Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED965C7CCCCB11EFAE330E60762E951A.roa
File: ED965C7CCCCB11EFAE330E60762E951A.roa (raw, json)
Hash identifier: mkF6+e1CoPQ846I5QRznJliBLtTLv0JHjbLyNbYNvGI=
Subject key identifier: 4A:73:22:35:F8:08:04:4D:51:3A:16:0B:1F:1A:E8:24:3B:7D:61:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013665
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED965C7CCCCB11EFAE330E60762E951A.roa
Signing time: Tue 07 Jan 2025 07:49:31 +0000
ROA not before: Tue 07 Jan 2025 07:49:27 +0000
ROA not after: Thu 13 Feb 2025 07:49:27 +0000
asID: 203020
IP address blocks: 154.202.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79461 (0x13665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:49:27 2025 GMT
Not After : Feb 13 07:49:27 2025 GMT
Subject: CN=677cdc8b-37dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:59:e4:0f:35:91:c5:87:73:eb:4c:05:32:
c7:bf:44:7a:43:b1:3d:d4:73:1b:ca:6f:24:e3:10:
1a:49:e8:cf:79:33:a5:62:89:3e:13:1b:e9:4d:d0:
68:7d:4b:a0:d1:6f:4d:5a:d5:1f:74:f4:38:de:ab:
f4:ec:88:85:01:ee:96:2c:74:1f:5a:4b:43:e5:0b:
80:da:b2:9f:61:d0:3e:ea:6c:ed:5e:f6:0b:b3:81:
64:45:23:81:24:ac:f7:62:8a:81:db:d6:4c:0d:45:
17:8d:ee:e0:c8:86:90:a3:08:46:e8:85:39:fa:c6:
98:be:d2:62:4a:cc:d5:01:8b:90:07:66:12:dc:44:
ff:ba:8f:86:38:26:ac:be:3c:82:b2:0f:a9:ec:06:
4d:2b:d1:de:c4:81:68:53:7d:de:42:45:3a:a8:bb:
fa:86:71:39:16:63:d3:f9:54:11:0c:52:04:b4:ba:
0f:f8:5d:4d:67:f9:8a:a2:ac:04:7c:f9:a6:a8:11:
ef:d4:d7:20:13:6a:d5:e1:fe:1c:12:af:c5:60:d5:
18:51:52:f7:5a:02:79:c8:f7:f8:20:bd:85:d7:ef:
c7:4d:c3:bf:18:75:df:d2:da:33:00:c3:e4:71:87:
c3:37:cb:3c:88:f8:49:10:c7:48:2f:b9:9c:33:38:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:22:35:F8:08:04:4D:51:3A:16:0B:1F:1A:E8:24:3B:7D:61:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED965C7CCCCB11EFAE330E60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d4:07:bb:5f:67:c9:34:14:c0:4f:09:6f:92:8b:a2:5a:ef:
68:84:c7:93:25:64:de:fa:77:42:57:4a:68:77:23:76:b4:5f:
e6:99:94:7a:5f:47:50:e9:ff:fb:cb:a2:71:b3:e4:87:1d:9f:
1c:01:7c:2d:21:77:4a:50:a1:33:e3:e5:9c:6c:76:08:9b:df:
38:4d:f8:68:47:92:51:ad:14:8b:8f:a8:83:bf:54:07:3a:51:
99:e6:48:4c:53:b8:94:0e:2b:6d:ba:44:2d:11:ef:7c:12:78:
1f:4f:f9:b8:f6:b2:00:22:2f:b9:af:7e:fb:05:51:b3:85:8f:
0c:00:c8:9a:9b:a3:9b:ad:ae:50:eb:88:27:a7:fa:84:cc:d9:
26:b6:50:49:7b:d1:4a:3a:bf:28:9e:92:81:34:f9:56:f5:e3:
4b:cc:52:bd:3c:b7:80:5f:77:f3:7b:90:1a:11:af:90:e7:d1:
51:bc:da:af:60:8b:d7:83:da:ac:38:98:91:30:d1:9f:59:44:
f6:ab:7c:e3:de:98:5c:66:25:b1:3f:19:23:e0:25:a1:7b:ef:
db:17:45:1d:3f:5c:10:75:c2:49:8d:42:74:dd:b3:ab:1b:83:
a1:6a:d4:b8:98:dc:e8:49:89:d7:ef:c3:67:af:88:a7:80:6b:
7a:5c:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:28:30 2025 by rpki-client