Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69AF046D98A11EF9E63FFA1762E951A.roa
File: F69AF046D98A11EF9E63FFA1762E951A.roa (raw, json)
Hash identifier: 9YTY9FE39HqVZxTHFY9K2q+f+UkKRtqFWrww+kbGgiQ=
Subject key identifier: 90:11:C3:69:3E:D6:D4:AF:DD:9F:39:06:B0:40:4C:45:5F:84:A7:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014262
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69AF046D98A11EF9E63FFA1762E951A.roa
Signing time: Thu 23 Jan 2025 13:07:14 +0000
ROA not before: Thu 23 Jan 2025 13:07:10 +0000
ROA not after: Thu 13 Mar 2025 13:07:10 +0000
asID: 138915
IP address blocks: 154.203.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82530 (0x14262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:07:10 2025 GMT
Not After : Mar 13 13:07:10 2025 GMT
Subject: CN=67923f02-1175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:4d:e9:ee:ed:52:95:fc:23:b5:9a:83:fb:
aa:ae:55:5f:ab:1c:c1:e9:cd:2e:9a:f4:73:93:8f:
11:be:f4:12:f2:18:73:75:db:24:49:fc:cc:6c:fe:
c3:9c:ab:3b:2e:2d:34:8f:98:ea:f2:e1:d6:f5:91:
90:08:8a:2f:d2:a6:11:c4:3e:1d:a3:37:f4:2e:f2:
e7:3d:97:d6:72:fb:a2:46:6c:d7:99:b1:b1:8a:b1:
4c:22:82:d1:b5:31:16:52:86:17:f3:50:71:86:ce:
a4:4d:62:f0:96:79:a0:48:eb:3d:be:4a:51:fd:19:
3c:e1:52:23:0a:5c:da:7a:ac:19:93:83:63:d3:ab:
fc:16:80:a3:f9:24:74:13:f3:3b:74:0e:bc:53:54:
dd:0e:48:b1:91:f8:e0:d0:5a:09:40:e9:a4:77:52:
24:4f:49:88:68:71:03:8a:3a:94:23:d1:f4:a1:6b:
2b:0c:be:0c:b8:28:87:21:05:5c:6c:ec:a0:b0:bc:
0e:54:d2:03:e3:1f:8a:f4:dd:9e:37:b1:59:03:71:
8c:5d:cd:b3:87:ae:f5:29:a3:91:06:d7:42:86:ad:
3a:59:40:f6:ef:85:41:39:3c:4e:1f:29:d8:a2:20:
b1:5b:14:90:10:26:4f:9d:b9:9a:3b:28:ff:7d:72:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:C3:69:3E:D6:D4:AF:DD:9F:39:06:B0:40:4C:45:5F:84:A7:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F69AF046D98A11EF9E63FFA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ec:1a:7d:3a:07:f7:bc:22:bb:42:26:25:04:0c:2b:01:e2:
2f:51:da:1a:3f:a0:d5:c5:30:9f:79:fd:d2:ec:00:b6:0e:87:
c1:bd:8b:0d:73:f4:95:c6:57:a6:40:b0:90:53:73:35:1d:04:
7a:62:cf:50:9e:08:d1:e1:2b:fc:2c:bb:97:0e:06:b5:7d:f6:
a3:0c:33:c5:0b:f2:64:e5:3a:2d:bc:d6:25:b8:93:3b:fa:b2:
ba:fd:5c:99:8d:b7:e8:fd:c9:c5:a0:6f:d9:b9:0c:18:7f:0c:
04:0a:45:f0:1e:8d:b8:90:6a:93:df:f4:26:fd:7d:94:40:a3:
fd:dd:70:6a:cc:b7:55:cb:d3:3c:42:44:fb:cc:2a:72:37:13:
4a:77:61:ae:37:61:d3:20:f3:29:4a:8c:cd:2e:21:38:81:34:
f7:21:b3:ac:71:80:c5:f0:15:3b:62:57:4d:d2:00:93:82:b9:
4b:f0:c5:d5:3b:d9:83:ac:5d:7a:d2:88:2c:da:34:d6:7d:af:
a7:86:fd:3f:11:de:7a:3e:06:04:99:e7:76:66:8c:f4:53:99:
fa:77:54:9e:9b:02:d5:68:b5:49:76:b2:72:d7:18:51:ef:26:
f2:14:43:83:f6:e7:dc:67:9d:40:5c:88:ba:ec:cc:d6:1f:16:
c2:ef:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:52:06 2025 by rpki-client