Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A2A1076DBEB11EF8044B0AE762E951A.roa
File: 5A2A1076DBEB11EF8044B0AE762E951A.roa (raw, json)
Hash identifier: c6lhg0Qy6gxHxKxFRA0PJnHUePhAh34vaAQoD/xYhaw=
Subject key identifier: 34:CF:44:EC:23:F1:42:81:CA:84:0A:C2:84:D0:63:16:EC:4D:7C:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A2A1076DBEB11EF8044B0AE762E951A.roa
Signing time: Sun 26 Jan 2025 13:42:15 +0000
ROA not before: Sun 26 Jan 2025 13:42:11 +0000
ROA not after: Fri 07 Mar 2025 13:42:11 +0000
asID: 205125
IP address blocks: 154.203.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84644 (0x14aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:42:11 2025 GMT
Not After : Mar 7 13:42:11 2025 GMT
Subject: CN=67963bb7-4e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:ee:ee:8a:ce:11:23:82:2a:7a:cd:63:98:
c7:a1:0b:9e:8d:6a:3b:1c:b9:e9:8c:b7:9a:b3:5f:
c0:fd:02:86:ec:75:fe:64:5d:4f:4c:fa:90:56:00:
6e:83:a7:c2:a8:74:b6:51:73:ab:67:72:59:39:d9:
7b:e4:b1:1f:15:84:a4:22:e3:64:69:c3:3b:94:33:
9e:a1:5e:d4:79:6e:24:9d:1b:d6:fb:13:5b:7b:37:
0a:49:ec:55:ef:1e:10:5a:d8:3e:e5:7c:32:b2:35:
9d:a2:17:61:c5:65:f5:24:1b:80:e4:da:47:6a:8b:
69:80:86:f6:4a:82:56:52:71:99:4d:b4:d3:38:36:
56:c1:7f:16:99:8e:89:a3:eb:aa:6c:02:37:57:a6:
57:43:69:df:dd:80:67:c3:58:04:89:96:33:5d:15:
20:9b:62:03:a9:35:e9:4b:5a:9c:a4:fc:f4:f1:ef:
2b:0a:e4:11:c5:43:94:fa:4c:97:85:24:85:61:68:
f4:df:16:eb:73:78:9f:0b:1f:8a:41:22:14:b7:20:
f7:d2:81:82:37:38:19:26:d3:dd:7c:8c:8e:c3:50:
bc:6a:0b:af:72:64:f2:68:55:ba:19:aa:85:dc:aa:
9a:e2:35:cb:ca:f6:f7:81:20:76:4a:fa:a9:b4:b0:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:44:EC:23:F1:42:81:CA:84:0A:C2:84:D0:63:16:EC:4D:7C:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A2A1076DBEB11EF8044B0AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.195.0/24
Signature Algorithm: sha256WithRSAEncryption
59:77:d2:f1:e7:07:3b:ee:36:d8:05:ad:b8:8c:6d:f4:aa:bf:
de:d7:eb:f4:a6:be:7b:9c:54:54:f0:3b:e0:0c:ec:e1:42:f6:
0e:f6:e5:7f:e5:c3:36:51:03:8d:09:d4:34:5c:31:aa:26:59:
57:79:f8:85:57:cc:3d:33:86:a6:31:aa:8b:92:f0:af:55:c3:
59:7b:18:3c:e4:e6:20:6f:38:58:99:cc:05:e5:d0:ac:b6:74:
e5:ce:99:06:a5:a9:2a:9e:24:d1:e4:bc:4b:f8:ac:37:50:85:
23:19:f2:5b:3c:4b:22:1e:c6:4e:94:fb:a5:8c:1c:1a:23:c4:
f5:4a:3b:98:32:cb:f5:7d:c4:36:38:97:e8:b4:8f:5b:19:e5:
0f:4c:ff:2c:bf:e9:e9:11:5a:7f:8a:49:14:48:7b:9f:06:9d:
78:f2:f8:b2:32:62:09:dd:05:f4:0a:4e:45:6e:ca:24:0c:26:
6f:12:d7:be:41:c5:63:09:97:9f:31:67:49:3c:9c:4f:5d:da:
7d:96:98:f4:9b:25:b5:72:2f:a1:b4:7e:3f:c4:3f:b5:93:ca:
a8:b0:3f:65:98:dc:b7:f3:69:e4:c9:b0:15:53:f9:bc:d8:5c:
89:d0:2f:24:9e:19:69:1d:df:e0:3c:a4:31:9e:78:aa:aa:b3:
35:d8:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:01:12 2025 by rpki-client