Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9186B0DA5C11EF8E0530AA762E951A.roa
File: BE9186B0DA5C11EF8E0530AA762E951A.roa (raw, json)
Hash identifier: 1o0f4dZKtYksokaIrBQGrPdA95GdFTGtlIGoNHysJD8=
Subject key identifier: BE:EB:E3:4F:B3:AD:BB:67:23:19:2C:CA:D5:64:0F:02:CA:7B:81:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9186B0DA5C11EF8E0530AA762E951A.roa
Signing time: Fri 24 Jan 2025 14:08:54 +0000
ROA not before: Fri 24 Jan 2025 14:08:50 +0000
ROA not after: Sat 01 Mar 2025 14:08:50 +0000
asID: 44559
IP address blocks: 154.203.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83948 (0x147ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:08:50 2025 GMT
Not After : Mar 1 14:08:50 2025 GMT
Subject: CN=67939ef6-85e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:37:a7:0e:c2:a5:31:ea:f5:64:3e:c5:c5:
7e:cf:67:bb:c0:1f:39:92:a4:b1:cd:76:90:09:0c:
45:4e:50:b0:d2:28:57:5e:0c:04:90:14:d8:e8:f5:
33:2c:59:ae:c5:32:dd:35:27:c4:73:f0:95:8e:3e:
e0:10:53:5e:d9:e8:49:c8:cb:7e:c3:b6:30:c3:d3:
a6:ea:c9:e7:fc:84:61:45:bb:c6:59:14:d1:a3:b7:
75:3a:0f:d6:0c:e9:fb:7b:4a:a0:3c:2c:10:da:5b:
25:4a:1a:0d:22:51:2b:70:c1:a8:ae:93:cb:91:1a:
5c:12:f9:e3:68:5e:b9:c6:f3:57:d4:50:9b:b0:19:
12:4b:8d:39:c1:54:34:a9:13:00:80:02:fa:bf:cd:
38:8b:b1:40:cd:ae:66:a2:97:be:ad:70:50:ea:8f:
82:92:16:b4:48:e6:78:5d:b7:19:96:e0:6d:59:a9:
88:77:e8:d1:76:ab:98:7b:46:83:bf:80:54:8f:d0:
d1:1d:ea:b7:34:3d:27:94:38:55:a4:c6:bb:8d:cc:
ed:2e:ef:08:bd:08:b9:6d:8a:8c:e1:fb:7e:ad:90:
58:67:62:10:55:ce:4f:fe:c9:b8:6b:4d:ea:fb:ca:
b7:f3:cc:74:24:d3:55:96:2b:af:2e:19:7b:f2:7d:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:E3:4F:B3:AD:BB:67:23:19:2C:CA:D5:64:0F:02:CA:7B:81:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE9186B0DA5C11EF8E0530AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.216.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a4:da:f2:6d:1a:62:b3:68:68:82:58:c9:1a:8a:d1:56:4a:
b4:f0:4b:2c:72:94:d0:00:dd:a9:02:2b:56:12:a2:1e:ae:f2:
af:ae:b5:40:c4:11:9e:80:6c:43:5f:71:36:3b:a1:5e:fb:80:
89:43:46:6a:4b:c2:a0:ed:d0:ea:da:62:b3:88:e8:5d:e8:7d:
e7:92:49:e6:96:40:d4:8d:22:cf:fe:32:e1:f5:15:51:b4:52:
ba:28:2b:03:03:3d:d2:19:5b:5a:e3:d1:c8:ce:0b:b5:8c:42:
0a:74:7e:ed:51:4c:94:36:c8:fc:70:0d:76:3e:bd:67:c1:cc:
80:95:0c:be:f9:7c:e0:3b:ac:47:5d:d2:2d:7b:94:e1:e2:39:
d8:62:43:4b:1a:30:41:7f:a1:eb:75:49:ed:2d:1d:14:72:c1:
75:08:10:fb:96:48:5e:88:3c:ce:d2:26:98:0a:8f:24:6f:f6:
2a:cb:15:23:5b:cd:6b:2d:75:94:dc:e1:b6:a7:c2:12:35:63:
65:66:33:f6:05:56:13:02:de:50:4d:16:6b:c8:9d:ad:92:5a:
be:95:f6:7f:61:91:87:48:84:92:20:ef:99:d2:0d:c7:cc:94:
9d:fb:05:fc:93:9c:b6:71:f8:bf:58:ad:16:0d:d4:3d:0b:8a:
46:4e:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:44 2025 by rpki-client