Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1F3120D15511EFBD9DABAC762E951A.roa
File: 7C1F3120D15511EFBD9DABAC762E951A.roa (raw, json)
Hash identifier: R/nhGeN8hDIKzsjNG/GAtFSLB/cdmLrF2iG+rIyCNSA=
Subject key identifier: BA:BE:40:1B:6F:85:35:B3:97:EC:6D:95:5A:9D:C3:52:3C:B0:70:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1F3120D15511EFBD9DABAC762E951A.roa
Signing time: Mon 13 Jan 2025 02:24:16 +0000
ROA not before: Mon 13 Jan 2025 02:24:12 +0000
ROA not after: Thu 13 Mar 2025 02:24:12 +0000
asID: 17561
IP address blocks: 154.203.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80584 (0x13ac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 02:24:12 2025 GMT
Not After : Mar 13 02:24:12 2025 GMT
Subject: CN=67847950-3631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:ed:8a:9d:62:0d:43:9a:5b:b6:f2:f9:b0:
19:16:23:b9:69:43:a3:70:4f:ad:9d:ab:90:79:7d:
1e:a3:20:1d:6d:14:12:c0:49:9c:6a:b2:4c:91:5d:
6b:a3:bc:1d:d6:59:05:67:6f:41:e2:21:83:e7:44:
40:43:c2:4a:26:ca:5f:6f:01:c0:a7:13:a4:16:e0:
5e:2e:59:e0:a6:f0:14:e1:19:84:1c:dd:f9:7f:b2:
c1:af:af:9e:23:e1:64:d9:ec:6b:c3:0d:b6:5f:a9:
7c:4d:79:0c:5c:f0:02:e7:d6:3b:65:f3:76:ac:ed:
c0:a9:4c:f9:94:ab:36:4b:5b:29:2b:4b:b8:a8:fc:
75:f9:4f:db:2b:be:96:e6:94:00:b3:07:53:fc:a9:
83:a0:cd:36:a5:96:a9:80:e3:2d:4a:ed:90:82:b8:
9b:5d:06:67:aa:4b:70:ed:3a:87:f2:ca:ac:74:a2:
1d:25:e9:f5:1f:ee:56:a8:fb:3b:e0:17:f8:e8:a6:
f8:26:78:6d:14:82:14:f9:e8:64:14:30:13:59:39:
38:8a:4a:28:cc:82:49:40:e3:b5:4d:b0:02:5c:c7:
41:70:58:b6:4e:97:e4:7d:21:47:32:77:3d:0a:43:
00:e2:60:63:21:eb:2e:92:b6:db:81:6c:c9:73:f9:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:40:1B:6F:85:35:B3:97:EC:6D:95:5A:9D:C3:52:3C:B0:70:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C1F3120D15511EFBD9DABAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.197.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e2:2b:e2:4c:9b:ff:b4:2e:3a:47:ba:d4:21:a3:32:08:4a:
fa:9f:65:e1:28:d3:2d:47:c5:6e:bb:9a:6a:2f:dc:d4:c0:da:
ac:5c:d4:10:b9:d5:18:f3:b0:b4:1c:a0:21:47:ba:59:30:17:
d3:9b:4a:10:f4:bc:d4:0c:ab:06:18:b2:ee:e4:f0:96:b2:b9:
ef:e2:96:a6:1a:87:d9:77:67:d1:22:fb:5d:fd:7f:8b:98:fa:
fe:1a:4c:2b:1d:5d:24:91:63:38:f7:da:08:ae:a8:02:20:ad:
10:5f:d9:31:db:2a:fe:bd:ef:38:7d:c3:ce:a3:4d:0d:22:fc:
fc:e2:0c:85:bf:91:60:06:b8:94:e7:bb:f6:b9:80:0a:75:ac:
bc:13:86:49:84:8e:d9:9b:34:69:4b:df:35:1c:6a:a5:6b:cf:
5f:e3:71:a1:5f:d5:e9:ad:89:cc:86:a4:02:80:be:f8:c0:79:
a4:93:c4:06:a6:ab:df:0f:3a:6e:00:81:50:8d:53:36:61:01:
6f:6d:fd:ba:e9:9f:a2:5a:b1:90:05:c6:d0:76:6b:c5:76:83:
ab:40:80:e8:10:fc:32:ed:6e:54:cd:0f:54:5b:27:e4:c2:fa:
07:68:f4:8a:2d:fe:a5:29:a0:91:62:ea:f4:fa:cf:aa:37:b8:
67:1b:65:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:10 2025 by rpki-client