Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AC6404CDA5611EF8617CC7F762E951A.roa
File: 3AC6404CDA5611EF8617CC7F762E951A.roa (raw, json)
Hash identifier: RmZkfdCueEw11AzNv7BZg8E3IHR2OjsukNqsdZ+PCFQ=
Subject key identifier: E6:B2:BF:1B:41:05:62:E3:5C:23:B1:42:97:CF:6D:23:7C:F0:33:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014767
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AC6404CDA5611EF8617CC7F762E951A.roa
Signing time: Fri 24 Jan 2025 13:22:16 +0000
ROA not before: Fri 24 Jan 2025 13:22:12 +0000
ROA not after: Sat 01 Mar 2025 13:22:12 +0000
asID: 44559
IP address blocks: 154.205.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83815 (0x14767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:22:12 2025 GMT
Not After : Mar 1 13:22:12 2025 GMT
Subject: CN=67939408-88cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:c4:ff:e7:2e:10:44:a6:52:66:7b:72:13:
37:89:6c:92:c5:c0:cf:24:a0:28:49:d0:34:7b:36:
fb:b2:5a:96:42:00:bf:9d:55:9c:96:ae:2c:cf:93:
f3:ef:c1:b6:b2:04:0c:1d:c0:30:4f:12:d7:f0:b7:
1e:23:6b:4f:c3:98:9c:97:92:6d:c4:dd:e3:4a:14:
9e:15:68:82:70:da:f2:ea:90:a0:da:be:d6:8b:e3:
bd:4b:f9:d6:64:e2:4e:e6:f5:6e:2d:7e:dd:f8:f4:
f5:53:64:dc:6b:09:ed:6c:f0:ba:67:df:21:36:bd:
dd:66:22:33:14:2c:8b:b5:0c:b6:be:73:fe:d3:f4:
58:a7:ff:a1:af:e3:e7:48:61:68:c3:78:a5:d9:9b:
a6:57:13:2c:48:12:44:5a:6a:d6:03:1b:c7:a8:a8:
4e:24:8d:cd:0d:db:08:c9:e9:0f:a0:b5:7d:66:e2:
df:e7:40:a3:3d:1d:11:b5:3a:b6:07:fd:ec:ee:69:
b7:5b:e6:64:b2:40:2e:67:97:52:f9:ca:f6:3d:46:
1d:3e:2c:2d:ff:dd:aa:92:ff:4c:39:13:b5:b5:8a:
11:ae:50:26:5e:3a:7a:a4:80:78:74:56:0e:12:9f:
18:bf:e3:40:10:e3:81:60:92:87:0c:0b:2a:f1:62:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:BF:1B:41:05:62:E3:5C:23:B1:42:97:CF:6D:23:7C:F0:33:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AC6404CDA5611EF8617CC7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.243.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9f:be:13:04:96:8d:fb:ad:05:ed:ff:85:ed:54:c2:ca:a6:
ad:71:15:68:cb:e1:f7:88:01:bc:3c:29:31:24:a1:8f:d6:74:
41:05:53:73:98:bc:7f:9d:83:1d:18:32:7e:bf:9e:d2:f4:4e:
80:d3:51:55:2e:f4:53:6e:85:c7:cd:1f:d9:3d:f9:b0:8c:e2:
03:29:cd:d0:89:2b:9f:ba:42:ad:47:10:47:a3:ad:ed:7a:0b:
00:61:c3:7d:7c:52:20:65:24:40:28:35:1b:0a:23:75:c7:4a:
d3:9a:51:41:71:7b:9c:b4:92:0f:1a:bd:eb:d7:05:9d:5d:6b:
23:84:81:f2:d1:26:7e:03:bc:2a:a0:5f:ce:84:93:b4:79:86:
17:08:06:d9:cb:b8:f6:39:e5:34:60:d7:39:87:ac:d0:8c:e1:
10:2b:81:24:1d:56:4e:60:fa:ce:75:ef:f5:0c:c9:d1:d9:a3:
9f:ed:37:9a:ad:2a:41:20:09:8e:a1:2f:53:02:14:bb:3e:82:
e3:24:4d:b4:c2:ec:9c:3c:dc:a0:09:34:f0:25:61:34:4f:df:
61:ed:85:b0:b0:70:39:8b:c9:f8:9d:a0:cb:fe:60:3d:d8:ba:
86:86:02:3a:d3:11:a2:69:3d:7c:f1:d6:f7:c3:8b:c9:34:78:
d1:96:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:53:40 2025 by rpki-client