Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F7C1EADA6711EFACCC9B72762E951A.roa
File: 50F7C1EADA6711EFACCC9B72762E951A.roa (raw, json)
Hash identifier: jz9BtTfim/gN2ZBZ6zq8GWQG56WffCPZE7FxUGGQZAA=
Subject key identifier: B6:12:9A:AC:75:54:F4:6A:A4:53:D3:99:EB:A5:E2:E2:63:2A:D7:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F7C1EADA6711EFACCC9B72762E951A.roa
Signing time: Fri 24 Jan 2025 15:24:35 +0000
ROA not before: Fri 24 Jan 2025 15:24:31 +0000
ROA not after: Mon 03 Mar 2025 15:24:31 +0000
asID: 203020
IP address blocks: 154.205.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84130 (0x148a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:24:31 2025 GMT
Not After : Mar 3 15:24:31 2025 GMT
Subject: CN=6793b0b3-a00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:21:4d:2d:70:9f:13:ea:08:0c:cd:50:19:
c8:a0:dc:64:50:c0:38:49:81:1a:ec:68:f7:96:4f:
b7:3e:a7:46:92:a1:3b:9d:10:8f:99:3a:31:4e:8b:
4e:02:f8:b1:75:e4:d7:e1:6c:29:c1:08:01:ad:b4:
f5:77:b3:21:25:ff:1b:97:44:40:50:f0:96:27:cc:
6a:26:5b:cf:1e:b2:40:53:ef:fe:c9:51:5b:f1:97:
85:60:50:52:ef:ac:24:09:89:35:4d:9b:81:c7:e7:
5b:d0:a7:83:e2:7c:4b:29:a5:81:cd:05:76:2a:19:
23:26:a0:d2:b8:f3:39:51:c0:6a:9a:14:af:0b:f0:
cd:ef:e1:d6:db:d6:bc:6b:bd:73:5a:94:fe:fb:ce:
41:d5:23:96:25:d3:a6:5b:8c:66:d7:e3:cc:d3:4f:
2c:ca:4f:8f:19:14:d5:d9:e1:09:70:2d:af:34:e5:
0d:df:83:5f:08:5e:9d:68:3c:3f:49:68:3f:ba:7a:
09:17:76:28:02:2c:be:84:86:42:e2:0f:6a:40:b2:
48:79:a1:fd:3c:57:bc:0b:0b:b3:8a:f3:53:9c:b2:
5b:6c:1a:ea:81:d0:80:d1:45:aa:29:ff:19:49:d5:
dd:73:6d:0d:0b:ef:4b:48:1d:15:50:be:f3:67:88:
2f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:12:9A:AC:75:54:F4:6A:A4:53:D3:99:EB:A5:E2:E2:63:2A:D7:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F7C1EADA6711EFACCC9B72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.186.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5c:77:1a:9d:f1:7d:89:8b:70:26:f2:66:5b:de:13:41:6b:
c6:b1:6e:2d:f2:8d:f0:37:24:d5:84:9f:3e:47:09:54:cf:31:
fe:b1:6c:37:34:fc:d0:4b:cb:e1:15:64:b1:32:1c:d8:33:16:
b3:1f:eb:c6:7e:e7:3d:9c:44:24:cc:13:8d:91:5b:88:5a:ec:
65:2d:1a:36:8d:0a:68:45:29:bb:3a:fc:f2:f2:4e:30:0b:3b:
b4:20:d6:e8:01:00:6c:58:8b:90:96:99:ba:f6:bc:7c:f5:40:
7b:76:e1:12:48:b5:12:1b:5e:ff:90:48:7c:f1:c1:b5:e4:18:
a3:9c:2a:a2:37:78:37:1d:13:ae:1d:2b:6c:5f:fe:8b:14:5f:
7a:94:7d:4e:0b:04:10:87:44:5e:15:a0:28:a0:bf:8a:77:1b:
53:d5:e9:65:36:51:5a:30:cd:84:c6:df:30:bf:ea:fe:c9:91:
c4:c6:8a:fa:6c:09:4f:dd:6d:97:0d:c0:6f:5b:75:92:de:f8:
c8:c2:fd:9c:f2:63:86:cc:0b:8f:30:b3:15:e8:72:94:6c:8d:
ba:ad:fa:89:20:30:e0:d5:7a:4d:dd:13:f0:5f:7f:3d:9d:2d:
a4:b4:b6:30:c0:4a:48:b6:14:07:a8:82:5e:67:04:88:29:6f:
04:7f:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:13:06 2025 by rpki-client