Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31B3FE88D56311EF91E2BD42762E951A.roa
File: 31B3FE88D56311EF91E2BD42762E951A.roa (raw, json)
Hash identifier: hiIuys1V16pyPi2rqj7wgXQwDPnwuLqFQMuNkU0jy/g=
Subject key identifier: D3:6E:9C:87:31:44:6C:B5:81:4D:DA:08:0E:A7:0F:36:AD:02:1E:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31B3FE88D56311EF91E2BD42762E951A.roa
Signing time: Sat 18 Jan 2025 06:12:28 +0000
ROA not before: Sat 18 Jan 2025 06:12:25 +0000
ROA not after: Sat 22 Feb 2025 06:12:25 +0000
asID: 395886
IP address blocks: 154.202.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81258 (0x13d6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 06:12:25 2025 GMT
Not After : Feb 22 06:12:25 2025 GMT
Subject: CN=678b464c-a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:a1:95:17:1d:2b:3b:e8:36:a6:5a:18:ee:
49:88:c1:fc:85:4c:ce:d0:6a:aa:cf:48:cc:b3:36:
d3:a2:92:43:e9:ef:fb:df:9e:19:23:bc:57:c0:67:
22:10:cc:52:9f:6d:3e:57:23:3e:8b:e6:09:f6:3f:
f4:08:78:e9:d6:e9:5f:df:74:77:17:aa:25:7d:9c:
63:f0:95:7c:67:7c:5d:96:c0:93:fd:46:e0:32:cb:
41:fa:cb:8c:f4:ac:18:4d:1e:d2:a2:02:17:dd:0c:
cd:92:5f:9b:cc:a0:b6:22:7d:5c:a6:a4:82:2e:b2:
53:e8:9f:d8:2e:a3:a8:e5:4f:4f:aa:1b:0a:db:6b:
70:84:89:95:9d:6f:4d:72:6a:54:69:29:1f:1b:a7:
1b:fa:bb:bf:a9:1d:28:99:8a:41:51:fc:4f:06:fe:
ca:7c:3b:90:08:cb:4e:b3:96:99:eb:8c:d4:67:77:
a3:83:0a:b2:46:9b:ca:79:5c:01:fb:dd:04:98:ad:
8a:31:81:2d:71:3e:b7:8a:50:70:59:76:42:6f:4a:
67:14:f1:2b:8c:9f:bd:d4:25:d4:fa:75:04:f0:d6:
78:59:0c:89:70:de:32:2e:eb:59:12:e5:e2:c5:16:
8b:91:8f:8e:d2:93:d1:cc:ca:86:1a:36:4e:e7:8a:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:9C:87:31:44:6C:B5:81:4D:DA:08:0E:A7:0F:36:AD:02:1E:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31B3FE88D56311EF91E2BD42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
Signature Algorithm: sha256WithRSAEncryption
01:20:d5:4a:fe:d4:d0:9c:f4:b0:26:bd:1c:76:2e:aa:83:e8:
fd:43:99:01:5d:fe:90:d1:c3:28:e9:a0:7b:aa:01:ca:f0:7d:
8d:31:33:7f:28:73:26:c2:c5:2b:fd:e7:ff:af:ab:4e:3d:74:
c1:32:92:f1:47:a8:a7:da:69:26:a4:5e:f2:41:f1:c2:06:14:
d9:c9:3f:5f:cb:53:56:df:21:d4:04:b7:11:5e:03:c6:31:0e:
95:b6:c8:24:20:c0:32:74:c6:08:18:e5:f7:42:31:de:98:ad:
fa:b0:f7:28:f5:77:1e:8b:86:bd:41:cc:1b:a7:2a:b7:8d:cb:
8d:38:58:09:9c:c0:b0:6c:a4:b3:f0:e1:c6:e9:b3:51:26:f6:
76:a6:a4:4c:46:2e:c3:6a:ae:8b:54:2c:fa:24:1a:16:17:82:
0f:42:bf:39:6f:87:f1:cc:47:12:3a:4b:b2:b3:9f:e9:97:a9:
f3:5d:7e:c4:33:57:bd:0b:bb:cd:22:31:c2:22:c4:74:ad:95:
c7:6e:c0:78:0a:3b:13:1e:b3:ee:c3:38:46:dd:55:8e:17:18:
10:6e:8f:d3:f6:96:d6:8e:27:12:8d:89:da:ca:c4:62:a3:b5:
4f:e8:d4:ca:22:54:2e:a2:df:5c:eb:49:62:f0:01:e0:46:ea:
e2:d0:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:21 2025 by rpki-client