Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F91AA880DBEB11EF998E6EB1762E951A.roa
File: F91AA880DBEB11EF998E6EB1762E951A.roa (raw, json)
Hash identifier: sUx5w0qJdBdA6jzyfTBk0bbtOdI2Dg/+zYmuenxAc54=
Subject key identifier: 5E:C3:B6:81:EB:A0:D0:D8:8E:89:79:EF:54:B7:FE:32:32:22:90:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F91AA880DBEB11EF998E6EB1762E951A.roa
Signing time: Sun 26 Jan 2025 13:46:41 +0000
ROA not before: Sun 26 Jan 2025 13:46:37 +0000
ROA not after: Fri 07 Mar 2025 13:46:37 +0000
asID: 205125
IP address blocks: 154.203.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84648 (0x14aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:46:37 2025 GMT
Not After : Mar 7 13:46:37 2025 GMT
Subject: CN=67963cc1-e6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:4f:1a:02:df:b0:7e:33:de:a8:08:f4:58:
a2:af:cb:84:e5:a4:66:a5:0c:eb:de:96:a5:34:0f:
30:17:9d:a7:7e:f4:99:90:67:2c:14:9c:96:8f:13:
bb:eb:c6:0c:e1:9d:45:f6:bd:ea:40:35:7c:ec:7d:
1b:e7:a2:62:27:9c:12:07:d6:4d:b7:8f:fd:28:7c:
0e:3f:97:33:95:40:c1:fa:21:7f:d9:0d:8f:af:63:
04:2f:32:58:0d:b1:99:59:56:22:5e:d0:6f:03:c1:
f5:08:73:ab:34:ea:d0:df:d5:44:13:0c:ff:15:f6:
96:58:89:10:8d:ce:ea:d6:bf:d0:7d:55:c3:04:14:
7e:06:8b:84:3e:eb:e9:02:ba:58:41:c0:23:ba:a5:
ad:5b:db:42:65:9c:96:0f:e5:7e:d3:cf:51:93:88:
35:4b:6e:80:cc:e3:57:b0:12:ea:a4:69:aa:8c:16:
c4:a6:c5:ad:4b:43:08:da:dd:63:81:81:27:fa:9e:
67:d6:e3:92:02:c0:6f:bb:04:c4:14:70:ea:f5:24:
21:10:83:1a:f2:a9:cb:87:e8:bb:0d:a7:5e:4a:5c:
e7:68:59:ab:31:b3:dc:ca:a9:25:d8:e3:0d:02:77:
3e:b2:e0:da:be:83:63:27:96:8b:b4:a0:c8:51:a2:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C3:B6:81:EB:A0:D0:D8:8E:89:79:EF:54:B7:FE:32:32:22:90:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F91AA880DBEB11EF998E6EB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9b:2e:8b:92:90:7b:b6:74:5b:cd:54:52:06:94:96:26:ef:
90:4f:ea:b1:35:60:f0:02:16:53:d8:ec:ea:df:65:03:ec:86:
31:a6:95:16:cf:b3:3f:7d:09:c9:69:43:8f:c0:bf:a8:78:2e:
d2:59:33:73:e1:77:4b:25:d2:19:96:83:3c:c8:80:7b:d8:13:
cf:74:63:48:6a:c5:85:99:f7:1f:c4:f2:7a:e2:19:6f:55:a7:
3e:06:14:e2:e8:c5:37:6e:1c:2d:66:0c:24:d7:3f:1c:1c:e5:
4f:86:c7:3d:e6:39:3d:89:11:32:b3:8f:74:c7:49:cf:02:09:
df:bd:29:77:27:db:ec:61:17:f9:6a:4f:2c:93:61:fa:87:1a:
04:fe:fd:31:d7:01:d8:3c:98:65:16:b3:02:c7:0a:7b:cc:d3:
2d:a2:66:d2:3e:57:a8:4f:3f:9e:b8:c4:23:99:14:f1:f2:4d:
08:c2:d2:34:4e:7c:3e:51:45:8e:49:40:31:2e:34:57:81:5e:
ce:59:8d:f6:df:b8:99:67:36:1a:c2:c9:72:f4:b8:96:25:fa:
18:1d:17:22:d2:97:e9:99:1c:ff:11:52:90:da:8f:79:b2:76:
a8:bd:85:84:d4:3c:24:39:74:f0:90:80:89:ae:28:11:f4:75:
9c:9b:42:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:58:46 2025 by rpki-client