Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3DFCB9CDBE711EFA4DD0898762E951A.roa
File: F3DFCB9CDBE711EFA4DD0898762E951A.roa (raw, json)
Hash identifier: zITiFbHhwteGxWhS+ASRStMf7EIFVKTQLucmGvJZmOs=
Subject key identifier: 7C:8B:F9:7A:C2:9B:F2:96:92:70:A8:8A:A9:8A:FE:E9:CB:08:CE:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3DFCB9CDBE711EFA4DD0898762E951A.roa
Signing time: Sun 26 Jan 2025 13:17:55 +0000
ROA not before: Sun 26 Jan 2025 13:17:51 +0000
ROA not after: Tue 04 Mar 2025 13:17:51 +0000
asID: 203020
IP address blocks: 154.200.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84630 (0x14a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:17:51 2025 GMT
Not After : Mar 4 13:17:51 2025 GMT
Subject: CN=67963603-4229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:12:6c:63:0c:77:6f:b2:37:d4:0b:2e:79:d1:
e6:db:42:11:ee:af:f5:9f:e5:86:91:c7:fa:77:1a:
84:96:7d:d2:35:00:4b:68:c5:97:b9:57:09:bf:84:
49:36:04:0b:b7:7d:aa:1f:c7:9b:3f:5b:cc:4f:9b:
ea:37:fd:b6:f3:20:39:f3:9a:ec:89:77:09:d2:1d:
bf:9f:74:3b:f5:c0:31:ac:bb:08:a3:2d:32:d3:42:
fd:f1:e3:1a:8b:da:e7:10:6a:b9:db:a5:b3:c8:5b:
96:79:44:ad:2e:fa:39:c7:7a:e4:a4:29:36:d9:40:
58:14:e7:62:71:36:1d:a3:20:35:79:00:29:73:76:
7f:38:a3:f8:b3:69:23:09:ee:35:cc:27:a7:48:4e:
5f:44:1e:6d:ba:b5:5f:7c:84:3d:92:30:bd:2b:82:
39:7b:8b:ef:8c:98:a7:4c:6b:55:ee:af:7c:31:de:
91:94:4d:bb:32:8d:7e:36:57:7d:ec:3e:35:4e:ba:
cf:2d:b6:99:b1:f9:a8:04:2d:56:d7:82:9e:27:53:
38:31:35:03:87:1b:29:59:4c:4f:69:c3:c4:3e:aa:
6f:c2:f5:da:9f:a3:f2:0a:3d:0b:da:ae:d0:80:6d:
ff:5b:ed:ab:f8:90:78:6e:88:64:30:8f:04:db:5b:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:F9:7A:C2:9B:F2:96:92:70:A8:8A:A9:8A:FE:E9:CB:08:CE:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3DFCB9CDBE711EFA4DD0898762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:86:94:26:ef:9d:d4:97:b3:9e:26:53:a3:8f:a4:b6:d9:2e:
f9:b7:d3:6a:45:4b:18:f8:91:8c:99:4e:f3:52:25:8e:a7:5e:
8d:f6:c0:9a:b7:78:69:09:60:6b:24:be:9a:78:0c:2e:18:d1:
62:10:3b:88:ad:74:13:0d:32:58:d0:f2:24:32:e5:e1:ad:45:
c3:dc:29:fd:c6:ce:29:20:df:cc:b1:36:2b:c1:56:b6:e4:e3:
df:ee:10:0b:ff:bc:0e:ed:b6:56:fe:b1:22:ec:54:96:0f:e0:
5f:f3:35:7a:68:c1:6b:b8:47:19:5a:e4:ec:8a:e2:45:6e:fa:
84:9b:36:83:f5:8a:2e:b6:9f:02:2d:33:91:e0:8f:f9:3e:0c:
df:7e:e2:28:cd:33:58:f3:32:82:b0:93:3b:50:07:38:dd:d6:
94:22:9f:a4:10:d0:9f:97:67:ee:e3:e1:10:81:1c:1d:b3:fd:
94:4a:a9:0a:6e:0c:8c:b7:4b:4d:e9:bc:69:eb:2a:fd:1d:42:
75:f2:b7:ac:b8:c0:b9:bd:90:89:23:1d:99:80:93:3d:73:24:
cf:cc:11:b4:a9:03:d7:d5:4e:95:cf:83:11:40:b4:bd:85:fd:
85:3e:ff:71:18:3c:6a:3c:6f:d9:10:46:6e:f6:2e:10:54:a3:
8d:31:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:23 2025 by rpki-client