Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF369A4DA1811EFA210675D762E951A.roa
File: 8DF369A4DA1811EFA210675D762E951A.roa (raw, json)
Hash identifier: V9+WCapZecjXHTRWLF5MBmpsKIoFWozwLhMAdCrX7KY=
Subject key identifier: 63:C9:F0:BC:F0:CA:95:55:97:03:37:EB:02:CC:FA:F3:75:C9:5D:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF369A4DA1811EFA210675D762E951A.roa
Signing time: Fri 24 Jan 2025 06:00:47 +0000
ROA not before: Fri 24 Jan 2025 06:00:43 +0000
ROA not after: Sat 01 Mar 2025 06:00:43 +0000
asID: 44559
IP address blocks: 154.203.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82924 (0x143ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 06:00:43 2025 GMT
Not After : Mar 1 06:00:43 2025 GMT
Subject: CN=67932c8f-8e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2e:f6:e9:20:ba:ee:ed:a1:b8:a8:d3:0b:47:
63:ba:54:83:37:0e:4f:40:e2:f0:7b:e2:39:0e:43:
c5:f3:f0:d3:6e:1d:fa:f9:a5:aa:60:15:b5:4a:6c:
b2:86:5b:d1:d1:24:fa:41:a6:9a:ed:1e:69:76:61:
0a:10:8f:63:c4:5d:cd:52:f9:78:83:97:72:67:9f:
8c:a5:a4:db:8c:44:62:af:f8:c9:56:e2:12:40:42:
80:18:eb:41:9b:32:5c:52:9c:e4:c2:b7:dd:ae:12:
08:b9:61:fa:8d:89:42:fc:f9:4f:8f:d2:bd:11:8e:
f0:de:bb:41:e6:71:30:c6:db:8a:3c:48:bf:30:35:
7d:4b:d1:61:5f:af:85:25:c2:1b:2d:da:8a:40:35:
32:a2:bf:9f:60:f6:9a:37:8d:60:19:78:64:36:b3:
27:f1:de:6c:fb:4c:ac:9f:20:3b:1d:0d:21:a3:dd:
7e:15:d1:76:90:1b:fc:5d:01:63:1c:31:dc:da:92:
ec:a1:99:ca:0a:b4:ee:f6:ac:98:50:c0:7d:06:36:
97:a1:68:c2:ff:82:8d:61:d0:ca:ba:e2:60:02:9b:
a9:5b:08:4b:b3:70:7c:55:2f:08:70:86:18:13:23:
8c:69:b7:5b:3a:d7:fc:fe:a5:ce:3d:70:dd:22:6f:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:F0:BC:F0:CA:95:55:97:03:37:EB:02:CC:FA:F3:75:C9:5D:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF369A4DA1811EFA210675D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f8:97:26:5a:6f:78:01:20:e2:d4:79:f4:02:33:ea:4c:60:
09:f6:c6:61:6d:6a:18:6c:15:da:36:4a:1f:1e:08:08:ad:9a:
63:64:7b:36:a9:34:f0:a7:f6:17:e2:09:d8:d9:16:4f:54:63:
66:49:d0:3e:5c:03:8d:bc:3f:71:36:a4:32:b5:0c:07:13:22:
ba:cc:97:99:50:15:ba:1c:bb:3c:23:31:a2:c0:36:cb:e9:00:
82:68:0b:df:a0:84:9d:f5:13:4f:37:03:8a:3c:58:b2:e3:e1:
a5:22:ad:de:9e:8e:65:7b:91:a0:0e:9e:80:df:3a:90:a5:25:
7c:c6:81:93:a9:a1:1d:81:2e:6f:67:c5:93:ee:33:a4:f0:42:
f2:d9:59:20:a8:23:92:0d:8f:57:73:69:67:cf:c1:81:3e:c1:
bb:bd:94:4a:a8:9f:bc:18:fb:e5:04:f7:9e:51:88:b0:6b:ce:
4d:3d:22:42:88:be:3d:a7:c0:99:af:32:96:f9:2d:fe:f6:d5:
b2:05:2a:a7:53:94:ca:71:75:54:3c:82:3e:6f:01:3d:54:fc:
78:6f:89:b3:87:9c:87:f8:aa:fd:bc:db:e4:61:6e:e5:f3:bf:
7e:bd:67:9d:63:30:fa:23:4a:eb:47:a2:e1:ba:ff:46:d5:d7:
67:6c:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:08:02 2025 by rpki-client