Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/669561BEDA4F11EFBC53A250762E951A.roa
File: 669561BEDA4F11EFBC53A250762E951A.roa (raw, json)
Hash identifier: cOMKtR2NO6Z8uw/mx9nYNTqHUuhO2l1XeV6poFob+5Q=
Subject key identifier: BF:03:F1:AE:E1:D1:87:44:B5:40:9F:EA:94:8C:77:76:47:2B:53:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/669561BEDA4F11EFBC53A250762E951A.roa
Signing time: Fri 24 Jan 2025 12:33:23 +0000
ROA not before: Fri 24 Jan 2025 12:33:19 +0000
ROA not after: Wed 05 Mar 2025 12:33:19 +0000
asID: 44559
IP address blocks: 154.209.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83672 (0x146d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:33:19 2025 GMT
Not After : Mar 5 12:33:19 2025 GMT
Subject: CN=67938893-4acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:2c:1a:4c:cf:ee:71:bb:0d:b8:bc:29:70:
7a:c5:8f:a9:90:b7:e2:c9:5f:5e:92:dd:07:32:11:
d1:bd:68:4d:6c:cf:72:1a:dd:ed:6c:ca:db:5d:24:
04:b9:64:6d:7f:8b:73:a5:82:49:49:d2:e5:2f:08:
30:69:6f:71:4c:5a:fb:54:1b:e2:56:f7:68:b8:6a:
a8:51:f7:ab:61:a4:31:8d:e0:87:6f:ab:ec:1f:94:
80:f9:11:99:35:6f:d8:ab:b3:66:ac:cc:0a:30:6d:
c8:52:2c:a1:27:2c:6c:27:17:d9:92:a9:b5:24:d7:
52:80:55:16:5b:c3:e8:13:93:7e:2e:06:cc:5c:0b:
50:a4:6b:5a:9d:8a:5f:a0:73:b0:1b:d6:fd:1d:9f:
2d:db:03:dd:20:ee:0e:92:c2:51:b0:22:ec:80:36:
17:69:5e:d3:b3:d9:13:4d:1c:95:e1:0a:cf:72:f4:
a0:dd:57:88:ff:d4:3f:a4:7f:51:f3:a3:b6:b9:32:
97:c5:97:c2:96:74:cf:0e:2c:16:be:45:57:cb:dc:
0d:23:87:29:b9:0e:37:9b:b4:79:ce:ac:74:42:23:
49:9e:cd:36:79:da:23:05:7a:00:ff:8e:8c:e8:c0:
64:8b:d4:b2:d2:ce:68:f5:1d:ca:2c:b7:82:8d:25:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:F1:AE:E1:D1:87:44:B5:40:9F:EA:94:8C:77:76:47:2B:53:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/669561BEDA4F11EFBC53A250762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:17:c2:dc:43:48:84:9d:37:03:e2:cc:89:90:25:66:d0:f1:
9a:7d:a8:3d:cb:c7:f6:f4:2f:1b:98:4a:86:92:3d:3c:a5:0b:
6c:fb:3f:fe:31:d5:60:e6:fa:e9:24:fe:c7:93:61:78:45:5e:
40:b9:ba:69:18:19:8e:40:a6:c2:ad:b1:bc:94:1c:57:60:39:
50:25:ad:90:9d:90:1f:31:5c:a9:3b:cd:9f:37:ae:00:66:23:
8b:13:44:b9:c7:84:aa:39:99:2e:d1:34:8d:9e:b7:7e:36:d0:
2d:10:4c:69:b3:c7:68:b6:bb:da:74:f1:8a:70:55:f5:1b:19:
a3:02:c3:9e:28:52:c7:d6:3a:b5:3d:dd:56:b6:72:92:48:f2:
19:31:0c:69:2f:12:35:a0:97:3f:7b:2a:ad:41:1a:94:82:f1:
10:3c:e1:c6:e4:e4:50:cb:5d:14:e3:d2:07:dd:c4:6e:70:4d:
63:13:70:23:54:25:cc:cb:2b:4e:1f:c7:70:1a:db:d4:9a:32:
8a:64:2a:bf:3b:5e:be:ca:11:f1:de:46:f6:ab:80:5a:84:f3:
c5:8b:af:fc:38:14:d2:bf:72:5a:c9:8f:46:5e:d8:85:89:82:
48:51:4d:6c:ac:5c:ba:f2:8c:f9:da:e5:3a:0a:96:cd:3d:35:
1d:a2:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:47 2025 by rpki-client