Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE988CBCD97F11EF8DAA7157762E951A.roa
File: CE988CBCD97F11EF8DAA7157762E951A.roa (raw, json)
Hash identifier: zxTTCJnFHiWaHGztK1tsHi6TrWUVfk6LYUX62thVeSo=
Subject key identifier: 6B:EA:DF:75:43:6C:A5:3A:11:97:16:FD:28:7F:8E:3F:61:12:F6:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE988CBCD97F11EF8DAA7157762E951A.roa
Signing time: Thu 23 Jan 2025 11:47:22 +0000
ROA not before: Thu 23 Jan 2025 11:47:19 +0000
ROA not after: Thu 13 Mar 2025 11:47:19 +0000
asID: 138915
IP address blocks: 154.203.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82370 (0x141c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:47:19 2025 GMT
Not After : Mar 13 11:47:19 2025 GMT
Subject: CN=67922c4a-13bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:34:d6:ef:f6:27:3c:ab:8f:00:e8:89:73:
d9:c5:71:33:d4:fa:3d:6f:9a:42:8f:f3:7e:f1:07:
94:14:16:eb:20:41:e8:9a:02:b6:57:a7:21:a9:9a:
50:db:5d:03:61:e4:d1:c7:b2:4a:a9:28:b1:7f:89:
e1:2f:5c:7c:f1:68:49:02:c4:d1:59:be:12:6a:02:
7c:f7:c2:2f:a0:4d:3a:3b:45:8c:90:22:e0:d9:51:
42:cd:a7:63:cc:b2:3f:54:11:45:2b:5f:73:96:ad:
ee:fc:26:d8:22:93:8d:60:6d:2f:47:72:8c:a4:f2:
9b:79:1e:66:38:17:24:72:54:52:b9:9d:48:9f:75:
5b:c7:46:7d:3d:db:30:f7:c4:47:a6:b4:82:c2:35:
6c:9f:c3:74:dd:c8:5b:32:9e:e9:e0:ec:ed:c1:f9:
08:4b:02:96:bc:2e:b9:73:30:57:10:d7:38:ff:2e:
dd:a5:47:61:fc:5e:38:ec:8d:9d:77:86:65:48:b7:
10:c9:12:13:e2:52:1e:4a:b6:58:3c:f1:8c:dc:45:
a2:50:f4:29:2a:e7:48:5a:97:36:f6:63:9b:7f:f5:
76:a3:1e:15:47:70:0e:b1:ca:4e:1d:36:e7:49:e6:
82:2c:25:33:74:5b:69:c5:b7:ba:74:dc:ae:f6:f7:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:DF:75:43:6C:A5:3A:11:97:16:FD:28:7F:8E:3F:61:12:F6:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE988CBCD97F11EF8DAA7157762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f8:ab:a1:38:46:7c:e5:82:43:a1:47:18:c8:91:ab:f4:b9:
56:b8:3d:65:4a:62:04:be:7b:f3:af:41:a3:76:24:a2:a1:0e:
fa:46:fe:c9:12:6c:e8:c0:0c:e6:71:05:56:63:2c:79:2f:68:
99:dc:c0:4e:24:e6:7b:fb:70:d9:02:36:d7:dc:5e:11:7e:4b:
bd:5c:7e:c6:e7:09:4c:dc:ac:64:b2:da:9c:01:6d:ad:44:ad:
79:b6:79:54:67:23:04:bc:f5:f4:ca:e4:a8:c5:ec:dd:a3:53:
c4:c2:e4:06:b4:a6:b6:cc:c5:ee:7e:af:76:fc:8a:11:22:57:
39:c2:5c:c3:65:c0:f1:8b:4a:6c:6d:ee:1c:c0:d8:77:d8:49:
a0:14:59:de:7f:4d:3f:46:bf:8b:cc:ff:e0:34:18:05:78:66:
10:b6:f1:93:64:e6:05:b8:d2:fb:ed:dd:9d:41:82:b6:36:98:
5c:86:fe:56:e1:b8:ab:77:53:6e:b3:17:52:4b:f6:96:4b:de:
93:83:65:9d:0f:27:b2:18:28:be:d8:6a:41:be:3f:df:81:ac:
67:4b:14:54:00:98:2d:6f:99:03:15:83:83:07:08:2b:ba:ba:
9a:7e:f1:a5:24:aa:f2:45:e7:cc:6e:3b:38:50:50:63:0c:87:
cb:d2:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:50:03 2025 by rpki-client