Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40BE6D38D98111EFA8B1A360762E951A.roa
File: 40BE6D38D98111EFA8B1A360762E951A.roa (raw, json)
Hash identifier: w55WneSjzw9/7L6ASkkCmX3yzDcr3sj7vl4GNIQi2xE=
Subject key identifier: 4A:3F:26:D7:C3:4C:59:0E:69:9E:C3:DA:19:78:40:9B:FA:4D:85:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40BE6D38D98111EFA8B1A360762E951A.roa
Signing time: Thu 23 Jan 2025 11:57:43 +0000
ROA not before: Thu 23 Jan 2025 11:57:39 +0000
ROA not after: Thu 13 Mar 2025 11:57:39 +0000
asID: 138915
IP address blocks: 154.203.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82393 (0x141d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:57:39 2025 GMT
Not After : Mar 13 11:57:39 2025 GMT
Subject: CN=67922eb7-deb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:5b:20:19:2c:d1:dd:f7:3a:bc:77:c4:6a:
12:9b:8a:75:a0:2b:d9:1d:23:76:88:f8:b5:07:c3:
e5:ba:87:8d:9d:cb:7c:35:f3:91:f5:e0:90:db:f6:
29:3a:7d:77:ff:64:d9:49:1b:6b:06:9e:93:5e:3f:
8c:fa:96:fd:67:90:d6:d6:2c:ff:d8:27:8a:77:09:
e6:bb:71:4f:e8:4e:88:73:f2:d5:c5:19:15:3e:e1:
83:44:3e:6b:fe:d2:e6:2e:da:b7:17:93:2c:00:33:
eb:bc:3e:75:ed:89:af:06:d0:40:cf:04:c7:10:8b:
75:25:79:4c:6e:42:78:35:86:91:72:3c:47:2b:a7:
1c:f6:66:42:be:f9:e1:a3:e7:f4:df:ef:57:79:b6:
c8:93:4c:14:7d:32:04:c2:63:6e:c9:6c:1c:23:8d:
69:f5:72:50:88:d0:ac:0a:30:88:21:44:69:2a:e9:
28:ba:e8:87:81:5d:55:28:35:73:d7:4c:28:bd:91:
b2:79:2f:cb:e1:00:46:33:6a:80:f3:9e:f8:a9:5d:
d1:b9:cc:de:2e:10:9d:9b:bb:f6:a1:c6:88:3c:5b:
7c:df:54:23:e6:20:03:9d:c8:1f:34:a8:75:24:c3:
34:9a:03:c6:d3:3c:03:92:6f:d1:c5:c2:42:1f:02:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:26:D7:C3:4C:59:0E:69:9E:C3:DA:19:78:40:9B:FA:4D:85:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40BE6D38D98111EFA8B1A360762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.159.0/24
Signature Algorithm: sha256WithRSAEncryption
18:94:27:f0:6d:6d:b1:de:7c:56:e7:38:df:9b:96:84:af:11:
81:68:67:e4:af:d7:7d:55:8c:34:7d:05:eb:e0:63:a9:39:fa:
38:08:b2:71:5b:01:d8:c9:5c:85:d6:0d:b8:93:fb:4e:1c:19:
b7:7e:c7:1f:30:f9:25:71:85:9a:77:43:a8:1a:ba:4c:30:97:
95:0d:28:71:69:a7:a5:7c:72:39:3d:5f:0b:95:2e:cd:ce:80:
1e:df:5b:b9:4f:b7:2c:cc:c8:75:eb:02:62:5f:c3:15:cb:96:
97:7f:fa:da:ae:1a:1f:9c:0a:8b:3a:e5:db:33:c5:06:25:b8:
7d:70:94:4c:fa:97:74:15:a9:fc:57:a4:73:9b:23:f6:bb:31:
74:cd:bb:44:0e:6f:5f:ea:20:8a:00:f2:fc:9a:7a:74:73:a6:
7d:35:1e:b9:a5:d9:c1:03:cf:e8:2c:ac:52:c7:6d:02:20:c9:
2e:ac:67:77:8e:4b:80:bf:5d:8e:d6:ab:15:1a:77:20:ef:34:
1d:ba:f5:06:0e:a8:90:4c:01:6f:03:1a:34:03:0c:02:21:56:
d6:bc:93:42:db:9d:43:96:2a:54:4d:cb:91:97:21:2a:18:df:
50:0e:78:a3:f9:7f:81:66:9d:73:5c:d5:ea:4e:c0:e7:d8:64:
5e:fc:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:49 2025 by rpki-client