Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43E45896DA6311EF9DE87056762E951A.roa
File: 43E45896DA6311EF9DE87056762E951A.roa (raw, json)
Hash identifier: yErwm8oX9MARfZsSru55BtNkPV8trhAh285KJqOQ1FM=
Subject key identifier: 8D:D5:E8:E0:8A:1B:F1:DB:93:08:D4:13:54:91:8C:DB:96:19:59:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01487A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43E45896DA6311EF9DE87056762E951A.roa
Signing time: Fri 24 Jan 2025 14:55:35 +0000
ROA not before: Fri 24 Jan 2025 14:55:31 +0000
ROA not after: Sat 01 Mar 2025 14:55:31 +0000
asID: 44559
IP address blocks: 154.203.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84090 (0x1487a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:55:31 2025 GMT
Not After : Mar 1 14:55:31 2025 GMT
Subject: CN=6793a9e7-4825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bc:04:2a:7b:cc:c4:e8:be:5f:17:e8:e5:43:
9f:aa:44:9c:8b:3a:9f:84:68:e8:e1:7e:7d:f3:00:
12:fb:ea:d3:e2:26:bc:2a:ce:e3:97:dd:2b:b8:82:
b0:94:6d:40:ca:6e:9c:ef:9b:06:f4:4a:03:14:35:
14:b5:82:95:e0:8a:4a:cf:fe:90:5c:3f:29:ae:51:
64:56:83:68:64:19:fd:c3:db:88:2d:9c:9b:0c:aa:
52:c8:42:0e:3e:10:b8:cd:82:66:38:1e:13:29:66:
97:6b:e9:f4:43:2a:95:9d:6a:ad:52:c1:07:53:3c:
7b:f6:b0:a9:5d:06:c3:36:8e:24:90:33:3f:24:b6:
50:5c:c2:a1:16:8b:15:27:5c:2f:0c:d3:61:6d:42:
6b:88:60:b7:f1:0b:fa:8e:c4:db:b0:ce:3c:83:b6:
0d:54:96:b3:95:29:5d:16:c4:fd:29:46:b2:e2:3d:
cf:5f:d5:70:6a:92:2d:0a:22:a1:e7:a4:9d:93:52:
41:6b:6a:ee:ca:62:c9:66:c3:3c:45:4c:df:b2:2d:
a7:11:d7:f6:65:d5:d1:4f:27:19:37:c2:2e:4a:0e:
64:a5:f5:7e:b8:5b:9e:b6:1b:37:8f:d0:99:3f:47:
15:5e:56:ab:23:be:82:a0:11:e8:f9:0f:d3:83:5a:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:E8:E0:8A:1B:F1:DB:93:08:D4:13:54:91:8C:DB:96:19:59:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43E45896DA6311EF9DE87056762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.218.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e5:12:96:e1:e3:0b:68:84:fa:c5:c7:16:ae:00:83:2d:10:
ec:f7:e9:22:54:33:ae:8a:62:c8:88:e6:05:32:97:56:bd:e1:
d5:25:16:bd:c9:5a:04:e7:a1:82:49:12:1c:68:a4:5b:09:90:
95:7c:1a:14:32:9c:ff:a8:80:63:34:9e:30:09:27:8f:c7:55:
e4:75:49:07:e2:bd:ed:3d:3e:f4:bb:c0:22:3a:d2:24:57:07:
7e:46:53:d5:b3:20:e3:d7:a4:ac:97:b9:88:60:a8:cb:3d:70:
b2:dc:ac:1a:3e:4d:19:64:b4:85:7b:38:82:82:19:97:80:9f:
e2:45:cb:f6:b3:f6:fc:37:3f:c8:e1:45:79:fd:96:e9:a6:5a:
eb:b1:07:e6:8b:4e:8e:a2:b9:28:e0:79:74:0e:03:e2:e6:3d:
02:ee:8d:fd:82:37:d2:42:f9:a7:ae:f1:a0:c9:24:d4:2f:97:
ad:5b:95:53:33:82:92:3b:35:f0:b3:0d:c7:3e:39:af:e9:64:
55:cf:87:7b:8b:1d:1c:b8:69:7a:84:bd:1f:95:44:61:8a:51:
0f:53:0a:96:2a:ab:54:1a:3e:95:01:ff:22:04:71:ec:8f:05:
6f:00:56:be:12:37:1d:f7:53:f8:6a:5d:e7:f2:f4:94:1d:d3:
ee:95:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:14 2025 by rpki-client