Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63943FAEC9C811EFAD851E42762E951A.roa
File: 63943FAEC9C811EFAD851E42762E951A.roa (raw, json)
Hash identifier: rFboxM0QiOVSTI1dzo3pYJ2Y3iOAp/YwXq4s1GYrr2g=
Subject key identifier: CC:00:00:15:53:D6:14:47:12:17:A9:93:54:B1:08:57:40:FA:70:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63943FAEC9C811EFAD851E42762E951A.roa
Signing time: Fri 03 Jan 2025 11:46:37 +0000
ROA not before: Fri 03 Jan 2025 11:46:33 +0000
ROA not after: Tue 04 Feb 2025 11:46:33 +0000
asID: 203020
IP address blocks: 154.202.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79030 (0x134b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:46:33 2025 GMT
Not After : Feb 4 11:46:33 2025 GMT
Subject: CN=6777ce1d-c7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:21:4b:50:07:90:6a:80:1d:2e:0a:69:fa:
8f:cb:df:e5:da:70:5c:90:54:c6:01:e3:c2:e5:30:
7a:84:b9:27:cc:82:b3:02:7b:8d:3a:11:8d:a0:80:
f9:33:a7:db:35:6f:5b:6b:f8:92:83:00:0c:bf:e7:
56:42:c7:6a:fe:4e:bb:7d:03:0f:f3:4e:bd:c5:84:
e8:1c:04:24:d5:6a:fc:2f:8f:b2:c9:bd:a8:60:cc:
58:30:76:1a:44:8d:ba:0e:e2:f6:c9:69:ee:18:06:
20:8b:ab:ec:bf:d5:b9:56:04:6d:78:c4:75:3a:36:
86:7d:b2:f1:00:c6:e4:ea:b4:14:3e:7f:fa:07:4e:
cf:60:8d:cd:67:33:50:45:1b:81:05:47:eb:6d:a1:
96:ad:3b:5f:8d:c7:e0:4e:9f:fe:8e:73:4e:37:e1:
86:3e:42:f7:2b:13:6c:94:66:a5:be:d4:59:d8:be:
ea:9d:4f:5b:04:93:c3:59:df:49:fa:a5:1d:06:59:
0e:ae:b6:ef:60:97:d3:95:ff:c1:9e:c2:79:8e:6b:
7a:43:f0:de:6e:b4:96:c5:2f:5f:38:63:ff:16:29:
5c:d6:9f:37:04:9f:8a:a3:f1:cd:0e:13:92:a0:a8:
ce:9d:d3:a1:d0:4c:e2:32:45:e0:aa:59:c2:d1:3b:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:00:00:15:53:D6:14:47:12:17:A9:93:54:B1:08:57:40:FA:70:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63943FAEC9C811EFAD851E42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.70.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:ad:1f:69:47:7f:03:8f:b4:b8:56:72:c2:8e:70:c6:bf:bd:
b2:46:af:c1:d4:f0:ba:29:0b:38:a9:1e:8a:ad:e5:ba:43:09:
d7:ca:36:5d:65:c9:2a:78:b9:3e:3b:9b:a7:9a:db:5f:ee:e8:
73:92:ab:87:b9:18:2d:de:51:4e:64:d9:f0:4a:75:79:2a:bd:
be:be:d0:17:91:e5:6c:b3:65:1f:a7:39:2b:2f:20:56:ad:90:
80:27:b8:1a:f2:b6:f0:6c:14:06:7a:d9:75:81:a6:3c:7c:75:
07:77:fc:d2:39:9e:bc:69:bd:b6:3d:3d:3b:10:7e:69:20:4b:
8e:16:0f:62:c1:0b:4f:1e:a4:d4:4c:b9:1a:00:64:50:1f:e8:
5d:1e:22:a4:24:ed:49:c9:ca:1f:ee:38:b0:04:1f:61:13:31:
23:20:52:dd:35:56:f6:df:0c:36:4d:f4:7d:2b:d3:0a:90:ca:
da:2a:20:59:fc:4d:25:d2:89:ae:fb:6f:de:08:4f:50:a8:a3:
2f:0d:53:9f:ab:3c:40:63:bc:24:15:de:e3:0f:dc:12:4c:ea:
08:df:d8:ca:0a:eb:8f:a0:8f:01:44:5c:83:ad:c2:fc:4c:32:
eb:1a:ef:be:49:c1:be:76:e9:46:da:ff:5a:dd:3e:e2:8e:98:
70:af:1d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:33 2025 by rpki-client