Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED945A18D98111EF8B1C4065762E951A.roa
File: ED945A18D98111EF8B1C4065762E951A.roa (raw, json)
Hash identifier: p6IzGEb1grtWcCeRmrnfJ7a7TU3COlax1J4GVBoXKaQ=
Subject key identifier: B2:5E:A2:8C:5E:6A:3C:91:F3:EA:26:27:0C:6C:5C:BC:04:6A:C8:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED945A18D98111EF8B1C4065762E951A.roa
Signing time: Thu 23 Jan 2025 12:02:33 +0000
ROA not before: Thu 23 Jan 2025 12:02:30 +0000
ROA not after: Thu 13 Mar 2025 12:02:30 +0000
asID: 138915
IP address blocks: 154.203.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82405 (0x141e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:02:30 2025 GMT
Not After : Mar 13 12:02:30 2025 GMT
Subject: CN=67922fd9-32dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:8e:13:cd:40:2b:68:32:17:2c:d7:fa:8b:
ab:b9:f9:18:0d:62:e9:94:72:92:0a:4d:59:71:95:
79:0f:de:94:92:01:39:df:2e:ac:3c:eb:d4:60:49:
0e:04:36:b7:9e:be:c8:9c:e3:c9:b8:98:20:87:c7:
23:d9:85:79:19:2c:64:be:15:84:e3:01:26:6a:57:
cc:b4:50:b3:57:91:20:c5:c7:4d:b2:da:66:cc:84:
c9:e9:5c:03:3d:7c:4d:bf:b5:96:1a:20:b6:22:15:
2e:a7:9b:16:69:f7:54:70:db:bf:a7:9a:56:a6:b8:
1a:ae:17:c3:96:06:48:ea:ee:c3:de:12:73:e0:1d:
e8:44:b2:9e:1e:40:bb:c9:90:fd:97:13:e0:e8:cc:
d5:39:c9:00:a8:57:46:6b:9e:a6:23:1d:a5:a6:52:
ee:94:10:20:94:6f:94:01:57:a9:c5:11:f2:b5:16:
d6:03:a5:72:13:ba:0a:b7:3f:75:35:f3:d1:cc:92:
60:d4:10:7e:1e:32:a1:82:d2:47:c7:21:ec:1d:44:
f4:9e:3a:9a:3a:ee:53:fc:99:0b:bb:34:57:fe:0e:
2a:2c:f4:e3:ad:f2:8d:6c:2f:8c:e1:03:14:0e:5c:
2b:99:6a:13:78:6a:7a:ce:1f:89:0f:cf:66:6d:9b:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:A2:8C:5E:6A:3C:91:F3:EA:26:27:0C:6C:5C:BC:04:6A:C8:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED945A18D98111EF8B1C4065762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.158.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0e:e2:cc:cb:f5:06:94:90:c6:33:0b:08:03:38:ae:a4:a1:
bb:d1:ea:52:54:8e:7b:29:88:1b:72:b6:c6:b9:f7:7b:68:12:
d9:d9:ad:fd:d2:e9:c8:29:1a:ba:75:4e:26:38:2a:ab:84:02:
3a:aa:c2:0a:54:7b:71:df:25:ff:26:27:89:f7:24:fd:c4:67:
26:73:bd:de:c4:ed:ee:63:1b:1b:ea:5a:eb:48:91:82:5e:d2:
6b:84:d0:9c:28:1c:f2:4c:78:1e:cd:05:39:4b:3f:b8:dc:d9:
dd:06:84:4c:1d:90:6b:d6:9f:e1:2d:da:3f:01:89:23:93:50:
59:4b:70:80:c9:a1:dc:1c:88:22:45:3d:43:29:4b:2a:0a:71:
e8:4c:9b:0a:d1:3b:87:c6:8f:08:42:13:80:b1:c6:d5:c0:c4:
e1:b8:fa:ec:0f:89:4e:5f:c3:eb:0e:76:62:d6:14:2a:2c:62:
49:bd:7d:bc:96:81:de:30:1a:a0:52:27:9d:2a:40:b9:74:e2:
fe:cc:b0:2b:6c:eb:1b:45:7b:46:fa:61:6c:64:5c:c5:63:36:
ac:0e:51:0c:2a:00:18:c8:e8:77:4e:45:49:c6:63:79:66:07:
d8:29:55:ca:8f:25:31:7a:12:e2:1e:e1:66:c7:2c:b0:3e:c5:
1c:fb:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:47:03 2025 by rpki-client