Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2B642FCD98811EFB7D68C90762E951A.roa
File: A2B642FCD98811EFB7D68C90762E951A.roa (raw, json)
Hash identifier: /tXS9JKqELfIVTRUc2ScTuKFv1ErrC/ST5/AdP4Xzv0=
Subject key identifier: 79:16:CD:CE:AB:CF:A3:3D:F4:3E:16:E8:B8:D9:1B:56:9E:52:D2:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01423E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2B642FCD98811EFB7D68C90762E951A.roa
Signing time: Thu 23 Jan 2025 12:50:34 +0000
ROA not before: Thu 23 Jan 2025 12:50:30 +0000
ROA not after: Thu 13 Mar 2025 12:50:30 +0000
asID: 138915
IP address blocks: 154.203.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82494 (0x1423e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:50:30 2025 GMT
Not After : Mar 13 12:50:30 2025 GMT
Subject: CN=67923b1a-bd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:ad:cd:40:71:55:77:99:0f:cb:fa:70:92:
92:b8:45:0a:27:88:19:e8:fd:29:fd:c4:bc:66:94:
38:16:9b:4f:93:24:ba:93:b7:18:24:88:ff:a1:4d:
7b:8c:f9:88:d3:ff:80:fc:e5:0d:8e:b1:82:01:5c:
04:9c:7f:56:f6:36:f0:19:f2:9c:b6:97:73:18:d2:
e8:c1:08:17:02:99:55:95:ad:81:f8:c1:5f:07:2a:
a7:d2:2b:3b:f7:c1:fc:4f:94:fb:46:25:a3:ed:b1:
6c:0a:72:0b:0d:59:c2:68:ce:33:7d:fb:ca:44:32:
3f:4c:0c:72:b5:35:f5:9d:1c:9b:71:bc:b7:ee:bd:
76:2e:f4:f5:57:9b:05:47:ac:a5:b6:df:a1:97:1b:
19:09:d8:bb:41:16:a0:bc:35:34:88:51:02:8c:da:
35:28:2d:31:8a:b8:8a:54:1b:61:35:de:e7:ca:18:
a0:e6:83:09:b7:6b:cb:d1:97:9b:09:75:d2:dd:80:
e1:d6:7b:3b:75:d3:5b:be:f8:14:94:ae:fb:3c:d0:
86:7c:be:95:5a:f4:af:86:e0:3f:d9:63:c2:f1:13:
2d:d4:9f:c9:1b:1d:90:15:55:9c:33:e7:d0:2f:45:
61:99:48:5a:ce:73:f7:13:10:7d:07:af:5e:5a:3f:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:16:CD:CE:AB:CF:A3:3D:F4:3E:16:E8:B8:D9:1B:56:9E:52:D2:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2B642FCD98811EFB7D68C90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.138.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:4c:af:11:f8:a7:0b:85:4f:b3:42:3f:c2:4e:67:f0:69:e0:
44:5d:f0:a1:09:9b:0c:d5:10:f9:da:cc:3a:12:73:4e:83:50:
45:f4:98:c6:60:a7:08:f1:19:d1:5a:33:43:e8:c8:20:e1:d8:
64:c5:23:24:2b:16:f4:80:06:00:9b:d8:dc:9a:cc:8f:25:de:
e3:9d:44:9d:f4:cc:25:11:a7:f9:bd:d2:10:55:b7:96:41:1f:
7f:43:40:6a:d6:e1:56:cd:20:4a:3e:45:2f:ce:64:03:cb:1d:
d5:f4:49:19:67:c2:ba:b3:3b:18:8f:2e:91:80:e3:cf:6d:bb:
60:b2:5f:3f:0d:00:92:c0:38:e9:92:11:f6:10:42:84:65:ad:
b7:84:a3:df:2a:ad:3b:e5:71:45:40:56:ef:27:a1:c6:0d:50:
04:fe:5f:5e:a8:b5:a2:df:d1:49:46:fb:42:66:de:5f:81:db:
2b:8c:d8:87:24:18:1c:a7:a9:af:dd:3a:f6:41:e6:93:7b:8f:
2d:5e:a2:85:bf:4c:e7:cf:b3:f2:a1:80:c2:d6:32:f7:f0:31:
2c:36:fb:af:4a:8b:7c:c7:34:1a:09:9b:07:32:8d:f4:f3:80:
71:cb:12:d2:62:9b:bb:df:71:75:d7:63:1b:27:04:85:27:97:
08:e2:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:31:27 2025 by rpki-client