:
56:84:e6:89:13:e8:db:9d:6c:30:97:21:b7:6f:75:ac:de:02:
9d:b0:f0:27:b9:de:45:2b:bd:41:00:53:da:a9:90:9f:da:cd:
72:10:c3:3c:64:39:a3:9e:20:91:50:e8:10:4f:78:59:f9:b4:
b2:18:ac:85:0f:ff:63:c3:d8:6d:96:8d:03:44:ba:e0:b2:a4:
f2:ff:e1:3d:14:90:48:09:8c:8b:62:68:c9:9f:70:05:d3:4e:
27:59:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:55:30 2025 by rpki-client