Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD198C36DE2811EF9239A24F762E951A.roa
File: BD198C36DE2811EF9239A24F762E951A.roa (raw, json)
Hash identifier: f8nE/LGkLkyt+G8bM1dlF6IsO/CpdGf9GRRWKJXYqjk=
Subject key identifier: 87:28:B5:34:09:58:81:52:BD:DD:AB:EC:C2:CC:6C:24:E8:95:0E:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD198C36DE2811EF9239A24F762E951A.roa
Signing time: Wed 29 Jan 2025 10:06:42 +0000
ROA not before: Wed 29 Jan 2025 10:06:39 +0000
ROA not after: Wed 05 Mar 2025 10:06:39 +0000
asID: 203020
IP address blocks: 154.207.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85384 (0x14d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 10:06:39 2025 GMT
Not After : Mar 5 10:06:39 2025 GMT
Subject: CN=6799fdb2-162f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:d9:a3:74:c8:cf:1b:45:45:fc:16:84:66:
f8:26:ff:45:bc:99:8f:48:0e:79:ca:f7:fb:0e:a0:
38:19:74:a1:20:f3:44:de:b4:28:b4:44:51:d4:5f:
cd:cc:8c:c6:03:fc:30:b3:e2:fb:d0:2b:e9:ff:ce:
da:72:d7:bc:d7:3a:7f:26:bd:c4:60:72:cc:62:31:
1d:06:20:de:36:39:a0:a8:a6:36:73:4c:10:89:f9:
c3:09:74:f3:ee:8f:14:ab:09:da:cd:5e:0a:d9:b6:
bf:06:44:12:08:23:3e:1c:45:0c:89:54:17:28:2f:
dd:aa:06:e3:37:11:b0:04:a7:93:9b:f9:7d:f3:6f:
20:12:97:db:96:b6:6f:7d:fb:0a:3b:ee:ce:e3:ce:
42:c0:8a:da:11:6d:8f:04:51:ed:7e:90:5c:b0:b4:
48:b5:5e:3a:43:4a:3b:11:fa:86:f8:d5:16:e9:27:
e9:82:a3:3b:b9:72:4e:bc:b4:4e:8c:0c:52:f7:a5:
14:5e:df:5e:30:00:a7:ed:d3:0e:ab:80:03:ab:d8:
cd:cc:fc:9e:5f:54:54:95:bc:9d:99:5f:bc:90:61:
6e:f8:98:57:99:31:ef:ef:20:af:a5:3c:9e:21:89:
3b:b9:8e:21:66:df:0d:e0:4b:3d:30:d8:21:26:09:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:28:B5:34:09:58:81:52:BD:DD:AB:EC:C2:CC:6C:24:E8:95:0E:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD198C36DE2811EF9239A24F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.224.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:97:c9:35:00:b6:4c:a5:25:d2:18:47:e5:fa:fb:34:4e:11:
97:63:73:52:70:bb:9f:06:fc:fa:b4:23:86:a5:c9:21:37:2b:
cb:28:e7:4a:59:cd:2c:8f:e8:a2:41:74:57:0f:b9:23:61:b0:
6a:d0:4f:15:2b:1b:62:72:a1:84:ea:2a:f0:9a:05:f0:47:48:
5b:8c:28:55:b3:2c:96:b6:a5:f0:25:0a:01:18:cb:bf:8a:02:
8d:fd:fa:5f:c6:84:c0:ef:b3:fe:53:a9:2a:21:88:f3:ae:67:
83:39:1f:2c:e3:e5:ff:c7:fe:aa:2f:ec:8f:4e:86:76:05:a8:
76:ac:96:a5:5a:c8:e6:21:77:f3:05:63:a8:94:e0:9b:9a:9c:
39:5e:4f:1b:2b:95:2b:1d:25:de:8d:fd:45:99:d6:42:bd:2e:
59:45:9e:e6:d4:6a:39:26:c1:bf:48:aa:56:b2:76:fd:38:89:
1a:e8:99:19:b1:2f:40:3f:00:84:1e:ae:8a:b3:9b:74:88:39:
0f:3b:a2:7c:79:7b:1a:25:d0:9c:f9:7f:25:7f:55:1a:32:5e:
bf:1a:87:11:5e:c1:32:92:6c:58:9b:53:8f:de:71:62:77:18:
4e:9c:ac:ee:44:4d:a7:9c:9f:f9:c4:81:8f:bb:f9:a0:42:e1:
c5:25:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:27:47 2025 by rpki-client