Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703EFE9ADA2D11EFA0E2A069762E951A.roa
File: 703EFE9ADA2D11EFA0E2A069762E951A.roa (raw, json)
Hash identifier: AxC/bDRgRBeyQ6+T9SCPxpltwNQKU7DLHGBnrXpXTsc=
Subject key identifier: 30:C0:0D:95:38:95:C4:B5:99:D4:F8:28:FB:4E:72:3C:B2:96:83:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014471
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703EFE9ADA2D11EFA0E2A069762E951A.roa
Signing time: Fri 24 Jan 2025 08:30:16 +0000
ROA not before: Fri 24 Jan 2025 08:30:13 +0000
ROA not after: Wed 05 Mar 2025 08:30:13 +0000
asID: 202656
IP address blocks: 154.221.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83057 (0x14471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:30:13 2025 GMT
Not After : Mar 5 08:30:13 2025 GMT
Subject: CN=67934f98-c0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:33:3b:da:e8:a0:76:f9:48:e1:c8:91:17:
7f:c0:01:6a:69:bd:49:20:33:32:50:20:24:96:83:
2b:1b:62:82:a7:f0:38:af:f3:87:e3:fc:6a:64:72:
ac:c6:b2:a2:55:50:aa:86:f4:34:64:05:2a:29:28:
d8:6f:a2:45:c6:11:36:a1:56:42:c0:17:84:50:1e:
a8:a6:6b:80:be:e4:4a:82:38:0e:ee:7e:75:b5:6e:
0c:13:bd:3a:e8:f4:57:08:97:97:8c:8a:4b:f5:91:
c6:d7:39:16:d1:73:ae:77:3a:d5:05:f4:de:e5:e0:
64:19:06:49:1d:20:1b:5e:c8:ed:d2:e0:e8:91:5c:
d7:19:e4:06:39:1f:cb:75:72:13:0f:ec:fd:8e:6d:
9f:02:7a:be:3a:b1:9f:3d:bb:ab:26:d1:4a:3a:1a:
9e:6a:af:af:be:e6:93:64:39:4c:77:c2:ed:14:68:
0b:86:a6:59:2a:f5:81:af:c6:4d:3a:99:d2:7a:30:
6d:08:52:34:c9:04:ce:c6:50:54:56:6c:6c:89:d8:
fa:b5:cc:6e:d8:6f:60:b9:02:6a:b8:44:9f:37:4b:
1f:b1:71:9b:76:3a:cf:a4:ef:15:06:e9:dd:54:7e:
ee:ca:fd:91:9f:88:67:73:ac:55:a4:cf:92:07:dd:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:0D:95:38:95:C4:B5:99:D4:F8:28:FB:4E:72:3C:B2:96:83:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703EFE9ADA2D11EFA0E2A069762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.63.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e2:c1:d4:9f:45:85:6b:24:d3:64:e7:82:6a:46:e1:7f:60:
61:76:07:f2:89:08:1a:46:12:d6:92:a0:49:e2:75:1b:ab:19:
18:d3:55:f3:21:b8:d8:7a:2b:01:95:31:ac:0b:bd:27:79:8b:
da:ec:da:fe:8b:40:44:f2:92:97:b1:94:c3:df:81:01:b7:1d:
12:27:9f:7d:be:fc:e0:11:9a:be:c1:a0:71:fd:ef:e0:66:78:
a8:47:88:e8:45:0b:24:e1:89:50:1f:07:da:ae:4b:a9:0d:95:
f4:c8:2c:0f:71:d7:30:48:d8:60:e7:1f:49:de:d6:34:e3:13:
01:47:6f:1b:ad:19:ee:9c:52:ee:6c:5b:87:4d:6a:2f:e3:c0:
3e:c7:c3:ed:4e:d2:46:fa:ba:e5:ff:c3:bb:d0:a0:46:07:51:
48:74:e9:f0:c4:57:71:c8:13:eb:d9:c5:ea:ba:d4:72:c6:94:
56:b6:4f:a8:56:5e:6d:ab:df:f8:b2:4f:e5:d3:b4:32:a4:ad:
9b:64:30:dd:14:66:65:d2:4d:84:59:9a:6a:7c:40:12:38:59:
a7:64:b1:33:7e:19:ed:1a:12:c1:f0:e6:24:e2:a0:13:8a:cd:
ac:0e:d2:95:d2:37:ac:3b:98:fd:05:3b:fc:15:e9:a0:50:57:
25:29:46:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:48 2025 by rpki-client