Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3A7A5AD97811EFA80DB7A3762E951A.roa
File: 7B3A7A5AD97811EFA80DB7A3762E951A.roa (raw, json)
Hash identifier: YQvri0KWjV+0pWP7qlVFNNEGhhe3Uf5gKq3e5IjM0TQ=
Subject key identifier: A6:2F:FB:00:75:B8:B8:CE:39:5D:0C:E6:D1:A9:5F:F8:DD:73:4D:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01415C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3A7A5AD97811EFA80DB7A3762E951A.roa
Signing time: Thu 23 Jan 2025 10:54:56 +0000
ROA not before: Thu 23 Jan 2025 10:54:52 +0000
ROA not after: Thu 13 Mar 2025 10:54:52 +0000
asID: 63139
IP address blocks: 154.203.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82268 (0x1415c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:54:52 2025 GMT
Not After : Mar 13 10:54:52 2025 GMT
Subject: CN=67922000-ad2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:e3:ae:52:73:8a:2e:34:52:ec:fc:8b:cf:
bd:1f:fe:50:40:6b:4f:c7:e1:11:24:89:45:48:74:
28:97:2a:d2:df:b0:cb:b9:88:81:44:83:d6:9b:6d:
5c:3a:1d:81:f0:54:67:51:6f:f5:17:3d:0f:1e:ba:
6d:2c:47:9a:fb:61:81:dd:b2:a4:7e:88:49:90:7e:
cc:aa:90:58:57:37:8b:df:f1:2d:ea:dd:46:4e:2a:
50:c6:9e:2f:8e:e8:c9:db:6a:dd:c9:2a:94:50:9a:
98:62:bf:f3:e4:8a:73:70:9d:9e:f7:96:8c:da:ee:
3a:b8:54:e1:e3:76:5e:a2:2f:2f:c8:17:29:04:91:
23:52:49:47:6e:a7:92:4e:d2:db:f4:1d:cd:6b:86:
41:91:e0:63:98:e7:3e:57:17:24:43:ff:7a:e0:7c:
b5:e4:15:08:0b:56:9d:d9:5c:9a:3b:5a:ab:72:b9:
83:99:99:28:a5:cb:15:2b:3d:9f:9f:9f:82:83:9a:
76:f9:f5:3c:cb:9d:5a:45:a0:54:85:ee:4f:21:2d:
e5:91:78:1c:e7:08:56:11:be:1a:71:c6:0a:9b:3b:
be:4a:cf:6a:86:73:79:1d:a3:31:3c:a6:37:27:20:
91:a3:8e:ae:e0:10:d4:11:80:bf:d4:24:3e:98:b3:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:FB:00:75:B8:B8:CE:39:5D:0C:E6:D1:A9:5F:F8:DD:73:4D:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B3A7A5AD97811EFA80DB7A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.172.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:4e:4d:77:ce:cc:8e:b4:8c:28:6b:47:2b:51:fd:97:ab:f8:
30:0a:ae:83:b8:8b:9e:d9:b5:8c:30:ee:8e:3b:1e:54:84:52:
79:9b:9e:90:0a:cb:bd:fc:47:01:4b:c3:80:d3:42:aa:e4:9c:
db:e8:ef:32:ee:d2:89:6f:34:46:04:85:fc:cf:93:a6:48:58:
4c:77:fd:6b:f1:61:cb:91:ea:9d:50:19:61:2f:06:0a:f2:5f:
6a:6c:86:5d:4a:a3:2a:c0:f0:55:92:0b:60:e1:d2:a6:8b:76:
d2:69:1c:57:42:9e:db:d7:69:a2:fa:c5:c4:fd:60:f0:d4:54:
42:86:ba:3e:a6:53:f1:ae:46:27:35:44:8d:ca:2e:c1:9b:28:
42:30:4f:88:e3:37:6c:ed:bf:11:74:56:c8:1f:f4:39:52:ac:
f8:86:6b:7d:b8:64:ed:36:cc:c3:a7:8f:4f:10:c5:01:55:18:
f5:17:14:fe:4f:1c:92:65:a8:00:34:f7:33:8b:9b:a3:50:42:
3e:d0:52:c1:ef:fe:c4:c5:bb:09:20:ca:69:b5:61:ea:39:44:
fd:35:c1:9f:fc:4b:33:7a:cb:ac:c1:46:29:2c:0f:43:bf:52:
98:39:6b:6e:e4:8f:fa:17:c1:39:65:5d:f7:8a:09:1b:51:1b:
a8:96:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:34 2025 by rpki-client