Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6141BD8D98211EF8D61676B762E951A.roa
File: E6141BD8D98211EF8D61676B762E951A.roa (raw, json)
Hash identifier: i4n3spXY5Ada0xyMM2wzz6a5zEeum8WK+CFJ4rp0JSY=
Subject key identifier: 84:3C:EB:47:54:01:AA:89:53:74:05:E0:95:0E:33:88:6F:D3:23:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6141BD8D98211EF8D61676B762E951A.roa
Signing time: Thu 23 Jan 2025 12:09:30 +0000
ROA not before: Thu 23 Jan 2025 12:09:25 +0000
ROA not after: Thu 13 Mar 2025 12:09:25 +0000
asID: 138915
IP address blocks: 154.203.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82420 (0x141f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:09:25 2025 GMT
Not After : Mar 13 12:09:25 2025 GMT
Subject: CN=6792317a-306b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:5f:61:7f:92:aa:ea:eb:c5:63:17:95:02:
50:e6:c2:1a:57:0c:2c:20:65:57:ab:e2:0a:19:79:
9e:20:d9:93:68:7c:89:83:56:b3:c2:16:68:23:e2:
fe:e9:2c:88:09:0b:af:5a:34:a3:05:a0:7d:42:25:
01:aa:7a:a8:56:6a:f6:2a:4b:6f:8b:88:b2:58:c1:
75:c0:75:8e:87:32:ae:ea:3a:c4:5f:2b:78:79:8c:
b1:db:c1:b7:ee:58:db:cb:e1:96:3f:af:d5:17:49:
ce:42:e9:dd:ed:0f:1c:77:41:d1:9a:de:7e:8e:d5:
83:08:68:c1:2a:30:ed:8e:8e:94:b5:92:00:3a:e8:
1c:f2:5a:30:42:a0:81:4e:e0:7e:e8:0f:9f:39:b5:
66:1a:c9:13:75:03:3b:33:dc:3c:68:54:62:5f:45:
8c:1c:6f:5a:dc:72:cb:5b:0a:28:e7:e8:c4:4d:fa:
11:eb:3d:49:ff:b7:81:41:f8:e1:25:22:ce:55:d7:
aa:25:7d:a8:ee:9a:76:f1:54:e5:de:fc:f5:74:56:
d9:61:52:23:a2:bf:31:ee:97:00:e2:3e:e0:60:a4:
db:a7:67:08:a5:5d:ed:82:05:32:38:8a:e3:c3:91:
65:6e:c7:ae:57:a7:bf:df:af:6f:53:54:25:89:1b:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3C:EB:47:54:01:AA:89:53:74:05:E0:95:0E:33:88:6F:D3:23:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6141BD8D98211EF8D61676B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e6:3a:5b:1c:11:06:03:b5:34:36:ca:d8:b7:0a:66:ed:9c:
78:44:ce:cf:8d:aa:7f:0c:0f:fc:9f:66:de:f7:e3:f1:44:cb:
7f:f4:f0:ff:8f:a1:e0:69:d3:db:a1:75:5d:85:b3:fa:0a:23:
ed:1d:a1:0e:4c:83:5f:c8:70:b5:8e:29:d9:b5:53:6b:63:03:
c0:b2:62:eb:f4:75:70:69:ad:e2:d3:02:d3:82:86:d3:4d:53:
e7:cd:e7:77:c4:71:d1:8b:28:b7:df:8a:5d:37:d9:f5:d7:8f:
5c:b7:6e:6c:41:67:e8:c1:49:28:fa:01:47:aa:4e:d9:df:8c:
b0:77:a0:b8:e0:7f:c3:70:91:a0:5d:43:59:47:af:16:03:70:
cf:14:97:85:ea:33:a9:d5:18:eb:28:75:da:d9:51:2b:b4:bb:
88:12:dd:3c:6f:b8:20:c6:87:1f:92:cf:f6:f1:d7:d7:4b:4e:
10:5f:4d:f9:8c:ff:2e:5d:94:8f:07:a9:e4:75:8f:0f:4a:54:
9a:4b:7a:98:f4:fb:85:d5:58:c1:ba:80:e7:9d:dd:54:81:b5:
92:b5:cc:fa:bf:c7:62:eb:36:ed:28:32:10:44:83:6a:91:88:
b2:8c:51:8c:f0:0a:92:23:22:4b:d1:93:95:21:c2:99:e2:fe:
29:b6:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:31 2025 by rpki-client