Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47CC8032DCC011EF83228448762E951A.roa
File: 47CC8032DCC011EF83228448762E951A.roa (raw, json)
Hash identifier: w6SDSOSP8fNnqlcaxpAx1p8nvzl+C6MovIRKD1p+5WM=
Subject key identifier: 7F:C9:C2:CF:AB:80:0C:C5:1D:9E:04:F1:DE:59:F2:93:B0:59:B6:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47CC8032DCC011EF83228448762E951A.roa
Signing time: Mon 27 Jan 2025 15:06:27 +0000
ROA not before: Mon 27 Jan 2025 15:06:23 +0000
ROA not after: Sun 09 Feb 2025 15:06:23 +0000
asID: 5065
IP address blocks: 154.86.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85039 (0x14c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:06:23 2025 GMT
Not After : Feb 9 15:06:23 2025 GMT
Subject: CN=6797a0f3-3c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:60:43:1d:e3:65:49:9d:67:e3:4e:89:8b:
5a:cd:65:cf:86:6d:cd:76:1c:a3:e4:39:40:c1:52:
10:f7:06:1f:e5:5b:85:44:73:44:d5:0f:33:4b:df:
2c:95:bc:cc:c2:13:39:8d:1f:f5:22:3d:d5:bb:c1:
1f:30:f3:07:ae:6b:8c:8d:fc:bb:7d:04:04:95:eb:
c9:7a:a3:3a:f6:2c:f8:75:a7:90:04:af:fb:3a:70:
97:c5:fa:af:25:1e:34:f8:0d:ac:e5:c5:9d:0c:5d:
3d:06:72:88:c5:03:cd:27:df:ea:a7:99:fe:6d:6e:
c6:bf:ff:ef:c0:b2:b4:78:c6:3e:a5:fb:90:d4:90:
dc:b3:fa:f2:0a:43:d8:1b:14:4c:75:4e:b2:81:b2:
8c:d1:fd:bc:7b:83:74:ce:25:8c:5c:9e:58:18:21:
7f:36:69:d1:c4:e8:2c:c2:c6:56:a0:75:5a:c9:29:
ea:f7:18:09:f4:a4:e2:da:67:9b:55:09:e7:16:3a:
3c:f2:74:e6:fb:66:c1:8a:50:bc:2d:42:d6:75:f1:
90:5c:75:e1:a8:60:9c:d3:49:b4:95:51:d5:19:61:
b4:f3:33:34:ee:57:92:37:2f:07:f1:f8:aa:16:87:
99:bc:98:3e:f6:28:3a:d4:ee:fa:4e:3c:fc:54:20:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:C2:CF:AB:80:0C:C5:1D:9E:04:F1:DE:59:F2:93:B0:59:B6:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47CC8032DCC011EF83228448762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.103.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:c9:59:9d:89:d8:bf:3e:7c:e1:2b:65:e4:bb:77:54:7d:dd:
5b:c2:08:10:52:7b:92:0f:26:e7:82:95:39:24:2d:1e:6b:38:
e7:56:f9:93:31:e1:f9:34:b1:2e:67:c0:c1:2c:09:de:28:a0:
8d:4c:9e:c4:62:75:9f:ee:0a:28:c5:39:e1:13:2f:e9:fd:4c:
11:b8:86:af:da:be:c2:df:52:3a:c3:69:24:48:20:a1:37:a3:
0d:e5:3e:08:cd:f8:33:d8:e6:0d:8d:29:8e:b3:74:3c:c3:ff:
03:9e:26:c8:c2:aa:41:73:47:b8:19:5c:06:16:11:63:23:f2:
f5:da:11:13:b4:b7:f6:bc:20:2b:1a:37:f9:29:9c:f3:6f:25:
24:cc:10:29:ce:07:d4:fa:6c:68:1a:64:39:08:a9:a1:91:2f:
a7:ca:dc:dd:dd:bf:36:33:ab:96:cf:a9:dc:18:93:21:a2:c8:
65:0d:59:2e:f2:c9:86:0a:bd:a1:69:bf:63:e2:8c:6f:01:c1:
01:72:84:26:88:84:a6:2d:b0:39:2a:21:12:b0:0e:6b:8a:30:
b0:5e:72:b3:ba:c9:47:f1:53:f5:5f:16:a7:31:a3:de:e0:2c:
58:50:54:f6:3a:37:5c:9b:12:6d:b0:b9:c0:cc:d7:b0:6f:7e:
ce:6d:bf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:26 2025 by rpki-client