Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96EC6B38DA6211EF9966CD51762E951A.roa
File: 96EC6B38DA6211EF9966CD51762E951A.roa (raw, json)
Hash identifier: 4tm+4r5/J1GkFnBfOetMvhqZKnTchABCXoc27NNM4GE=
Subject key identifier: EA:4D:46:41:61:5B:70:A9:FB:48:4A:07:28:4A:4B:8B:54:BC:F0:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01486D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96EC6B38DA6211EF9966CD51762E951A.roa
Signing time: Fri 24 Jan 2025 14:50:45 +0000
ROA not before: Fri 24 Jan 2025 14:50:41 +0000
ROA not after: Sat 01 Mar 2025 14:50:41 +0000
asID: 44559
IP address blocks: 154.203.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84077 (0x1486d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:50:41 2025 GMT
Not After : Mar 1 14:50:41 2025 GMT
Subject: CN=6793a8c4-9d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:95:9e:75:bf:8e:ce:d2:bc:69:20:d0:da:
5b:e4:19:ac:7b:97:de:ff:66:3f:b2:9e:60:a6:17:
68:13:70:7c:6f:62:fc:24:ac:f0:3c:fe:f8:51:67:
3b:42:53:69:5e:3a:a4:81:fa:6e:6c:86:49:27:76:
e5:9d:b8:87:e5:98:f2:33:10:96:45:76:1b:a4:31:
2d:00:58:96:4f:49:57:83:a8:b2:67:c2:4d:29:1e:
c2:82:d8:9a:ed:7e:97:6b:b0:a7:c4:ce:01:31:11:
18:2d:1d:bb:c2:e9:5c:19:07:bc:66:f2:85:63:da:
59:39:30:f5:03:ed:2f:64:99:29:35:15:38:2f:b8:
76:e3:58:8f:9b:1a:87:1a:d6:6c:b6:22:74:de:0b:
16:e2:55:93:24:f0:b2:fc:d0:99:43:7c:21:b8:69:
66:cb:cb:5e:a8:2d:a8:14:b9:99:52:6a:d6:5f:04:
ff:d4:41:61:89:1f:8d:72:c0:08:89:13:39:09:5e:
fe:d0:75:2e:9b:9b:34:86:5b:5f:e3:9a:cf:f3:2b:
87:8f:74:81:16:80:00:76:7d:2c:1c:d0:55:64:f5:
04:ce:18:86:22:cb:b1:cd:11:b7:47:ae:69:4c:f3:
3c:b0:c4:04:d4:2f:15:bd:de:ba:94:56:92:86:af:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4D:46:41:61:5B:70:A9:FB:48:4A:07:28:4A:4B:8B:54:BC:F0:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96EC6B38DA6211EF9966CD51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:01:a1:6b:de:c2:ee:85:6e:89:c7:13:22:82:15:8d:1b:f6:
40:1e:02:eb:95:a9:a8:a8:ab:bc:58:96:04:93:9c:aa:6a:f9:
01:ff:6d:cf:b3:18:97:9f:a7:d3:c2:67:ac:f3:95:ce:68:14:
d8:45:46:da:b5:e9:a9:8c:fb:38:a6:96:60:c4:14:21:ff:0f:
f6:db:18:ab:25:88:2a:d0:03:f1:cd:8a:b9:9c:59:4e:6e:c9:
46:c1:dc:dc:f1:f2:55:41:34:f8:cb:5e:2b:65:da:3e:cd:d9:
91:29:0a:3d:f2:c0:63:a4:a8:50:8c:37:02:8c:f8:a4:2c:c1:
ab:01:ef:ae:a0:df:29:1c:2d:36:23:eb:9f:24:89:60:d0:f1:
3d:41:78:e8:9c:a2:e3:82:f6:e8:80:ef:a1:fa:34:f8:c8:76:
be:c0:3e:52:40:24:82:f4:20:00:3a:d3:36:89:11:59:0f:8f:
54:ef:42:b1:05:27:a7:a8:0b:6d:f4:c7:57:88:90:8a:32:9b:
b5:2d:b2:d2:5d:1d:f6:67:95:40:67:95:d7:e0:25:5b:ae:64:
85:73:22:15:a4:46:46:e5:27:f3:24:14:09:e1:2d:d5:b1:4c:
90:38:c2:6e:40:7f:84:88:a2:b1:34:6b:c3:ac:75:d7:c7:eb:
01:b5:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:03:16 2025 by rpki-client