Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD184BF8D98711EF9BB48F8B762E951A.roa
File: DD184BF8D98711EF9BB48F8B762E951A.roa (raw, json)
Hash identifier: M77pG5E4E0kHjH1SfAVho3WmI/a9v+xPmblaWyYAvhs=
Subject key identifier: 87:89:7D:EE:1D:76:BB:DB:B3:52:02:A4:16:1A:1A:FF:30:F2:08:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014235
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD184BF8D98711EF9BB48F8B762E951A.roa
Signing time: Thu 23 Jan 2025 12:45:03 +0000
ROA not before: Thu 23 Jan 2025 12:44:59 +0000
ROA not after: Thu 13 Mar 2025 12:44:59 +0000
asID: 138915
IP address blocks: 154.203.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82485 (0x14235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:44:59 2025 GMT
Not After : Mar 13 12:44:59 2025 GMT
Subject: CN=679239ce-8bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:6d:e6:6d:73:09:e6:bf:06:ca:fe:4f:fe:
e6:85:14:d1:ff:16:cd:37:91:10:28:c7:86:0b:cd:
0c:95:f8:9a:cd:7d:dd:78:4b:62:ee:8f:15:a8:6e:
9a:5f:df:46:55:19:1d:76:1e:d0:f4:4c:f6:e2:ee:
86:35:5b:c0:6b:d4:54:df:d0:34:a0:10:83:80:5a:
84:a4:1c:cd:7b:28:c4:ad:26:be:a5:20:d7:b2:d0:
b4:f6:7d:18:13:ae:89:cc:a1:14:4a:84:d9:87:38:
f6:84:e5:fa:3e:84:eb:55:eb:31:12:80:67:7b:58:
37:c3:01:67:1b:ba:13:a4:97:c1:35:a4:47:19:32:
70:14:a5:1d:fc:16:72:55:2d:d0:b1:49:84:96:51:
8e:8d:a9:58:92:ce:51:c2:ba:5d:19:17:40:3f:5a:
c6:d0:d6:74:30:c6:ea:0e:4c:6a:57:a8:31:82:4d:
8e:8f:dc:f6:46:b0:a9:ae:ea:49:dc:06:79:3f:4c:
40:16:2a:0f:4c:0a:fb:46:db:82:e8:6a:98:a2:7b:
60:10:47:95:5e:57:69:2d:b5:06:37:64:67:66:2a:
cf:f8:ff:90:c6:94:58:51:57:3a:6f:b0:5e:8c:a5:
4b:31:2d:c1:a3:f2:b4:35:3b:a2:56:7a:d8:65:6c:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:7D:EE:1D:76:BB:DB:B3:52:02:A4:16:1A:1A:FF:30:F2:08:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD184BF8D98711EF9BB48F8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.140.0/24
Signature Algorithm: sha256WithRSAEncryption
84:78:3c:89:b6:80:0f:31:62:c0:6c:89:b4:54:5e:bc:e9:b3:
51:21:64:db:14:e7:73:f1:80:e5:ca:ae:7c:70:8a:b1:e2:b1:
c2:0f:87:87:8a:b4:f7:4e:eb:3d:3d:b7:b5:2b:64:7c:9d:55:
cb:60:dc:f6:46:b5:7d:22:e5:85:c4:80:57:99:97:28:dc:3e:
3f:7f:c7:6a:cd:71:fb:0c:fa:34:71:5d:72:70:2f:b3:df:7a:
96:ec:89:87:38:9c:6b:7b:aa:6d:76:29:2f:56:dd:1e:29:fc:
eb:7c:e8:f2:38:91:0f:88:9f:ac:d7:f8:65:d1:db:52:5a:ad:
49:68:da:85:3b:58:7a:55:06:cf:f7:6b:8d:af:39:2e:da:36:
5f:3e:e5:83:48:b3:08:17:a4:67:22:26:66:c0:a9:8f:17:49:
f3:5b:b0:a5:6d:c6:c9:5b:b6:bb:84:25:6b:aa:62:05:a1:7c:
8c:3c:7d:8b:b8:9a:35:57:d6:db:21:d3:0c:04:f8:25:bb:83:
0e:74:94:b7:2a:bd:10:c7:73:9f:2c:71:08:d5:8b:e0:f0:a2:
c2:8d:13:16:c3:53:33:9a:c4:dd:c8:b7:c7:87:86:3d:e0:1e:
07:71:1d:cb:7a:a2:27:8c:56:24:f1:e1:3a:12:e5:58:d4:e5:
df:26:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:18 2025 by rpki-client