Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6544CAD6D97611EF8C61F995762E951A.roa
File: 6544CAD6D97611EF8C61F995762E951A.roa (raw, json)
Hash identifier: Vj/ruunW6dVRtS7gkWjArsAOm2hvjB8YE0vCTtKSgEQ=
Subject key identifier: 02:0C:69:63:D3:2D:9E:DE:30:C8:B8:5F:C7:3A:5E:4A:C4:BB:FC:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01413D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6544CAD6D97611EF8C61F995762E951A.roa
Signing time: Thu 23 Jan 2025 10:40:00 +0000
ROA not before: Thu 23 Jan 2025 10:39:56 +0000
ROA not after: Thu 13 Mar 2025 10:39:56 +0000
asID: 138915
IP address blocks: 154.203.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82237 (0x1413d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:39:56 2025 GMT
Not After : Mar 13 10:39:56 2025 GMT
Subject: CN=67921c80-8baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:e3:ef:92:43:9a:bf:0c:1a:02:c5:19:6b:
80:cf:6a:53:be:90:88:eb:19:ea:6e:aa:5e:ff:d2:
e9:67:ba:f1:12:48:05:0b:19:1f:90:08:a9:5d:0f:
a8:51:58:ec:b9:b5:ed:12:5e:c7:a7:36:11:9d:c8:
4f:94:a6:de:e2:1d:1c:d6:0f:50:07:e9:d6:e1:d4:
07:c3:fa:13:e8:6d:9f:0c:54:19:f5:f1:80:43:a5:
87:cf:91:86:67:66:41:89:28:b4:39:06:37:8e:54:
e1:cf:ec:1a:ac:e0:1d:17:6c:d7:ff:03:29:d9:0d:
5d:69:7c:b7:e7:12:e5:04:bb:54:c6:50:6b:35:62:
33:d1:33:fd:16:fb:7c:79:1e:33:6e:b0:c2:9b:3e:
00:29:eb:de:1a:d1:39:f7:a3:13:38:6e:50:2b:1d:
41:da:4f:e0:18:e7:9d:eb:55:6a:e9:cd:87:7a:38:
e2:1f:f1:fa:e6:bb:f8:ba:0e:f7:e2:af:2a:6a:15:
1c:78:84:f6:b4:38:60:5f:29:e5:63:a3:09:ee:91:
1b:12:95:4e:28:9e:16:2b:6e:b3:c6:c1:a7:43:4c:
60:82:b2:48:36:d0:e1:ee:89:7b:6f:08:62:57:99:
36:06:e7:20:67:ce:db:3a:95:fe:38:32:12:05:64:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:69:63:D3:2D:9E:DE:30:C8:B8:5F:C7:3A:5E:4A:C4:BB:FC:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6544CAD6D97611EF8C61F995762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.149.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ca:03:ec:c3:be:27:9d:34:05:fc:a1:2b:ed:f3:54:7e:84:
dc:d5:4c:29:e3:d1:73:10:1d:f3:1a:2f:9f:9f:06:6b:04:a6:
7b:25:7c:ce:58:33:c5:62:87:5f:27:86:ef:d2:75:b9:d7:e9:
14:3e:f0:9b:11:50:c9:72:82:6a:23:c6:73:d6:b0:7a:f1:5d:
8e:a6:5e:ea:5a:43:1d:79:a5:0b:1a:5c:11:a8:51:e9:9f:84:
03:ad:e5:b3:71:11:a5:c3:17:a7:98:3f:3f:89:8f:24:ba:75:
06:36:9b:c3:c9:18:ae:2d:81:32:55:77:2e:2f:6f:89:76:3d:
08:3e:57:4b:a7:f0:5c:0c:a0:24:c8:c9:72:16:e3:dc:43:63:
0c:39:9d:93:00:97:c1:a1:56:60:88:ec:8e:90:04:93:46:a2:
82:81:8a:21:96:7d:3d:99:15:19:4e:cb:5e:ef:8d:e8:89:34:
34:6d:42:bd:95:55:8d:9f:e7:23:8a:1a:d0:a9:43:b7:52:26:
1f:46:c1:3c:3e:e4:f2:ef:12:9b:2c:6a:c7:d5:0f:89:b2:2e:
5f:a0:b7:24:2c:d5:ec:9e:15:cf:8a:c5:ae:9f:4d:da:a4:bd:
80:f1:3e:0b:46:96:31:7a:84:d2:46:46:14:40:4a:19:a1:a1:
50:a1:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:32 2025 by rpki-client