Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A815C848DBEB11EFB4D12AAF762E951A.roa
File: A815C848DBEB11EFB4D12AAF762E951A.roa (raw, json)
Hash identifier: TdpFUQD02cXWPtc8KljzT2GDQQgAghgCkISxQd2pAkQ=
Subject key identifier: DF:0B:66:AA:41:BC:D1:2E:54:11:23:25:90:D3:CC:3A:7F:4D:FC:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A815C848DBEB11EFB4D12AAF762E951A.roa
Signing time: Sun 26 Jan 2025 13:44:26 +0000
ROA not before: Sun 26 Jan 2025 13:44:22 +0000
ROA not after: Fri 07 Mar 2025 13:44:22 +0000
asID: 205125
IP address blocks: 154.203.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84646 (0x14aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:44:22 2025 GMT
Not After : Mar 7 13:44:22 2025 GMT
Subject: CN=67963c39-ad5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:5f:18:d3:d6:48:89:63:6d:83:e0:22:59:
88:58:00:0d:18:71:6d:71:b7:fb:35:9a:24:76:36:
9f:65:61:74:eb:e5:48:d6:d0:8e:0f:e3:9e:ed:92:
2a:a9:4a:21:46:b4:bd:39:b2:e4:1a:89:9e:73:3e:
8f:91:86:5c:77:72:1d:17:d1:46:84:9e:67:25:f1:
a6:b9:92:d0:6d:20:d6:e1:37:04:78:4d:e4:91:51:
b6:5a:e2:86:9f:a7:fc:44:06:18:3a:32:ce:c8:d4:
54:9e:3f:12:e6:bb:3f:67:35:ca:f6:45:22:9a:df:
ac:ab:e2:72:4d:9c:58:50:5f:31:d8:b1:2c:0e:cd:
d6:1a:d0:c9:7e:a7:c9:46:c7:c4:31:55:cb:8b:d3:
be:53:15:4b:5b:e9:c9:d1:29:44:23:59:2e:c4:26:
62:3b:42:1f:b4:75:07:94:aa:95:36:29:d1:d1:6f:
e1:be:65:db:4e:c2:1a:e7:f6:c3:ea:9b:b2:ce:39:
99:8e:f8:a9:9a:9a:65:de:80:5f:a8:2a:32:a9:73:
22:29:03:b9:53:5e:c6:2e:00:a1:0b:c6:0a:57:bc:
a6:be:8d:e2:4d:bb:3b:09:34:29:0b:ad:4a:21:d5:
60:90:85:7a:bf:f2:0f:65:a2:3e:8b:9d:11:80:15:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:66:AA:41:BC:D1:2E:54:11:23:25:90:D3:CC:3A:7F:4D:FC:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A815C848DBEB11EFB4D12AAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.192.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c6:0e:f2:98:ed:66:1b:6f:b8:a1:31:22:d4:5c:de:fc:81:
e3:5a:cd:04:7e:70:67:b6:bd:be:df:ec:84:7b:ef:d9:ba:2b:
8c:74:e7:17:58:2e:6e:1f:a3:a0:16:fa:23:ca:47:07:3b:4e:
27:ce:8c:b9:14:e2:74:74:20:e1:4b:3d:71:c1:72:77:45:09:
c2:d0:25:69:41:76:d5:61:55:21:08:2a:79:26:57:a7:25:b3:
40:bb:66:4f:27:36:25:77:9a:ed:9f:8f:dd:58:8b:41:2e:f5:
8a:7b:01:24:5c:de:48:60:f7:8a:95:6f:1b:2b:37:39:50:4e:
66:de:72:66:16:e7:03:9b:05:a0:80:94:ae:dc:39:4a:24:95:
90:13:df:be:0c:a7:bd:94:98:74:29:67:9d:96:56:30:40:af:
94:69:cd:ee:12:a5:31:0e:94:5b:82:4c:cc:ef:45:78:11:92:
a4:03:3f:1d:03:14:25:06:f0:aa:f3:ca:45:5d:3a:92:c3:56:
7a:bb:e3:ee:31:29:ff:02:0e:c1:13:b9:b5:5e:0e:d8:e9:79:
dd:15:59:1c:50:30:e0:61:a5:5d:19:9a:b2:89:5d:90:d7:eb:
b2:c0:5e:1c:4d:c5:e4:ef:e6:98:1e:f0:00:ad:3d:35:51:ea:
f5:f0:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:18 2025 by rpki-client