Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C137E5B4DA6911EFBCCEC082762E951A.roa
File: C137E5B4DA6911EFBCCEC082762E951A.roa (raw, json)
Hash identifier: xG80DVNOXmXRaXPEFxpn+Utft46mc1lZcOGBnv57H6o=
Subject key identifier: 75:22:10:EF:5E:B1:8B:5F:1D:E1:98:3B:88:2A:DC:F7:B6:BB:6B:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C137E5B4DA6911EFBCCEC082762E951A.roa
Signing time: Fri 24 Jan 2025 15:42:02 +0000
ROA not before: Fri 24 Jan 2025 15:41:58 +0000
ROA not after: Mon 03 Mar 2025 15:41:58 +0000
asID: 203020
IP address blocks: 154.223.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84155 (0x148bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:41:58 2025 GMT
Not After : Mar 3 15:41:58 2025 GMT
Subject: CN=6793b4ca-55f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:26:50:dc:46:4f:fd:e1:49:c6:30:c9:6b:
d8:d6:0c:7f:d9:56:5e:c3:61:18:40:81:a9:ad:e2:
a9:7b:eb:34:b5:bf:0b:89:1c:30:2c:c6:58:2e:b7:
b6:9a:3e:9a:64:7e:8a:0b:21:16:83:f0:13:da:ad:
a1:a0:74:e9:8c:7f:57:29:63:99:ad:72:42:88:ae:
80:eb:6a:f2:15:0d:d2:e5:31:0c:d2:2c:09:ff:b0:
8d:e8:40:1b:5c:a4:56:ac:95:72:fc:de:db:a2:38:
6b:1b:54:29:2a:48:c0:13:67:b5:b0:c9:34:f2:b1:
5d:8b:d9:a7:85:71:ce:70:b3:2b:7b:cd:b5:30:b8:
79:29:3d:27:01:49:1a:14:31:56:b1:9e:72:89:9e:
8c:73:8d:d4:82:7e:94:0d:d9:1c:fb:8a:6c:6c:55:
5e:dd:32:73:30:6b:d5:74:05:f1:f2:7b:2d:6b:55:
c5:c7:4c:05:f8:20:ac:94:59:87:f7:88:4b:ec:cb:
92:b8:d0:f2:e7:88:54:1f:8a:e1:24:9d:c0:ca:24:
71:37:0c:aa:20:6e:ab:70:b6:0e:40:b2:21:16:a6:
58:61:be:6c:26:52:fc:80:06:0b:24:f9:57:d8:9b:
89:33:22:44:2c:a8:d3:7f:9a:60:71:f9:d4:c0:14:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:10:EF:5E:B1:8B:5F:1D:E1:98:3B:88:2A:DC:F7:B6:BB:6B:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C137E5B4DA6911EFBCCEC082762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.143.0/24
Signature Algorithm: sha256WithRSAEncryption
08:43:15:fa:f7:68:e9:ca:b7:33:46:9f:c6:be:53:31:04:34:
47:c4:e3:d9:ef:f9:d3:1f:a9:91:8d:79:d8:17:32:6b:f1:83:
63:89:19:7e:71:6a:7e:79:ae:5c:e7:96:fb:b2:79:a5:b0:e6:
e1:0d:b9:94:b5:4b:3b:fb:0a:ad:70:32:a6:25:d1:35:a7:72:
00:6a:1a:d5:ed:e3:50:72:a1:2b:59:9f:b9:5a:94:fc:32:36:
c2:5f:90:fd:a5:88:d2:dd:3e:b0:ef:44:78:2e:7b:ae:ae:27:
c0:b3:51:08:1d:af:2d:66:c5:e7:ec:b5:e5:8c:be:8a:ad:d0:
51:e0:07:57:b8:1e:05:33:b9:50:23:7d:34:bf:b2:4e:0f:54:
09:bf:37:6a:b5:2e:a4:b6:37:6a:6b:d7:98:4c:6c:79:23:ed:
ed:41:9e:38:6a:0e:56:8d:0f:f0:f6:19:f3:af:25:a2:d0:a4:
7c:dc:94:2d:af:87:90:0c:c3:64:9e:3f:1e:d7:0a:ed:e8:50:
59:11:26:cd:69:a9:12:2a:c4:11:e1:ce:5b:15:31:30:75:46:
07:2b:a7:7b:33:fc:79:07:a8:5a:f0:99:45:36:04:21:58:90:
e1:6d:8d:e3:a7:72:a4:9d:e9:31:f6:c9:28:fc:b9:a5:00:3a:
be:5a:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:57:55 2025 by rpki-client