Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64EFCB8C2A111EF8481384A762E951A.roa
File: F64EFCB8C2A111EF8481384A762E951A.roa (raw, json)
Hash identifier: c5Pze6zdwNAxd1dfWKTurR5DkyNB7clc/Dhwa1rkwDE=
Subject key identifier: 62:5D:92:51:C1:59:CF:E4:B8:87:F2:83:BA:F4:0F:1F:D3:E8:87:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01253C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64EFCB8C2A111EF8481384A762E951A.roa
Signing time: Wed 25 Dec 2024 09:23:55 +0000
ROA not before: Wed 25 Dec 2024 09:23:51 +0000
ROA not after: Thu 13 Feb 2025 09:23:51 +0000
asID: 138915
IP address blocks: 154.203.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75068 (0x1253c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:23:51 2024 GMT
Not After : Feb 13 09:23:51 2025 GMT
Subject: CN=676bcf2b-69c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:83:9e:51:c6:68:49:62:3d:b7:3d:ad:d8:
b5:8f:d3:4a:f6:c1:3f:39:17:67:00:67:99:f4:fe:
2f:81:51:d4:e5:a4:14:31:53:d0:9b:dd:83:f8:6f:
4c:0d:da:50:31:bd:7b:2e:bc:92:6e:4d:0d:79:f4:
95:f6:1e:43:db:7f:1b:39:9b:7e:e0:ff:18:4c:a5:
b9:0b:04:59:37:e3:70:01:7f:ee:ad:75:1d:61:66:
6d:3d:65:7c:80:d3:17:c0:5a:92:34:95:22:8c:5a:
b7:42:3f:9f:fd:3e:b9:42:3f:78:01:47:51:a1:49:
9d:a4:4e:46:d3:9d:fb:13:fd:89:e2:00:8b:9c:72:
52:d9:92:ae:51:73:9b:50:91:d6:14:fc:f2:60:fe:
24:2b:6d:e8:ae:bb:31:dd:b3:3f:83:70:93:bd:65:
58:0e:12:66:e9:7c:35:9d:3c:b7:7d:5e:3a:db:ad:
ae:5a:63:3e:94:18:db:f1:05:04:d9:29:49:2f:7c:
91:d8:ec:93:84:b0:bc:a9:51:8f:60:1a:0d:44:bd:
a6:f7:92:81:90:9d:0b:a7:74:eb:b8:7a:6e:ae:19:
97:16:ac:9e:a4:a3:a1:c3:1b:81:ec:7d:a4:4f:67:
79:e6:f0:66:f9:09:a3:60:30:72:91:b5:53:58:8f:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5D:92:51:C1:59:CF:E4:B8:87:F2:83:BA:F4:0F:1F:D3:E8:87:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F64EFCB8C2A111EF8481384A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.132.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:3e:cf:03:01:3a:c0:39:17:d9:d1:d3:ec:d0:64:0a:0e:2e:
a3:3a:c4:ac:5c:be:5f:2c:1b:e5:b6:c0:50:8c:33:a6:3c:34:
da:fd:bf:c0:97:a1:fd:f2:3f:5d:7d:d0:51:5d:1f:0f:7c:62:
88:08:b2:3b:c3:f8:d7:06:4d:6a:76:34:07:42:9e:26:da:9f:
94:83:ad:51:d0:42:5c:cf:fc:5b:12:ff:0d:b2:68:cd:a8:3d:
cf:4b:c8:60:53:63:9b:77:60:0a:0a:16:8e:da:46:9a:bc:f7:
25:1f:26:75:ae:e2:dc:c2:70:b0:b9:d3:ab:51:22:1a:40:9f:
e7:b1:be:e4:26:d3:a7:ff:e9:cd:70:b6:c0:88:fe:63:b8:ea:
48:1f:f8:c0:10:12:45:6b:f2:f4:41:bf:ad:9c:39:3f:98:0f:
a5:a4:23:d7:4b:3e:5f:b0:fb:99:9e:f7:24:74:27:36:4a:77:
78:2b:41:3d:91:e8:e1:3a:cd:53:1a:35:e4:60:5c:27:a9:11:
52:88:81:22:6e:11:8b:7e:70:be:d1:9e:ab:9c:5c:2a:a9:ce:
bd:78:40:2d:f9:ce:d2:0a:1b:da:c5:a9:d6:af:c9:2b:02:fb:
49:51:eb:3f:dd:14:39:7d:89:c2:06:f8:2c:f0:34:40:50:f1:
ed:f8:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:00:14 2025 by rpki-client