Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D332CCFADA2011EFB0AB1194762E951A.roa
File: D332CCFADA2011EFB0AB1194762E951A.roa (raw, json)
Hash identifier: QfQ52d3RyScNmfVkwm0PoTN3chW0vrvMzRNSLK4qAdo=
Subject key identifier: AD:24:45:6F:68:4F:92:36:E1:91:83:B1:F8:80:3D:56:32:26:C6:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014405
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D332CCFADA2011EFB0AB1194762E951A.roa
Signing time: Fri 24 Jan 2025 06:59:59 +0000
ROA not before: Fri 24 Jan 2025 06:59:55 +0000
ROA not after: Sat 01 Mar 2025 06:59:55 +0000
asID: 44559
IP address blocks: 154.203.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82949 (0x14405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 06:59:55 2025 GMT
Not After : Mar 1 06:59:55 2025 GMT
Subject: CN=67933a6f-39f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4c:f0:2a:37:0a:85:94:a0:9a:08:1d:23:ac:
6d:7e:26:5a:dd:79:63:b9:48:2c:18:03:89:f6:57:
eb:28:6f:a6:91:8e:60:e0:da:50:7b:88:2d:74:1b:
17:c1:a1:6d:22:a3:d3:37:31:51:cc:8b:8d:a0:37:
74:77:eb:63:38:5a:43:18:9a:e1:d4:59:1c:c2:6b:
16:60:df:b2:98:24:22:e5:ba:da:47:59:17:23:4b:
9b:a0:c2:ae:eb:9f:28:0a:af:a6:70:65:fc:48:84:
ac:89:55:8e:25:34:2b:6a:79:43:8b:e9:ee:7e:62:
8c:d1:d4:5d:89:c6:66:5a:77:b5:27:06:90:f4:6a:
a5:4f:88:6d:71:92:53:ab:58:29:b3:19:3c:e7:be:
1f:59:2c:39:9e:5b:21:a2:d3:a6:5c:2f:5c:c8:e7:
c1:7d:ee:28:a8:54:6e:72:81:67:89:a5:a9:0a:25:
9c:2d:f8:aa:47:07:40:a7:18:c2:6b:73:bb:14:1e:
2e:e9:bd:75:c1:e9:62:14:f6:84:35:fd:f7:dd:5c:
0d:f0:7e:79:f1:f4:17:e3:88:5b:94:e1:7b:dd:d5:
df:ad:39:dd:bc:8e:66:89:11:d9:db:23:43:90:24:
82:ab:ec:d7:62:87:0f:db:65:c4:cb:a7:6f:b8:81:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:45:6F:68:4F:92:36:E1:91:83:B1:F8:80:3D:56:32:26:C6:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D332CCFADA2011EFB0AB1194762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
54:01:98:d7:0c:64:a5:70:53:b6:e8:56:70:ac:e8:4e:97:fd:
2f:48:51:07:1c:57:9d:cc:f1:73:32:0d:63:5b:3a:5a:7f:50:
b3:d9:31:63:d0:5e:fb:a9:5c:b2:ee:8d:3c:7d:18:77:53:21:
ee:36:7d:f9:fc:ce:46:14:9e:06:bf:62:09:50:0f:7c:cd:23:
42:d6:18:35:f2:93:04:9d:92:1a:b5:6e:19:60:bb:f9:c3:a8:
6f:9d:5f:a9:a2:ef:1c:60:bd:96:2d:02:19:fe:af:b0:3a:cd:
95:0f:c2:f5:c9:87:ba:8d:3c:37:fe:4a:b8:76:87:39:8e:68:
08:5c:3d:6e:35:93:46:2e:22:af:29:70:03:f5:e1:8f:af:44:
e7:04:8f:c9:dc:fb:64:05:48:27:7a:9d:e6:51:60:34:86:00:
e5:3d:ac:5f:e0:ee:8e:a5:4c:49:2f:c5:fd:50:18:ab:37:4c:
b2:5c:a6:a8:50:03:41:09:f3:49:0c:63:b3:02:6a:b8:69:cb:
1f:4b:a4:c3:d3:7b:5d:0d:a9:6e:20:0a:e3:9b:6b:b3:95:e0:
a2:fd:1a:67:df:3e:df:85:44:ac:b3:fc:cc:bc:1b:7f:e5:e7:
1d:c9:b2:9f:aa:3f:e2:0a:68:f2:bd:1d:99:55:76:e1:38:b1:
ad:32:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:23 2025 by rpki-client