Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D3F378DA5F11EF9D4B54BD762E951A.roa
File: D0D3F378DA5F11EF9D4B54BD762E951A.roa (raw, json)
Hash identifier: 18DK3WRv91Bm++1it1nvxfH9jUrg14J/keW/sR76S00=
Subject key identifier: 44:A5:F9:31:81:A1:1B:CC:F6:8B:C8:4E:AB:08:6F:CB:90:9D:17:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014832
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D3F378DA5F11EF9D4B54BD762E951A.roa
Signing time: Fri 24 Jan 2025 14:30:53 +0000
ROA not before: Fri 24 Jan 2025 14:30:49 +0000
ROA not after: Sat 01 Mar 2025 14:30:49 +0000
asID: 44559
IP address blocks: 154.203.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84018 (0x14832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:30:49 2025 GMT
Not After : Mar 1 14:30:49 2025 GMT
Subject: CN=6793a41d-0a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:54:58:cb:01:92:6d:10:4b:e9:36:d0:38:
c6:2f:15:fc:8d:7d:32:4b:80:cd:2b:e3:97:50:72:
64:c5:80:d5:d1:ea:7d:53:4e:9f:71:ce:bd:dc:dd:
d6:18:8f:6f:be:3f:5a:3a:43:b0:e7:00:ba:f6:25:
04:17:28:a4:dd:45:80:63:30:28:f7:f5:30:13:28:
43:44:45:73:1a:db:72:57:c3:ff:91:1a:11:e2:79:
dd:21:8b:4d:1a:d9:46:34:af:f6:f3:ef:0a:1b:86:
65:d2:dd:b3:48:b9:35:79:97:28:66:d5:b1:98:44:
fe:eb:a7:98:f5:6c:1a:ca:32:5e:1e:38:80:8d:5a:
a2:d7:b3:be:4d:78:36:55:f6:bf:8b:52:57:28:26:
12:e1:a0:4a:3c:5f:a8:d6:97:51:d0:a1:e5:87:40:
94:38:28:95:53:14:3a:fd:43:df:bc:88:12:23:ca:
4f:e1:36:c9:c7:87:f8:59:92:b9:ba:50:37:09:ac:
72:0c:eb:fe:ef:06:2f:42:9d:d4:e8:d6:b0:88:db:
14:ea:b3:21:a8:43:7b:fa:ec:10:1c:1c:d2:fa:6c:
0f:81:4b:d5:fa:6e:d8:f5:27:3b:09:b9:16:19:df:
a7:2e:45:da:2a:3d:e9:a7:97:b9:56:da:46:ae:10:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A5:F9:31:81:A1:1B:CC:F6:8B:C8:4E:AB:08:6F:CB:90:9D:17:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0D3F378DA5F11EF9D4B54BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.251.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5d:27:50:e2:3d:f7:16:61:33:60:06:d4:ac:f9:fe:bc:51:
71:6b:5a:4c:18:3c:f4:21:e0:9f:6d:b6:d7:3b:d8:6b:76:f0:
25:f7:c2:c0:ec:8f:48:a6:ea:49:9f:ce:5a:0d:a0:3a:69:21:
c3:c9:a6:8d:53:94:89:c8:65:15:52:67:9a:44:36:5c:04:80:
b6:7f:66:e7:07:51:d6:aa:c7:d0:8c:52:4f:ae:ef:da:a2:5f:
82:79:06:48:36:d7:55:f6:98:8a:c8:f0:cd:60:f2:e2:a6:22:
d9:c1:d5:57:b0:d6:1e:a9:1f:e3:8c:46:2f:2e:b9:bb:25:39:
a7:07:c3:09:5c:bd:54:3d:f5:64:f8:f1:29:10:9e:23:7b:76:
f4:5d:2a:ab:e3:54:ec:e2:b8:71:4a:9b:6b:6e:1c:04:c5:12:
db:e7:3a:f6:75:2a:96:73:13:38:3f:fc:3b:45:cf:bc:72:63:
6c:5f:e2:98:17:72:eb:28:10:a0:d5:ca:82:c6:11:03:01:54:
5e:ce:b1:c8:73:ac:4b:4a:9f:18:28:cd:85:73:26:5f:3b:c7:
a2:79:66:81:18:e6:96:b6:8d:cd:43:62:3e:3c:ca:69:a9:5f:
95:61:72:bd:b5:a5:c4:37:58:04:b6:fa:a9:f7:38:8c:18:4b:
86:f8:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:13 2025 by rpki-client