Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F510E536DBDE11EFABFD235C762E951A.roa
File: F510E536DBDE11EFABFD235C762E951A.roa (raw, json)
Hash identifier: HvVUvVLbTse81BA6IRloCJb68n2gjG4thx7BuIpimag=
Subject key identifier: 75:33:E1:67:26:0B:41:E6:9B:92:A8:8B:5E:DF:DD:65:08:B8:14:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F510E536DBDE11EFABFD235C762E951A.roa
Signing time: Sun 26 Jan 2025 12:13:31 +0000
ROA not before: Sun 26 Jan 2025 12:13:27 +0000
ROA not after: Tue 04 Mar 2025 12:13:27 +0000
asID: 203020
IP address blocks: 154.200.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84620 (0x14a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 12:13:27 2025 GMT
Not After : Mar 4 12:13:27 2025 GMT
Subject: CN=679626eb-d7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:77:ea:cd:09:f6:c3:bb:32:8f:c2:4a:85:
04:64:d2:6e:98:a5:da:41:33:a6:d3:b2:2e:40:d6:
4a:9d:d2:a8:54:56:3c:41:ba:aa:0c:d5:4d:4f:92:
ff:ae:dc:81:0c:61:4f:2a:00:88:99:32:63:75:83:
8e:d0:26:3c:ea:48:81:9f:4a:a5:cc:f4:cc:40:a4:
95:66:94:44:2a:c8:24:6e:73:ef:86:7c:0f:76:90:
ee:0b:c8:ff:aa:9c:ba:d0:35:17:c7:51:23:a7:6c:
31:d7:1c:09:b7:d0:8b:35:9a:bb:9d:33:b3:d3:a5:
73:b2:35:71:03:95:86:72:ae:ce:7a:f3:1b:24:78:
80:82:3a:a4:ce:e4:d7:cd:7e:a8:73:0d:9f:f6:6c:
b5:d6:05:0c:a9:3b:d3:d7:9c:e5:35:c7:f7:7b:77:
8a:f7:0c:6c:d7:c3:76:2d:7a:de:3e:0e:c5:f9:3e:
41:5d:1b:40:61:dd:ea:cf:ce:b4:4c:98:b9:83:26:
57:e7:bd:9e:4d:80:b1:bd:ee:45:9a:24:23:e2:7d:
1e:25:e9:d0:bf:f5:70:43:82:fe:5e:f5:ea:02:12:
9d:d8:35:00:a7:b6:41:52:dd:7b:bb:4e:d6:58:93:
84:64:a9:fa:83:62:ae:68:8c:dd:ed:fa:48:c5:78:
d1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:33:E1:67:26:0B:41:E6:9B:92:A8:8B:5E:DF:DD:65:08:B8:14:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F510E536DBDE11EFABFD235C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:fc:1a:15:9b:da:63:31:cb:13:a4:f0:10:12:ef:36:ca:20:
6a:a6:c7:0b:71:a9:15:e6:8a:5c:7b:c3:89:e8:70:19:3b:a9:
6e:b7:6d:d2:a6:2b:16:b1:76:f3:db:56:76:d9:a5:5f:5b:36:
11:d1:a0:51:45:de:f7:0b:48:94:72:ce:89:42:4e:0f:24:fa:
a3:6c:2a:75:25:97:39:c5:59:97:f9:2f:f7:9c:b3:b2:3c:31:
bd:5d:0e:2c:00:aa:86:f1:9d:cb:d4:91:86:fd:57:94:c7:5a:
39:9c:d6:57:ea:6f:d0:14:00:de:27:13:31:7c:82:fc:6e:8e:
5d:a3:4b:a8:f0:e1:c9:10:5b:9c:1f:82:71:07:6e:f6:bb:1d:
a6:79:f6:d1:24:06:37:ac:a8:2c:ec:bf:16:94:60:d0:bd:0c:
1c:57:ed:e1:27:e1:ac:56:01:a3:1f:9a:4c:69:d0:95:6f:08:
93:07:5d:ba:2d:e6:40:04:3c:12:50:bb:69:54:1e:ba:e3:f2:
31:19:ae:e7:a4:d8:6b:6f:30:65:04:1a:64:0f:39:e8:18:79:
37:4a:a7:71:a2:9a:5a:99:59:b3:2f:91:70:b0:ba:a7:f2:65:
23:0c:7e:5d:17:9b:6c:dd:1e:01:94:b5:50:e6:48:e4:49:b9:
ff:02:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:23 2025 by rpki-client