Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9C660ED97F11EFAA776153762E951A.roa
File: 6D9C660ED97F11EFAA776153762E951A.roa (raw, json)
Hash identifier: bPoOuUO+6AmirGoTvdU6m0yIa7LTPVXcB2D+ukcIVbE=
Subject key identifier: E8:87:45:37:51:C8:8B:87:4E:C9:95:1E:76:F4:E3:EA:C7:8B:E4:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9C660ED97F11EFAA776153762E951A.roa
Signing time: Thu 23 Jan 2025 11:44:40 +0000
ROA not before: Thu 23 Jan 2025 11:44:36 +0000
ROA not after: Thu 13 Mar 2025 11:44:36 +0000
asID: 63139
IP address blocks: 154.203.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82363 (0x141bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:44:36 2025 GMT
Not After : Mar 13 11:44:36 2025 GMT
Subject: CN=67922ba7-908a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:05:3d:1f:0a:af:6e:1a:fe:8b:19:ec:88:
23:a3:c9:6d:7c:a1:17:47:5a:4e:4b:ae:60:f7:3e:
77:c6:2a:83:54:1e:11:89:ae:16:8a:8d:d9:69:f6:
f1:21:30:27:01:ce:e1:e0:5b:fd:82:91:2b:db:b4:
32:6d:41:75:19:db:3a:99:c9:7e:a9:39:97:c7:ae:
15:78:f9:44:bb:51:7a:aa:c5:36:3c:1c:bf:04:49:
30:c8:fa:95:6f:9b:e1:0d:77:35:f0:18:82:66:7f:
f0:b6:7f:9d:fb:66:30:a6:ab:92:a4:78:30:d4:5c:
c4:42:98:c4:02:a5:ed:2a:47:72:41:3d:39:f6:81:
91:b6:80:ab:d3:36:12:8e:25:5c:e9:a1:f6:29:01:
d2:1f:35:6f:46:d3:9a:fc:2e:ac:47:2a:2d:e7:54:
57:1d:47:fc:30:d7:b2:bc:03:c8:4f:53:50:67:7f:
13:62:fe:c7:1f:dd:2e:f2:a2:be:51:f4:50:bd:99:
16:bc:fc:77:17:9f:b9:4d:d2:1d:8f:b3:80:ed:ff:
99:97:da:52:c5:6f:83:96:35:ea:8c:47:7a:55:c2:
fc:52:cb:b3:bd:87:2d:7f:82:f5:f6:54:65:e2:ec:
91:ef:c1:10:20:06:18:dd:a2:8f:e3:aa:fe:8a:04:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:45:37:51:C8:8B:87:4E:C9:95:1E:76:F4:E3:EA:C7:8B:E4:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D9C660ED97F11EFAA776153762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ed:8d:7f:b9:87:15:59:dc:82:81:eb:a5:bd:e7:d1:32:cb:
c5:43:08:bb:ed:c1:e2:a8:15:23:c3:88:5b:39:e7:50:7d:f3:
eb:ea:a5:19:c6:37:b3:3e:48:27:81:84:4f:1a:79:48:b6:02:
32:62:90:61:ad:fa:f1:69:3f:ea:9b:62:a1:d1:6e:c7:af:0a:
c2:5c:a1:30:5f:58:9b:b0:5c:ad:92:4f:46:7d:9b:25:93:3a:
f8:77:d1:d9:f9:fa:c3:5e:e4:14:dc:f3:5e:d8:42:57:49:dd:
31:dc:b3:a7:13:23:a4:d7:d8:ba:8f:cd:49:e6:78:e5:e8:c0:
ed:6c:f8:8d:47:16:6a:89:cc:12:c6:a5:cd:67:08:9f:b9:90:
2a:77:a3:6b:60:22:78:42:e8:84:ba:9c:11:04:ab:04:fe:27:
1a:f6:f7:24:53:16:b6:0f:c9:c0:df:88:1e:94:9b:38:9a:4c:
40:9c:cb:76:53:0a:f6:d8:a1:ba:4f:9f:0e:4f:05:d4:41:2d:
bb:76:9a:2d:36:fc:32:df:43:a5:ab:35:99:57:c0:97:4a:0a:
53:a1:9e:38:cb:25:81:cc:b0:65:4d:7b:bc:70:e3:2c:c4:fc:
3b:fc:73:8e:c7:e1:d5:e7:6a:af:87:0b:b1:3f:0e:e1:1b:a6:
f5:95:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:27:42 2025 by rpki-client