Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68005A4DA3011EF92612680762E951A.roa
File: B68005A4DA3011EF92612680762E951A.roa (raw, json)
Hash identifier: DdMSyhanYS2OolNQdwd52ZnjErc7F7URtzdJxfJrGm4=
Subject key identifier: 9D:01:71:E5:8E:D1:81:8D:EE:49:2F:8C:C5:E6:2A:C9:6E:EF:07:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01449D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68005A4DA3011EF92612680762E951A.roa
Signing time: Fri 24 Jan 2025 08:53:43 +0000
ROA not before: Fri 24 Jan 2025 08:53:39 +0000
ROA not after: Thu 27 Feb 2025 08:53:39 +0000
asID: 135983
IP address blocks: 154.200.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83101 (0x1449d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:53:39 2025 GMT
Not After : Feb 27 08:53:39 2025 GMT
Subject: CN=67935517-d4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:7a:b2:50:79:1f:3d:bc:5f:4b:47:0b:8d:
e1:a8:a6:e8:d4:07:13:d2:1e:8e:f0:37:12:aa:dc:
27:e1:9f:14:e9:be:e3:17:5c:28:ca:f3:45:55:ea:
ff:b0:a8:04:c7:ee:12:6c:53:74:f8:e4:8a:ab:67:
5c:1c:96:17:11:f4:48:29:2a:7a:8d:cd:27:cb:d1:
c6:21:09:b9:6e:16:58:de:28:60:b8:a4:ed:d3:c9:
30:e4:fa:6a:fd:4d:89:94:a0:d8:61:79:5c:aa:01:
8d:09:6b:47:c7:58:d1:4f:0b:6a:c5:f6:2f:5d:88:
86:33:0f:5f:75:61:b8:ee:7c:65:26:68:94:ba:6c:
af:c6:b5:dc:a4:a7:16:2a:0b:f1:13:e4:50:a8:6f:
61:a8:a7:b5:23:84:16:3b:3c:61:3a:79:41:0f:1e:
34:0d:aa:86:2d:5a:19:ea:67:fd:1c:19:76:dd:56:
9a:77:fe:1f:98:3a:4f:e0:8d:e2:93:5d:ef:c1:ed:
2e:07:cc:c5:ea:0e:8f:36:7e:e3:c1:30:c5:52:c6:
74:80:63:36:0a:60:3f:bc:4f:5e:67:6c:46:70:09:
51:e1:01:da:2a:d1:01:98:7d:37:17:8f:dc:a9:06:
1a:51:aa:63:b9:8b:c8:3a:84:08:e7:75:be:68:69:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:01:71:E5:8E:D1:81:8D:EE:49:2F:8C:C5:E6:2A:C9:6E:EF:07:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B68005A4DA3011EF92612680762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.32.0/24
Signature Algorithm: sha256WithRSAEncryption
38:91:10:ed:45:34:1a:a2:65:e2:26:f4:6f:10:80:b4:05:70:
6e:ec:a1:48:5e:ad:60:ba:27:7b:fb:45:8c:5c:04:d8:1f:c0:
aa:e6:a8:b8:38:97:82:9f:0d:5c:6e:0c:93:5a:af:83:10:96:
a5:95:ba:65:80:9f:98:1c:08:65:0b:9d:39:50:3e:99:b3:77:
90:56:a3:24:65:0d:34:b3:5b:88:55:a2:24:b1:4f:c6:f0:fa:
4e:17:94:d5:ae:be:21:ad:e4:02:51:69:a8:92:14:11:71:68:
a4:04:fa:9f:f0:6a:49:34:b8:22:07:62:94:2c:48:be:43:55:
ea:34:55:08:ea:58:9f:e4:f2:f2:00:86:90:13:c0:26:26:5a:
2d:a1:18:2d:a0:1f:0c:fd:71:8d:ef:fc:e8:37:84:aa:06:7a:
a7:2a:52:2f:60:01:89:65:b0:fe:83:70:03:62:09:13:8f:7e:
a0:93:fe:e9:f8:41:fd:c7:41:02:53:c9:74:58:60:15:57:d7:
1f:a7:ad:99:4a:52:ba:43:75:67:5f:9b:8e:65:a5:7b:76:8d:
09:01:5b:11:32:3c:3e:e3:cc:cb:12:a3:e3:a2:40:57:7f:93:
86:f2:6a:b5:59:f9:10:23:e1:18:3d:ea:5d:4a:d7:80:fa:1b:
13:26:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:20 2025 by rpki-client