Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE87B73CDA0511EFA230F860762E951A.roa
File: AE87B73CDA0511EFA230F860762E951A.roa (raw, json)
Hash identifier: vn6FJy8A4kiNudFPUmJI4aOm9pAkxJ9F+hlpGCnFxoo=
Subject key identifier: 10:42:33:BF:7C:40:F4:F6:7F:D2:3A:E7:77:A6:97:0F:09:C2:FC:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE87B73CDA0511EFA230F860762E951A.roa
Signing time: Fri 24 Jan 2025 03:45:41 +0000
ROA not before: Fri 24 Jan 2025 03:45:37 +0000
ROA not after: Sat 01 Mar 2025 03:45:37 +0000
asID: 44559
IP address blocks: 154.203.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82848 (0x143a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:45:37 2025 GMT
Not After : Mar 1 03:45:37 2025 GMT
Subject: CN=67930ce5-d610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:b6:dc:25:a8:64:0a:1b:9f:ee:11:e6:76:
b5:ca:7e:41:6c:ef:23:c0:05:72:a4:bd:25:2d:4a:
89:26:fc:07:71:1e:eb:21:6e:d1:2d:df:34:6f:1e:
7e:11:44:c6:71:16:d6:48:86:1f:af:99:b0:7f:1b:
a4:8a:8c:ef:a2:06:83:ca:69:3e:68:b7:22:e1:a2:
0b:c4:49:03:28:4e:46:d1:a1:42:e6:07:a2:5b:58:
16:88:b0:1b:92:34:34:a8:19:7f:4e:cb:6f:c9:ea:
87:4e:e3:a1:eb:5a:f8:01:58:e9:d9:d6:04:43:54:
e6:24:a4:e5:50:8d:db:25:04:fa:72:65:02:72:77:
d3:58:41:b4:75:02:66:df:4b:b2:c6:a5:7a:ef:1d:
c7:75:73:4d:4b:1c:f7:64:2f:69:76:81:7a:78:a0:
75:0d:95:ea:a9:f3:e9:ee:14:fd:1a:7f:19:a2:2e:
37:2c:c3:f1:cc:f8:4d:32:11:c9:b3:79:11:81:36:
72:f6:1a:a9:7b:db:f6:ce:46:6e:6b:2f:7a:8d:bd:
a5:60:a3:5d:f8:0b:27:cc:1b:b5:38:3e:20:0e:13:
03:ae:08:80:00:38:4f:17:a6:a7:4d:b2:b8:57:83:
8b:98:91:02:c8:f4:6e:9a:08:c2:ac:e0:2f:1b:d7:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:33:BF:7C:40:F4:F6:7F:D2:3A:E7:77:A6:97:0F:09:C2:FC:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE87B73CDA0511EFA230F860762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.207.0/24
Signature Algorithm: sha256WithRSAEncryption
52:08:a1:4e:28:9a:2a:74:f9:57:87:bd:77:b6:9e:94:12:44:
78:b5:dc:de:0d:b1:89:92:2a:24:f7:b1:ea:06:a2:37:0b:24:
ef:d0:60:a3:c2:ca:24:46:33:a8:72:c7:6b:61:bd:6e:46:65:
8f:37:ed:03:8c:fd:ec:d7:bb:74:4d:28:12:1c:2d:75:bc:a4:
5a:79:31:3d:d9:8c:49:a7:10:70:ab:7c:24:c3:6d:bb:e6:f3:
b0:a8:14:82:26:2b:df:95:84:34:30:58:17:33:2b:62:c4:dd:
56:62:0c:92:8b:87:39:17:00:d2:05:5c:61:df:35:9c:27:4e:
f4:29:48:4e:31:a9:e9:c9:b8:ea:3c:e9:e4:d4:77:0a:ff:0c:
68:e1:6a:eb:a0:e8:6e:91:66:7d:23:5d:44:85:c0:3f:32:71:
ea:79:5d:f1:cd:37:12:fa:2c:b1:3c:4d:df:43:05:f3:9f:3b:
e6:10:4c:35:42:e8:fb:46:0b:a4:29:0b:a0:c8:14:3c:be:91:
41:b1:4a:76:bb:fe:ad:38:ae:f6:46:50:2c:63:23:0a:19:2d:
bc:ed:b8:ed:f3:0e:ca:55:72:2c:aa:46:2b:15:a1:da:75:47:
1d:22:8e:66:0d:ee:b3:e7:43:e4:b8:aa:1a:6a:0b:74:84:e0:
f5:8e:fb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:08 2025 by rpki-client