Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB98212D98011EFB9AF6958762E951A.roa
File: 3EB98212D98011EFB9AF6958762E951A.roa (raw, json)
Hash identifier: ImfiIhFkDbdoNdagQESTQevjXeqkT0rkbEyE4jVjzIo=
Subject key identifier: CA:1A:C4:D2:D1:59:23:DA:B1:45:DC:92:59:C4:1C:09:70:B0:37:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB98212D98011EFB9AF6958762E951A.roa
Signing time: Thu 23 Jan 2025 11:50:30 +0000
ROA not before: Thu 23 Jan 2025 11:50:27 +0000
ROA not after: Thu 13 Mar 2025 11:50:27 +0000
asID: 138915
IP address blocks: 154.203.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82376 (0x141c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:50:27 2025 GMT
Not After : Mar 13 11:50:27 2025 GMT
Subject: CN=67922d06-98bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:71:24:02:c9:9e:d2:40:8a:a5:e5:3f:f2:
5b:08:f5:d1:8a:d4:e2:66:04:59:ac:d1:ba:f5:68:
7c:ab:b7:e4:dd:c8:7a:72:f5:09:31:c1:ab:86:e3:
15:d4:fb:af:08:3c:71:f9:24:75:94:92:21:bc:da:
40:57:e0:fb:17:bf:ca:71:88:19:a3:31:9d:4e:b9:
14:0c:98:76:7a:39:5d:96:71:40:99:18:e3:f2:29:
4b:95:5b:2c:93:6e:7e:29:25:a4:59:71:d2:67:4f:
bd:58:c2:20:aa:72:90:1e:a9:2f:c9:1f:9a:cf:ce:
cf:b7:e6:11:6c:88:82:65:d0:a6:38:57:35:ef:84:
0b:10:57:41:4e:42:97:30:64:6f:5b:3a:43:6c:1c:
c5:2e:b6:d1:f5:9a:c7:c9:1d:43:cd:27:ab:dc:17:
d6:45:61:25:3e:bd:90:70:ed:b0:8f:4f:68:29:3f:
4d:df:09:8f:da:14:23:51:14:36:26:b0:d2:e5:db:
97:6e:ed:0b:40:e8:c4:29:68:f2:42:c8:a7:f9:88:
8c:26:64:34:78:bf:1f:1c:53:73:e5:70:b1:d8:44:
a9:22:72:c5:73:0f:77:9c:02:2e:04:e1:5f:27:ba:
45:7e:fc:3e:69:63:2f:d0:78:23:1f:43:f6:43:40:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:C4:D2:D1:59:23:DA:B1:45:DC:92:59:C4:1C:09:70:B0:37:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EB98212D98011EFB9AF6958762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.164.0/24
Signature Algorithm: sha256WithRSAEncryption
83:be:4e:8d:0f:7d:70:cf:2b:6b:c9:1c:09:58:45:10:93:42:
4a:e3:6a:0c:af:78:dd:73:4d:46:51:67:47:ff:24:b5:ce:03:
e6:42:4f:6a:44:3f:10:77:75:58:f7:88:ba:39:f9:3e:0f:b2:
cf:d5:de:17:ba:5b:cc:79:51:35:89:59:c2:52:ad:29:f9:65:
f0:c6:bc:18:a8:3c:99:eb:81:30:f7:32:51:73:03:2b:12:f6:
5f:8e:20:80:d1:3f:f1:38:95:d4:9f:29:43:49:03:10:1c:e4:
a2:de:aa:8d:b9:61:a0:24:32:94:f0:2b:89:bc:47:dd:77:75:
2e:45:a6:3f:5c:c8:06:89:a0:36:22:12:31:b4:9b:af:cf:70:
64:1e:c3:50:ff:3d:17:b7:f6:65:f5:2f:1c:bf:54:7e:0b:3b:
f0:a6:f9:65:cd:f6:ae:30:24:e4:44:96:23:c2:3f:fa:63:df:
45:8b:74:cc:d7:4f:1f:fa:ae:a9:79:b2:a5:54:5c:22:75:ef:
b5:0a:1b:c6:e1:ee:91:33:7f:90:d4:2c:aa:5d:34:70:9d:68:
d7:a4:ed:ab:74:b8:41:5d:19:ec:b8:f9:28:67:5e:b4:16:d4:
f0:cc:95:e3:e9:7d:38:48:9c:bd:6e:07:f1:43:3e:11:81:fb:
82:bd:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:05 2025 by rpki-client