Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41F334AEDA5811EFBA30D78B762E951A.roa
File: 41F334AEDA5811EFBA30D78B762E951A.roa (raw, json)
Hash identifier: aQcIbvd5YH24B4cZZfIemL62ziJzWq69ibiFSQ2Hi2o=
Subject key identifier: 76:2B:91:1E:25:AC:1D:F8:81:5B:10:5B:D8:30:A3:32:DF:45:9C:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01478F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41F334AEDA5811EFBA30D78B762E951A.roa
Signing time: Fri 24 Jan 2025 13:36:47 +0000
ROA not before: Fri 24 Jan 2025 13:36:43 +0000
ROA not after: Sat 01 Mar 2025 13:36:43 +0000
asID: 44559
IP address blocks: 154.203.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83855 (0x1478f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:36:43 2025 GMT
Not After : Mar 1 13:36:43 2025 GMT
Subject: CN=6793976f-56f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:40:20:ab:49:6b:f0:ff:bb:48:82:f1:8d:ff:
8a:a0:2c:c1:4b:ff:58:4e:f0:3b:31:71:ab:ad:7a:
5c:a6:02:85:99:e9:b1:b9:5e:b7:56:b4:1c:95:c1:
9a:18:a2:65:dd:99:1a:02:5c:79:e3:77:88:8f:58:
df:0b:c3:d7:65:b7:17:89:98:1a:09:fd:dd:bc:24:
04:2c:8c:6c:47:71:3f:2a:a4:d3:6e:f3:cf:35:bb:
76:c5:8c:5a:b8:d2:10:69:ba:09:02:ff:67:e1:f6:
53:e4:86:54:f7:7b:56:f7:38:d5:ef:09:33:88:b1:
be:dd:aa:35:e2:44:46:b7:36:d6:69:b3:d6:81:7a:
7a:3b:71:ff:14:18:c5:99:03:7e:d7:aa:61:a3:19:
a3:fd:49:2d:27:2f:2c:4b:36:8d:27:8d:27:08:71:
71:ab:ad:e2:99:2b:ac:7d:71:aa:5e:58:e5:0c:2e:
42:c2:56:64:38:03:6b:a8:83:e3:41:4e:72:73:d1:
de:ad:83:bd:e3:f6:00:ab:55:d8:af:3b:46:a7:20:
67:a9:0a:d4:2d:04:db:0c:4b:9b:f2:85:f9:93:f5:
60:7a:37:f7:5f:4e:e9:ac:60:60:70:ed:89:c7:9a:
3b:24:d5:8b:2e:a7:b5:7f:af:c2:99:19:8c:16:b2:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:91:1E:25:AC:1D:F8:81:5B:10:5B:D8:30:A3:32:DF:45:9C:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41F334AEDA5811EFBA30D78B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6a:14:7a:55:2d:7e:f1:bd:66:af:2a:05:0d:ab:7b:4c:e7:
d5:57:c3:e3:c9:1a:23:0c:61:b8:8c:83:2d:c1:5c:09:97:99:
03:62:f4:71:19:9f:04:3a:86:d9:01:8a:da:01:16:5c:0b:7e:
9c:3a:4a:2d:04:5b:a8:06:33:03:0f:95:7a:90:03:29:6f:0d:
fc:05:c2:d3:08:19:b2:d3:0f:89:ca:be:05:2c:ce:b6:2f:33:
c1:00:eb:49:f0:b6:b0:61:11:2b:0c:ad:18:89:36:89:cf:8a:
ef:46:c2:04:ce:fc:d6:90:a5:16:0d:4b:fd:82:24:d2:57:48:
01:7d:ba:c8:6a:8f:e4:5c:c6:ea:af:f7:4f:1c:e1:33:f1:30:
36:71:01:af:85:68:51:d7:3f:cd:2e:84:53:32:4f:9e:73:26:
23:a0:1b:1a:1f:87:9f:4b:d7:c0:76:5d:91:69:d0:87:a4:f2:
c2:b9:4a:25:cc:53:69:c0:1d:eb:d3:55:57:7d:09:d4:31:f1:
28:63:7d:d9:6e:59:5f:87:0d:19:fe:bc:e2:8a:f9:d7:f2:5f:
77:91:84:80:eb:83:fa:d3:41:98:cd:69:0e:10:e5:ef:54:d6:
a6:25:4d:24:9d:67:50:fe:9b:14:20:f0:76:26:d1:1e:4d:82:
f6:14:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:46 2025 by rpki-client