Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9329D800DA1711EF88566458762E951A.roa
File: 9329D800DA1711EF88566458762E951A.roa (raw, json)
Hash identifier: 8CKUnB9OozSRcTTL1Pn7dgDHfMKPbIIXF6DiQAvux/Q=
Subject key identifier: 2E:F1:4A:FB:79:77:D1:C2:B8:0A:E9:61:E4:9E:B7:7B:6D:C9:05:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9329D800DA1711EF88566458762E951A.roa
Signing time: Fri 24 Jan 2025 05:53:46 +0000
ROA not before: Fri 24 Jan 2025 05:53:42 +0000
ROA not after: Sat 01 Mar 2025 05:53:42 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82920 (0x143e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 05:53:42 2025 GMT
Not After : Mar 1 05:53:42 2025 GMT
Subject: CN=67932aea-a7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:a4:7c:f8:59:93:6a:3e:bc:30:a3:39:e4:
8f:66:e8:15:20:3d:d2:b8:63:48:03:a6:e0:d1:be:
20:fe:57:9d:e0:27:ce:b8:09:b5:9c:1f:2c:13:32:
d4:02:fb:8a:d6:11:46:c1:01:ec:ab:3b:f5:91:05:
6a:60:e9:29:3a:a8:a7:35:76:12:c8:19:2c:95:ef:
5f:9d:6e:b8:e5:e1:89:9d:d6:6a:38:2c:5c:06:09:
65:d2:98:64:7f:87:7c:9b:aa:ea:b6:d5:b2:8f:5b:
16:0b:0b:70:75:f5:c8:19:ac:c2:a0:ae:b7:a0:85:
ea:94:fa:4b:9d:ef:a5:dd:10:bb:5d:85:8d:3b:c9:
e0:81:2f:4f:04:ff:7c:12:23:34:26:2a:d7:e2:ca:
c2:57:1c:1f:5e:a3:d0:d5:c3:81:58:5d:05:52:82:
48:65:b0:af:f5:0e:97:e6:01:8a:69:fd:5b:64:9e:
ff:bd:91:a1:2f:9f:6e:f1:27:7c:2a:bb:2f:3f:79:
86:2d:d2:3e:f9:9b:8c:7c:06:9b:65:2b:b1:cd:3a:
7a:2a:cd:1f:b3:82:4d:ea:3e:fe:2f:cd:6b:91:de:
8e:5e:07:77:61:d6:cc:de:c1:8c:c5:4e:f8:ec:8d:
69:b3:05:d0:e9:f0:5f:fd:90:4c:dc:33:7a:30:50:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F1:4A:FB:79:77:D1:C2:B8:0A:E9:61:E4:9E:B7:7B:6D:C9:05:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9329D800DA1711EF88566458762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:df:4c:fd:89:21:fb:27:04:68:6f:41:ae:e8:4f:cd:c1:04:
9d:b0:41:4d:99:2c:37:e0:48:74:0b:a9:48:12:37:35:2b:c5:
7d:89:ee:1a:13:88:07:96:71:57:05:34:78:06:60:a5:9b:34:
33:f7:ec:4a:9d:9d:f8:14:ac:fe:4f:8c:4c:c4:18:85:19:51:
80:27:a6:8d:bc:65:88:92:bd:01:40:67:ff:2e:9c:b4:c4:ba:
ac:13:b3:9f:de:37:58:06:d7:5a:29:b2:37:be:c9:67:02:50:
b8:e7:0a:d0:3d:dc:68:fa:a3:49:54:ce:72:de:f4:7a:0f:6a:
e4:a0:94:9a:70:79:37:17:96:52:b2:82:f4:ff:4b:d7:14:89:
cd:22:63:67:87:ea:1d:c5:c5:36:2f:20:26:00:76:92:f0:78:
e2:7d:3b:73:83:0e:76:7b:8a:4a:a6:da:ea:91:20:f9:96:49:
63:75:8c:a8:ad:c2:bf:1a:b8:29:f7:9d:76:d6:3e:de:58:ed:
93:21:0a:0f:b0:34:db:31:76:e3:03:cd:bd:59:c0:27:39:f6:
c0:3b:00:bb:38:44:c7:12:b6:0b:28:47:be:58:20:42:3e:e8:
9c:dd:78:c8:e8:5e:a0:bc:9b:5f:23:d0:5d:81:22:bf:dc:94:
22:de:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:27:27 2025 by rpki-client