Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74302DB2D97911EF9C7095AA762E951A.roa
File: 74302DB2D97911EF9C7095AA762E951A.roa (raw, json)
Hash identifier: 9+bEhMN6dWo1JF9MsaSDncgRWAA924rbpAncp6Xnt+A=
Subject key identifier: D3:61:E7:65:7E:60:31:62:80:67:B3:11:24:94:02:07:06:8E:D2:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01416D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74302DB2D97911EF9C7095AA762E951A.roa
Signing time: Thu 23 Jan 2025 11:01:54 +0000
ROA not before: Thu 23 Jan 2025 11:01:50 +0000
ROA not after: Thu 13 Mar 2025 11:01:50 +0000
asID: 63139
IP address blocks: 154.203.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82285 (0x1416d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:01:50 2025 GMT
Not After : Mar 13 11:01:50 2025 GMT
Subject: CN=679221a1-f49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:12:72:b5:c5:37:12:5c:7b:01:00:69:9c:
d1:4a:fa:6a:fe:92:cc:0b:14:3b:d1:4f:45:86:f8:
fd:0d:14:a5:ac:f9:33:a4:8d:76:c3:28:48:91:23:
95:09:e3:d5:36:d4:34:7b:11:7a:aa:35:79:20:62:
d4:cc:c2:b8:29:5c:58:9b:a6:83:b4:9a:a7:59:7a:
74:ba:dc:b3:e1:01:38:af:08:e2:8c:38:f1:c7:82:
a4:2c:d9:f8:75:58:11:2e:58:94:e1:0c:77:9c:69:
cf:75:4c:76:5a:88:07:04:bb:95:ad:43:7e:97:ff:
8c:7f:01:03:af:d6:a8:5c:06:b2:e0:2b:6c:a3:cd:
21:d3:e1:14:17:25:5e:0d:a6:04:3f:9d:2f:62:8e:
c4:2e:4d:8a:2b:46:52:79:9b:8c:e6:d5:0a:49:6f:
13:74:d3:e6:10:ad:3a:65:2f:e6:4d:8a:67:0e:91:
0f:e5:04:ac:96:9b:d8:b2:cc:43:31:20:c0:21:7c:
58:e2:13:cd:40:35:fa:59:6d:6e:9b:7d:ff:ef:f1:
3d:95:8c:84:35:5c:52:ce:8a:20:ae:52:c5:31:c7:
11:61:b4:23:95:8a:20:55:29:e4:b0:cc:fb:e7:4f:
f4:c2:9d:3d:66:15:8e:3c:7c:89:f3:42:d6:d2:75:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:61:E7:65:7E:60:31:62:80:67:B3:11:24:94:02:07:06:8E:D2:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74302DB2D97911EF9C7095AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:89:dc:d7:9d:11:d4:61:1e:97:71:0c:de:cc:06:9e:b9:8c:
ea:b3:b8:d5:4a:a4:24:ad:e8:87:45:71:ae:88:d2:96:8c:82:
51:d6:86:7c:1e:95:41:f9:a5:b2:61:58:45:f3:8a:99:0e:93:
b9:11:c7:15:d4:ae:2d:eb:cd:0c:68:ea:17:59:fd:ab:de:2c:
17:99:68:c9:ff:d0:10:24:cd:13:79:e0:f2:1f:d0:97:7a:8f:
48:f7:d3:23:ce:55:c0:7c:a4:69:fe:3d:13:3a:be:4e:95:2f:
1f:b2:41:99:87:c3:87:3b:fe:37:f9:b6:53:6a:f8:89:69:2f:
12:ad:cb:93:96:7b:ef:0c:89:51:56:4a:d2:ae:30:bc:5d:81:
18:a6:36:b3:63:1a:eb:d0:0b:6a:98:17:0e:32:e9:4d:2c:4f:
35:3e:90:ef:32:08:3f:01:2f:b5:14:f6:a2:df:ca:23:df:35:
14:7a:f5:26:d4:9d:21:54:d2:e1:12:ee:35:0d:04:7c:0b:99:
e1:ca:1e:ca:e2:ab:35:17:eb:4c:f5:93:f0:e3:e3:c4:03:92:
bf:27:f2:c6:d5:58:d4:04:b1:32:68:25:69:c2:89:88:39:e7:
42:5a:eb:5c:84:fe:27:52:d7:ed:7a:7c:14:32:07:cc:8e:53:
d0:e9:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:22:02 2025 by rpki-client