Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB32D3F2DA2511EF97D03DB4762E951A.roa
File: BB32D3F2DA2511EF97D03DB4762E951A.roa (raw, json)
Hash identifier: FPhqdlY3CI3M8+c/FmRHJnGfS1DSbiPMTBfML5yjabE=
Subject key identifier: 17:0A:48:B6:01:F3:4A:D2:16:66:DB:74:4D:3F:D2:88:25:0B:43:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01441E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB32D3F2DA2511EF97D03DB4762E951A.roa
Signing time: Fri 24 Jan 2025 07:35:06 +0000
ROA not before: Fri 24 Jan 2025 07:35:02 +0000
ROA not after: Thu 13 Mar 2025 07:35:02 +0000
asID: 63139
IP address blocks: 154.203.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82974 (0x1441e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:35:02 2025 GMT
Not After : Mar 13 07:35:02 2025 GMT
Subject: CN=679342aa-7ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:f7:3f:6e:88:dc:95:00:f5:1f:9c:4a:e8:
68:35:da:0e:e6:eb:0e:7f:e7:87:8b:58:d2:c0:68:
1d:a1:e2:f3:0b:3f:59:f7:e4:38:7e:ea:86:2c:e1:
65:ec:65:00:ed:c0:2a:45:29:f4:08:e1:6b:60:37:
26:3e:03:5a:6a:3e:f0:c3:92:4e:26:28:f2:78:8d:
24:07:6f:39:09:8a:85:22:16:1f:d5:de:44:1f:8c:
2a:a3:14:51:43:27:4f:01:08:ea:be:9f:07:73:5b:
07:45:2b:d7:ab:af:ee:e8:a1:c5:22:a7:34:dd:75:
64:ce:75:a7:d1:e6:3e:d1:54:bd:2d:21:9a:32:43:
2c:16:79:87:45:82:5b:ee:2c:fa:29:0d:08:9f:8c:
85:bb:0d:13:fa:92:57:86:1c:8c:b5:55:3f:61:d2:
fd:a4:86:85:cd:f4:bd:18:44:d9:0b:a4:84:fd:83:
e5:ee:10:ed:5b:f1:65:c4:e4:6f:6c:9b:8e:c4:11:
e4:50:5b:9b:25:e6:f1:bf:77:27:f0:ff:2a:a4:4f:
65:0e:3a:77:2b:65:79:cc:4b:cf:83:4b:87:3a:fe:
09:3a:a3:6f:b3:1a:34:b5:42:ad:6e:2f:af:1f:58:
9f:a8:3e:8a:24:18:77:27:73:e2:c0:8d:31:c9:33:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0A:48:B6:01:F3:4A:D2:16:66:DB:74:4D:3F:D2:88:25:0B:43:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB32D3F2DA2511EF97D03DB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1d:36:44:dd:6a:4f:a0:ef:e7:ad:74:8f:ce:95:1d:8d:a1:
a9:a7:1b:b7:87:05:b4:d1:c2:0b:3f:7d:f2:60:0e:0a:a1:5d:
2f:db:15:8e:6c:59:e2:9b:24:15:f0:3e:02:19:54:72:71:16:
d3:b6:75:bb:81:cc:f3:83:55:96:d0:34:ae:4f:8c:b7:72:d1:
38:cd:31:67:3d:ae:1c:ef:2c:73:b2:8a:18:6e:55:79:d6:83:
4f:1f:4f:a8:f4:2c:1b:a6:cc:59:e3:11:2f:e9:8d:e0:7c:8c:
75:c3:f0:08:e4:1b:7b:14:72:48:4f:f9:7a:e1:b0:e5:92:29:
c4:d7:f8:e9:c1:8f:aa:9e:1d:94:49:b3:2b:72:bd:e8:86:4d:
b5:fb:b8:6c:82:4c:6c:08:0f:33:df:ae:31:b6:ae:f8:1e:0b:
6d:c6:ad:1a:7a:2c:ae:e3:e1:89:7c:01:6d:b2:77:bd:65:19:
e8:6a:9f:f3:b7:98:6c:a1:5b:c0:a7:73:31:2a:2a:fa:fc:3f:
0c:8a:8c:d0:61:74:44:94:51:f7:f9:85:70:8a:3b:87:b3:0d:
37:58:ed:7b:01:b4:4d:db:60:c2:67:d2:aa:c9:ae:2b:6b:72:
76:13:b9:2e:b4:2c:f7:18:ae:35:ab:44:a8:e1:83:03:0a:a6:
21:24:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:26:39 2025 by rpki-client