Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C714832ECADE11EFBB83DB99762E951A.roa
File: C714832ECADE11EFBB83DB99762E951A.roa (raw, json)
Hash identifier: TJWXIwOyc6o6UDtqaznwR2g4r7Xzkw+jFnLQLeBnY7Q=
Subject key identifier: 1F:FA:B0:CB:34:E8:AF:3A:5D:E8:4C:E3:B0:68:92:BB:23:6E:24:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01355B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C714832ECADE11EFBB83DB99762E951A.roa
Signing time: Sat 04 Jan 2025 20:59:24 +0000
ROA not before: Sun 05 Jan 2025 20:59:21 +0000
ROA not after: Tue 04 Feb 2025 20:59:21 +0000
asID: 203020
IP address blocks: 154.207.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79195 (0x1355b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:59:21 2025 GMT
Not After : Feb 4 20:59:21 2025 GMT
Subject: CN=6779a12c-4acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:91:20:71:c7:3d:cb:bb:ac:e4:b0:91:63:
3d:7d:49:3c:e5:73:c5:ca:af:43:9a:01:ae:ba:71:
12:4d:c3:6c:35:79:75:44:b4:da:ac:62:49:db:45:
53:86:4e:9f:31:3b:ee:0c:db:d2:29:f7:0e:cc:ba:
8f:50:4e:94:31:ac:3c:7a:85:ba:60:6f:17:52:90:
b8:7d:1c:7a:b4:04:ea:51:ec:21:b2:50:5a:19:6a:
5f:20:56:ce:95:9e:4d:43:82:fa:ed:ca:21:ad:23:
0c:c3:35:2a:cd:84:5a:0d:ff:d8:1d:cb:de:8e:08:
00:9c:1a:50:3b:ab:62:17:39:26:87:96:d0:78:e8:
6e:91:69:09:d4:37:27:68:6d:e9:4f:7c:30:77:f0:
7d:a6:93:8b:b9:34:55:ea:45:e7:1d:64:67:f5:45:
a5:e9:b8:02:25:1b:9d:cf:b8:24:3f:28:1c:51:04:
8d:f4:d2:a3:98:b6:ec:c8:d3:b6:bf:4a:29:87:0c:
b3:16:b2:4c:e0:97:63:2d:30:22:b2:c1:d4:24:eb:
dd:dc:f0:c9:d1:fc:6d:2a:03:b6:7d:f3:24:9b:63:
0a:1c:af:6b:d2:cd:7e:8d:41:44:cb:68:9b:ad:47:
9a:2d:bd:3d:aa:a6:47:9a:77:8f:94:96:af:04:0e:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FA:B0:CB:34:E8:AF:3A:5D:E8:4C:E3:B0:68:92:BB:23:6E:24:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C714832ECADE11EFBB83DB99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.224.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:6b:6f:49:07:36:9f:cb:24:44:61:9f:d5:9c:74:a2:03:28:
b1:84:8e:14:73:18:fa:8d:46:46:f0:2b:49:32:34:c6:7a:12:
5a:86:d7:5a:b3:bc:3a:01:a7:99:b0:3b:2b:cd:91:ab:2a:eb:
63:31:ef:54:be:85:3e:b6:2a:e8:ce:7e:17:72:a3:5c:d3:f7:
ce:da:fb:ba:87:dc:e5:d8:21:e2:88:61:bf:80:38:36:de:34:
e7:e8:df:63:8f:39:61:2f:2d:58:03:ff:8a:1d:b2:01:79:97:
42:61:10:ec:3c:17:e2:96:fb:f0:47:90:5d:be:6e:40:d1:63:
75:b0:d9:bb:07:8c:86:c2:e7:e9:c2:a9:8e:fb:98:1c:bb:eb:
1f:0b:b4:20:15:ca:39:04:70:cd:99:de:b7:38:41:97:68:69:
9f:97:64:ce:6e:63:0f:74:ff:0c:14:1d:6e:ec:d6:f6:ee:2c:
c9:95:77:a3:53:ec:c0:be:22:e7:37:79:d4:e5:25:73:43:0e:
0c:0c:45:87:98:93:a9:9b:77:5c:db:3f:5b:9b:87:bb:8f:14:
7f:7c:7d:fc:d9:70:95:d8:c4:3c:d2:23:e8:ca:02:e3:7c:24:
d7:67:7a:63:04:f0:99:a6:e2:61:02:8c:04:fb:1f:7c:d3:54:
7e:c7:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:38:22 2025 by rpki-client