Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39AADAE6CF0311EF87A6D88D762E951A.roa
File: 39AADAE6CF0311EF87A6D88D762E951A.roa (raw, json)
Hash identifier: M/KBBikiJNeALQPK9u+t8Ks6IXl9ZuFoDAzQHhjOwSQ=
Subject key identifier: 86:A2:64:65:F5:BD:86:56:28:06:34:FB:7C:25:25:F7:1C:F5:16:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013991
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39AADAE6CF0311EF87A6D88D762E951A.roa
Signing time: Fri 10 Jan 2025 03:30:23 +0000
ROA not before: Fri 10 Jan 2025 03:30:19 +0000
ROA not after: Thu 13 Mar 2025 03:30:19 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80273 (0x13991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 03:30:19 2025 GMT
Not After : Mar 13 03:30:19 2025 GMT
Subject: CN=6780944f-454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:7a:ce:a6:25:ff:25:1d:9a:f1:22:97:95:
5b:39:44:a3:3c:c6:92:ff:79:6a:22:f9:d5:e7:d2:
97:c0:7c:29:14:89:c3:55:10:26:d0:d7:e7:cb:7b:
b8:53:3d:dc:eb:5a:a3:f3:c2:5a:6f:02:29:94:a7:
0c:f9:95:15:1d:7b:4b:00:4f:bc:6d:c3:f5:24:e2:
4c:dd:0b:7d:1d:c2:be:66:7c:1c:8b:20:9e:b3:80:
5e:49:e7:d0:8c:fa:e8:ba:95:f0:b5:0b:15:6b:39:
b7:6f:2f:f6:83:5e:33:96:11:49:d3:20:83:da:f4:
8a:1d:dd:79:bd:52:82:c5:b7:bd:0b:fc:b7:ab:4b:
ae:7d:5a:f9:63:a6:f4:e1:ed:93:42:90:10:a8:57:
9c:4d:b9:b1:d1:50:8c:33:3a:26:ac:86:89:be:8e:
81:1a:42:df:60:34:17:ba:56:1a:06:74:bd:5c:ac:
09:d8:b9:f7:e8:27:65:07:74:fa:77:15:3c:6c:a7:
e4:78:f3:79:bf:b8:e9:59:94:36:e8:9b:fb:99:57:
fd:db:9d:aa:2e:68:f8:cf:ba:8c:05:27:79:a5:8c:
e7:9c:21:bd:ef:ab:e0:e0:61:7b:56:3e:c8:a8:67:
48:6e:58:df:86:43:ff:c4:f2:23:46:e5:a5:78:04:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A2:64:65:F5:BD:86:56:28:06:34:FB:7C:25:25:F7:1C:F5:16:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39AADAE6CF0311EF87A6D88D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b3:56:32:65:0a:de:e1:8a:c0:2b:ca:8e:ed:19:4f:c1:32:
e9:b7:28:ee:92:4c:fa:b7:9b:89:1c:d4:46:33:54:02:fb:c2:
a1:e7:c0:87:7e:44:aa:e1:7f:f3:94:16:b8:4a:b1:77:40:47:
e1:04:53:23:3d:53:e7:d3:ce:13:2a:f8:65:68:7f:0f:d8:3c:
fe:16:14:aa:37:ca:86:c5:5b:e0:d1:5e:e7:10:e8:f1:98:99:
c8:94:c1:d1:c3:16:20:76:37:4c:af:f9:dc:5b:37:70:c4:d7:
32:ec:7d:0d:52:08:34:8c:7b:98:31:9a:eb:59:2e:97:17:2a:
20:56:4a:01:44:e7:54:cd:79:8b:ee:f3:36:a5:7a:08:a0:75:
45:89:4a:45:5b:88:3f:ec:54:3f:9c:0c:af:52:b2:ec:10:7b:
e9:6a:49:56:d7:c1:8f:c1:ff:88:1a:cf:ef:4d:f0:59:52:1f:
b8:81:c3:02:de:ec:2b:59:2a:2c:57:93:00:14:00:95:5c:d9:
82:ae:37:32:e6:7b:d6:3d:56:94:18:e2:ab:89:e7:c6:02:72:
49:27:8b:71:0f:96:af:8d:21:3e:f5:b3:41:47:da:c4:af:92:
2e:da:6e:25:ac:68:e8:08:03:f4:1d:da:15:ff:17:d4:4b:57:
c2:37:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:34:15 2025 by rpki-client