Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7052013CDA2F11EF88BD0877762E951A.roa
File: 7052013CDA2F11EF88BD0877762E951A.roa (raw, json)
Hash identifier: pY/ovBmU/cB/+FFYOGzwVkV2WEKUXSyOzJTtsw6JnBo=
Subject key identifier: 9F:DE:FB:30:19:07:7D:55:14:D4:25:BE:D4:B1:52:C2:22:8A:74:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014489
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7052013CDA2F11EF88BD0877762E951A.roa
Signing time: Fri 24 Jan 2025 08:44:35 +0000
ROA not before: Fri 24 Jan 2025 08:44:32 +0000
ROA not after: Thu 13 Mar 2025 08:44:32 +0000
asID: 63139
IP address blocks: 154.203.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83081 (0x14489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:44:32 2025 GMT
Not After : Mar 13 08:44:32 2025 GMT
Subject: CN=679352f3-b911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:4c:39:47:58:e9:7b:84:d3:60:a6:f4:e4:
08:5c:60:a4:64:23:2e:7d:e0:cf:f1:28:6b:dd:23:
90:69:1a:17:71:94:a1:11:bc:98:8c:f7:35:d9:08:
a9:b5:b5:48:48:9f:57:7b:27:e1:11:e2:c1:d0:8c:
93:0d:25:97:d8:17:ee:8f:5f:cc:44:11:a0:19:3b:
7f:3a:4a:f7:a8:34:bf:19:f7:c8:21:25:d9:83:5c:
55:1f:25:41:d4:cd:76:42:22:70:b7:9d:d9:f4:1d:
d2:d6:e4:9a:c7:92:d1:64:0d:d7:06:fe:6c:7f:4f:
ad:06:9e:3b:a9:c3:91:d6:c4:26:16:49:80:12:b5:
0a:ab:0d:2b:6a:3b:d4:ed:fa:71:25:79:3a:52:c0:
06:e9:3c:54:31:c3:21:c6:de:55:f5:1b:d4:9a:a7:
00:86:7b:40:bd:0b:d9:91:1f:e3:55:ac:78:e3:bc:
2d:6b:fe:46:d9:cb:d3:30:bc:53:b4:2b:5f:d5:0b:
d9:33:11:40:44:11:1f:ae:bf:ca:be:2c:da:aa:8a:
8c:57:f0:3a:97:01:54:de:eb:1d:5f:0d:2e:ed:a1:
16:25:0a:e9:4a:43:72:44:dc:7e:f8:bc:c0:8e:1d:
03:a1:2d:d3:2c:28:a2:68:d2:31:50:fb:52:fc:79:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:FB:30:19:07:7D:55:14:D4:25:BE:D4:B1:52:C2:22:8A:74:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7052013CDA2F11EF88BD0877762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.184.0/24
Signature Algorithm: sha256WithRSAEncryption
18:28:a7:c9:d5:e0:86:ec:21:5c:51:cc:88:19:d1:55:6e:95:
d1:2f:a8:40:8f:49:5a:ce:ef:85:b0:44:4f:8c:0a:f2:7c:52:
e1:1d:b3:36:f0:ce:a0:ee:a7:cb:af:6c:f1:b2:ef:61:e8:9d:
7c:a8:a9:c7:a9:48:df:77:68:20:7a:fd:5d:39:19:0f:5b:33:
ef:26:f1:62:02:75:aa:a3:05:93:79:4f:aa:12:70:f9:05:22:
d3:57:e1:cd:e5:23:e1:53:21:d9:ad:5e:62:bb:10:0b:15:d3:
ae:27:2f:ce:c2:ea:15:58:aa:45:13:fc:e3:52:e2:05:b3:de:
ec:bd:ea:31:65:ea:78:7f:7a:70:ab:1c:1b:73:d6:e9:5a:a9:
60:0f:b0:b0:2b:28:15:8f:2c:83:b6:f3:e9:e1:8b:f3:e6:45:
e5:93:57:d9:a1:3f:f4:cb:46:e0:ec:7e:b5:04:21:25:d8:bc:
32:4f:df:99:24:d2:95:5c:fe:51:e9:b7:b6:47:1a:1b:35:0e:
6f:b0:bc:ff:0a:d8:34:79:da:24:43:f9:57:09:dc:f9:cb:b9:
d1:85:d8:e6:24:eb:d3:6e:51:a9:c9:05:f1:23:17:89:29:04:
d7:54:2a:71:7a:74:88:dc:6e:49:be:d9:94:03:0a:06:a6:d0:
17:97:8e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:51 2025 by rpki-client