Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/425CF646D98611EFB7F32F82762E951A.roa
File: 425CF646D98611EFB7F32F82762E951A.roa (raw, json)
Hash identifier: scYW8wx4PuD8RvJWnDtDr4g2K2e7H14RGigZQpXQMQ4=
Subject key identifier: 30:BA:B0:E8:0D:A6:72:0D:44:A1:00:A2:9E:2E:A3:1C:22:EF:78:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014224
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/425CF646D98611EFB7F32F82762E951A.roa
Signing time: Thu 23 Jan 2025 12:33:33 +0000
ROA not before: Thu 23 Jan 2025 12:33:30 +0000
ROA not after: Thu 13 Mar 2025 12:33:30 +0000
asID: 138915
IP address blocks: 154.203.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82468 (0x14224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:33:30 2025 GMT
Not After : Mar 13 12:33:30 2025 GMT
Subject: CN=6792371d-3719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:b5:ed:5b:47:0f:45:25:a7:04:34:ff:ef:
a3:9c:8b:45:8e:d0:b5:4c:48:a5:bd:f4:34:bd:4d:
b2:63:df:6a:a8:30:6a:ac:52:4b:5a:ce:8a:e4:3d:
41:6e:e9:3a:6f:b7:55:76:3f:48:81:1b:60:73:e4:
05:4e:6e:d0:a6:1e:5e:e7:15:65:f9:0c:08:7d:09:
d7:1b:6f:b4:30:82:4a:ba:72:e2:f8:c8:a2:71:56:
e4:0e:a7:bf:00:c0:43:06:9d:b1:f7:c6:8e:17:3d:
c0:31:fa:02:a5:b5:2a:56:49:84:b1:f9:d0:98:62:
32:69:1f:7e:a1:60:d5:58:a7:40:a2:38:d2:af:1e:
63:f6:e8:af:fa:87:0c:71:f8:58:9b:0c:87:fc:d4:
38:8b:3e:7a:89:3c:bc:ba:f6:90:2b:64:59:6f:27:
21:99:c6:5c:c0:af:4c:1d:d2:93:04:4c:ad:5a:f5:
07:e7:16:68:58:15:fb:fc:96:3e:a7:37:00:9e:9e:
79:ee:9d:56:6f:8e:74:94:21:68:2e:31:5e:16:ab:
06:9d:c3:d1:bd:ea:37:1a:0d:13:45:b4:4d:b5:0d:
8b:dd:e9:be:ae:a3:ad:49:ef:7b:98:87:44:1e:ec:
2a:f3:a5:b8:63:88:9b:a3:8f:37:59:d2:84:a5:cf:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BA:B0:E8:0D:A6:72:0D:44:A1:00:A2:9E:2E:A3:1C:22:EF:78:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/425CF646D98611EFB7F32F82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.146.0/24
Signature Algorithm: sha256WithRSAEncryption
85:72:d7:41:e7:d4:ef:2a:0c:31:3c:2e:8d:62:cb:9c:25:06:
e5:cd:33:30:a5:49:cf:13:6f:6c:e4:70:bf:bb:a3:b0:cf:12:
6e:da:d0:5a:0f:21:c7:98:35:19:05:e9:8e:08:43:cd:36:fb:
02:21:b4:9e:8c:0a:59:c8:47:91:7f:77:5c:53:6a:e7:26:62:
51:df:42:a2:f7:08:86:91:54:e4:9b:a6:2f:81:9d:ee:7f:99:
ac:e2:60:c9:37:4b:24:35:18:2b:1a:e1:c4:cb:ba:9b:30:46:
0f:82:31:fa:57:b7:f8:fd:06:f4:7c:36:7d:1d:99:cf:84:33:
c1:c3:4c:86:bb:4d:c1:0f:89:56:6e:15:d6:8c:79:d9:04:13:
ef:48:e0:0f:f3:44:c5:f0:fb:02:ee:6b:77:f4:64:00:6d:10:
d4:d6:b3:94:70:81:96:da:c9:d1:1b:4b:93:47:d2:9d:42:b9:
8b:7f:e7:a3:b0:a1:9b:76:de:d2:58:82:da:23:21:3e:cb:1d:
6d:76:e8:c0:9a:f9:ea:ef:d4:80:c1:5a:ac:d0:c8:5e:62:a1:
4d:73:50:13:d6:27:48:24:02:5e:b5:a6:44:d4:f1:cd:7f:c9:
d6:2d:bd:74:6b:73:e5:1b:04:25:3e:a9:7e:38:e3:73:62:2f:
2b:f7:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:47 2025 by rpki-client