Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B53AFE0CCF2111EFA4DD614D762E951A.roa
File: B53AFE0CCF2111EFA4DD614D762E951A.roa (raw, json)
Hash identifier: Bt7jUVoluui0sYXf26zOewH4/NC0vmBvkL2M/KOCVMA=
Subject key identifier: 75:72:EE:7B:33:E1:52:17:47:06:71:65:24:F2:25:C2:AC:88:B9:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01399B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B53AFE0CCF2111EFA4DD614D762E951A.roa
Signing time: Fri 10 Jan 2025 07:08:35 +0000
ROA not before: Fri 10 Jan 2025 07:08:32 +0000
ROA not after: Fri 14 Feb 2025 07:08:32 +0000
asID: 203020
IP address blocks: 154.203.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80283 (0x1399b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 07:08:32 2025 GMT
Not After : Feb 14 07:08:32 2025 GMT
Subject: CN=6780c773-8d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:13:47:2d:57:05:90:5a:49:1e:bc:6a:da:cd:
09:58:5f:da:94:e8:de:65:af:f5:73:96:41:64:9e:
d2:33:8c:be:39:64:e9:f7:4f:55:58:1b:33:dc:98:
c8:9a:69:54:52:23:07:d4:cd:43:7f:8f:e7:13:d2:
9d:a8:6b:84:d6:76:a9:51:8b:f8:10:2d:10:d3:6a:
a1:2f:da:bc:80:f9:94:2d:f8:83:be:1e:ac:d7:ea:
19:23:60:7e:28:23:c4:3d:e1:60:a1:a7:b4:59:e6:
2b:fb:5e:7a:44:23:1e:97:8e:70:9c:e9:02:29:56:
65:1f:25:f9:bd:2b:75:32:28:90:fb:7a:89:57:ff:
72:3b:3e:34:91:4c:26:a7:19:a6:b2:da:57:7f:57:
29:d3:94:a3:01:d7:c0:94:02:a9:91:02:5c:99:fc:
eb:a8:e1:10:97:fa:18:5d:71:d1:c0:ae:b7:62:5f:
d4:ef:a6:d3:5d:69:bf:49:6d:98:f0:7f:75:35:c3:
78:c1:ed:74:5a:3d:d6:41:7f:8f:db:20:6a:6e:14:
97:ca:25:9d:0a:5c:4e:d3:bd:26:07:c1:2b:ef:0e:
85:84:15:78:41:19:be:4c:ff:43:7f:15:f3:7d:d1:
51:40:8f:60:e9:e4:4a:1b:80:81:f7:aa:91:fe:3b:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:EE:7B:33:E1:52:17:47:06:71:65:24:F2:25:C2:AC:88:B9:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B53AFE0CCF2111EFA4DD614D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.44.0/22
Signature Algorithm: sha256WithRSAEncryption
00:77:a6:5a:b9:f6:21:42:d7:46:f7:42:66:d7:48:19:9a:a9:
60:1f:a8:8f:0b:a4:b5:c0:91:a9:90:da:8f:05:8c:96:1d:ba:
f6:9e:b9:c1:6d:0c:cd:d6:e2:38:0d:ad:f9:81:68:6a:23:93:
fb:b6:94:d9:37:ef:7d:1c:89:80:21:c5:be:3b:2f:e6:91:25:
c4:c5:1b:10:7e:96:ab:d3:8d:a7:22:c0:fe:d1:f4:f5:75:b5:
d3:7f:cb:9e:c1:17:cf:f4:c2:9d:f4:9d:a6:9a:01:f2:7e:f5:
98:b5:86:2d:5a:85:b6:d6:0b:6a:30:22:67:ff:1f:5b:24:a1:
34:1c:45:01:07:1d:51:c7:e4:1f:5f:db:8b:c0:27:ca:9b:2c:
44:8c:de:aa:c4:3d:6b:d1:94:ab:53:5b:bf:be:c8:ab:d4:92:
4f:5a:4d:50:1a:71:c6:66:dc:0b:49:31:3f:1e:0a:99:98:e1:
55:d6:8c:62:03:ba:12:2e:5c:b5:97:87:a4:d0:4d:f7:a9:17:
8d:63:c3:16:20:2d:4b:04:01:53:76:e9:6a:b0:6a:e3:a8:e7:
09:57:5d:7b:b2:52:5f:a1:51:5d:60:1e:d2:29:96:57:b4:16:
79:48:e0:ff:0e:c1:96:f7:5a:32:c4:2c:73:e8:b9:12:51:48:
63:50:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:09:33 2025 by rpki-client