Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C78D8280DA0411EFB402E55B762E951A.roa
File: C78D8280DA0411EFB402E55B762E951A.roa (raw, json)
Hash identifier: 7spAbwxQ1y7hozHGzvmLjIAXJaCEStzNyfNIK268qZU=
Subject key identifier: 6F:E3:C2:EE:51:B9:F4:E1:A4:94:DE:3F:D4:E8:13:86:AB:58:AF:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014398
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C78D8280DA0411EFB402E55B762E951A.roa
Signing time: Fri 24 Jan 2025 03:39:13 +0000
ROA not before: Fri 24 Jan 2025 03:39:10 +0000
ROA not after: Sat 01 Mar 2025 03:39:10 +0000
asID: 44559
IP address blocks: 154.203.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82840 (0x14398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:39:10 2025 GMT
Not After : Mar 1 03:39:10 2025 GMT
Subject: CN=67930b61-96a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:a7:01:4a:92:78:a6:d5:e9:b7:fa:7a:c4:
d1:ae:e5:9f:c2:d9:3f:7f:d7:81:de:c3:56:f1:7f:
9b:d2:2c:d8:5f:69:15:a7:dd:0e:a3:12:e0:ef:6f:
60:de:e3:c1:dc:b5:cc:cf:0f:f9:f8:3c:c5:d5:a4:
6f:25:bf:65:27:8d:1a:26:79:99:06:35:24:9e:ab:
f1:2f:f8:c7:54:44:4a:85:47:ee:1c:62:6c:56:34:
fa:fa:22:97:3e:16:0b:09:4a:c1:39:a5:6a:9d:d5:
ca:20:b3:ee:ff:e1:78:0a:ca:c4:15:4c:42:26:35:
0f:f1:ae:d2:ef:21:45:c8:d4:6e:63:f1:3b:a2:db:
96:b7:52:fe:3f:0f:19:a6:6c:74:89:9a:cb:39:b7:
87:43:1e:4b:60:83:49:98:32:65:0e:1a:87:e9:28:
7d:d1:67:20:a5:2e:07:9b:05:ea:5c:c0:5a:b9:61:
99:fa:97:ed:6b:e3:5e:d1:0f:c1:fa:a7:22:6c:87:
5b:20:13:76:c1:ec:cb:45:8c:74:64:c7:4b:95:2f:
a1:4e:d6:23:e2:77:16:37:bf:da:8f:af:1c:e7:a0:
50:45:74:c5:c1:cf:1d:a7:88:df:f4:75:d5:21:cd:
32:ea:19:23:96:cb:77:9c:4b:69:ec:8d:be:0e:b2:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:C2:EE:51:B9:F4:E1:A4:94:DE:3F:D4:E8:13:86:AB:58:AF:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C78D8280DA0411EFB402E55B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b5:79:a3:39:5b:2b:e0:48:2e:d3:3a:92:10:2b:03:25:3c:
72:65:5c:8c:62:82:9a:c5:80:0c:d4:2d:f0:51:19:df:23:e6:
1e:53:f3:3b:83:77:5c:f8:de:8a:66:55:87:d9:68:ae:0f:88:
59:25:7b:7b:2e:75:1b:e5:ad:fe:2c:d6:b0:6e:eb:e9:f0:7b:
a6:a4:28:61:6a:89:81:92:fa:47:e4:83:c0:50:ab:84:bb:dc:
f9:ef:bc:b4:c9:39:97:3b:e9:8b:17:0f:db:0b:34:42:4b:05:
d1:15:83:66:fb:2d:b3:58:72:bb:8d:73:49:f9:fa:e8:bf:3e:
16:69:96:45:61:e2:33:fc:c6:a5:13:f6:24:7b:21:0b:43:97:
f9:c9:cf:b1:a7:11:a7:cd:18:44:6d:e3:49:fd:68:80:7e:88:
b7:00:be:cb:0e:da:a0:2b:91:d7:41:87:a3:da:6b:9e:60:e0:
66:26:0b:84:1a:0b:3a:2b:c0:02:57:91:33:82:68:a3:b3:92:
13:69:1d:4f:6e:9d:de:89:fb:ab:c4:8c:68:42:8a:3f:93:1b:
90:35:e4:1a:c9:70:e7:2d:24:bf:d4:1a:c7:9a:dd:21:b9:fe:
bf:db:78:32:bb:8e:a8:83:ed:12:a6:58:2d:5d:e7:61:e6:cd:
bf:19:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:03:22 2025 by rpki-client