Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFC3CD64DE2111EF879F74A2762E951A.roa
File: FFC3CD64DE2111EF879F74A2762E951A.roa (raw, json)
Hash identifier: 3ZJJELv18/BgJq2J79g8l6N0nPKltmNlVaxthyMArNs=
Subject key identifier: B4:22:10:18:34:F6:0E:12:59:BE:52:3A:9D:64:B7:09:A7:13:28:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFC3CD64DE2111EF879F74A2762E951A.roa
Signing time: Wed 29 Jan 2025 09:18:28 +0000
ROA not before: Wed 29 Jan 2025 09:18:24 +0000
ROA not after: Wed 05 Mar 2025 09:18:24 +0000
asID: 203020
IP address blocks: 154.207.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85336 (0x14d58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:18:24 2025 GMT
Not After : Mar 5 09:18:24 2025 GMT
Subject: CN=6799f264-10f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:ee:b6:dc:00:00:71:99:1f:44:74:b7:4b:
51:f3:0f:db:5e:e4:bd:45:d3:a0:96:28:90:2f:d1:
55:02:69:4b:15:0c:cd:b5:5d:08:2c:2f:e1:c9:91:
8c:4b:35:f1:5a:9a:53:39:2c:9a:5f:c3:8c:b3:5c:
44:16:36:f4:95:67:2d:1e:f3:a3:39:ab:34:de:0d:
6b:aa:9f:98:3a:34:f7:fc:bb:de:e9:27:4d:f4:e9:
96:c2:85:29:55:db:a9:85:36:2e:18:10:f7:21:7a:
5f:e8:ca:ce:ed:be:be:53:9c:ed:40:8c:56:34:fd:
81:db:cc:24:01:db:e6:9f:fb:a6:98:9c:d4:13:58:
2e:20:bf:03:38:11:a2:a3:02:b3:6b:b0:c2:ab:c8:
96:82:63:83:b3:5f:4d:f3:e8:19:f1:4d:1e:34:c5:
89:09:ad:35:16:48:56:b4:be:1b:0a:1d:da:59:9c:
d4:56:e7:53:66:25:64:79:6d:f1:34:8f:06:6b:ae:
c9:70:92:60:14:37:d4:aa:09:65:5b:65:c6:90:23:
e6:fd:b2:ba:50:b7:11:4b:c3:6f:72:e3:d1:e6:13:
af:9b:2d:c7:15:d5:92:38:08:30:99:60:36:d8:1e:
23:d0:b1:6d:f5:82:40:f2:5b:af:ef:06:1f:84:89:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:10:18:34:F6:0E:12:59:BE:52:3A:9D:64:B7:09:A7:13:28:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFC3CD64DE2111EF879F74A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.184.0/22
Signature Algorithm: sha256WithRSAEncryption
36:2b:6f:51:f7:ff:81:16:d9:0c:49:a8:22:c9:22:21:a5:fa:
16:44:d2:62:3f:6c:bf:cd:62:ef:3a:ca:d8:b8:e6:06:5b:bc:
06:01:71:b9:d1:13:eb:bc:c3:70:c2:18:1c:7c:04:c3:14:08:
ad:81:31:8c:9c:52:e3:05:b9:d4:9e:a3:e7:07:51:c3:ee:b6:
a5:c9:2c:a0:5f:e1:ad:b4:03:35:ce:6c:1e:54:b4:81:e4:41:
a2:31:53:c6:cc:1a:39:b0:bc:3e:0f:9b:a3:1a:53:5b:a2:3b:
ea:01:ae:e7:62:67:28:94:b2:b3:f1:64:25:fb:00:e9:6f:52:
88:63:05:36:09:4e:f3:a8:22:ed:cc:78:34:67:74:7b:ea:6d:
b0:cb:a0:32:8c:b7:40:af:97:a3:8d:90:71:a7:9d:11:03:47:
16:9c:db:2f:dd:ec:20:f8:33:98:e8:39:33:73:d6:04:f5:02:
1e:11:24:91:da:2e:7c:ff:51:42:e2:9f:59:c2:43:e8:dd:6c:
04:0d:33:4e:7a:9a:7d:44:55:68:b1:86:63:f5:33:83:89:6e:
76:40:06:e3:fd:3c:89:90:cf:ad:2c:ed:16:a9:35:87:5b:ca:
c3:50:e7:35:55:40:2c:5d:2b:e7:43:fc:55:4f:3b:fb:48:aa:
ec:ac:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:06:14 2025 by rpki-client