Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD1C1C7ED3F211EFBE5E4D4F762E951A.roa
File: CD1C1C7ED3F211EFBE5E4D4F762E951A.roa (raw, json)
Hash identifier: Fu5Vi7nemy3mbU+ytSN7dJLJtU1wJ9OqZRGOn3Mrt3U=
Subject key identifier: 9F:83:88:87:83:C4:F9:94:04:DB:E0:0A:3B:DE:8A:30:47:16:AF:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD1C1C7ED3F211EFBE5E4D4F762E951A.roa
Signing time: Thu 16 Jan 2025 10:15:25 +0000
ROA not before: Thu 16 Jan 2025 10:15:21 +0000
ROA not after: Sun 16 Mar 2025 10:15:21 +0000
asID: 17561
IP address blocks: 154.203.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80840 (0x13bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 10:15:21 2025 GMT
Not After : Mar 16 10:15:21 2025 GMT
Subject: CN=6788dc3d-0b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:8b:97:d0:b6:49:3b:1c:89:04:93:de:90:
c1:e2:af:8e:bb:f8:2f:91:7a:49:b3:5c:ce:87:7a:
2a:00:af:56:c4:8f:6f:96:32:bc:a9:5d:fe:9d:2e:
8f:8e:25:d0:88:b5:80:29:89:d7:11:55:34:25:bb:
ae:01:01:86:bc:e7:3c:bd:84:fa:48:a6:c2:1f:e7:
b2:eb:bb:c9:9e:04:13:25:b4:d0:fb:41:41:1f:0e:
8f:23:f8:fd:1c:80:90:a2:ce:5b:cf:a8:12:8a:23:
8d:12:22:9c:a4:56:89:41:1f:25:0a:de:81:2d:39:
5b:48:97:73:26:92:0e:c8:fc:14:56:7d:36:fd:03:
77:67:bf:3d:d6:00:94:22:98:33:9f:f3:06:e6:03:
71:b9:10:2b:8f:db:18:1f:f1:99:fc:07:39:d3:e0:
3c:84:cf:32:53:e5:94:ee:55:fd:e2:35:c2:50:bc:
8c:6d:59:c4:97:ae:34:5b:04:63:2f:54:63:77:a4:
ae:61:bd:5a:93:90:4e:a5:2b:fc:1a:ca:b0:53:ca:
fc:26:5b:e6:b4:80:a4:5b:b7:ba:ea:0d:80:9c:5e:
0a:2c:17:c0:ce:2b:89:a8:29:a1:8b:d9:4c:f9:8a:
eb:57:ec:c0:55:ec:66:ec:21:52:d0:90:c6:a5:d8:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:88:87:83:C4:F9:94:04:DB:E0:0A:3B:DE:8A:30:47:16:AF:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD1C1C7ED3F211EFBE5E4D4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.112.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:cf:fa:a3:af:88:68:f4:3b:9f:21:d3:90:a0:26:3a:de:d0:
9b:e4:aa:75:91:5c:a5:f9:d7:70:7d:75:92:53:d4:6b:6c:53:
f5:6d:fa:6a:b2:b8:4a:c9:36:52:ba:fb:50:1d:18:b4:90:4d:
38:e8:d0:9b:3d:03:32:6a:33:25:4c:63:13:81:ee:d3:1a:80:
ce:e2:b0:3c:c2:1a:93:82:82:18:4a:39:29:c0:50:7f:99:95:
fa:5f:95:e0:41:df:98:24:ea:96:bc:f3:95:55:86:11:06:b7:
1b:42:3d:f8:b7:6d:4a:5f:16:e6:a2:7b:07:60:64:e6:56:78:
ce:12:6b:57:5e:60:55:a8:9e:5f:86:94:90:55:44:81:71:e0:
ad:25:b4:70:bd:2c:f7:54:ae:48:f1:8a:aa:d3:c9:18:4e:67:
8e:31:3a:5a:ca:99:15:ef:fc:6b:89:58:b7:ec:3d:42:0e:15:
0b:e7:c1:d5:e1:05:75:18:87:4f:df:e8:16:d6:e2:f7:d5:a1:
ed:f8:14:ba:65:e4:8e:ff:6f:95:a9:20:c3:98:72:74:16:c0:
27:30:e2:7b:76:92:a8:55:ed:b9:4e:6c:b5:26:04:75:29:cf:
28:a5:85:99:dc:5c:05:47:34:e7:02:3c:54:8a:93:92:2a:0c:
c3:43:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:28 2025 by rpki-client