Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6835E04F5CD11EFB5D2217E762E951A.roa
File: A6835E04F5CD11EFB5D2217E762E951A.roa (raw, json)
Hash identifier: 5Z/4S4hBhpD78VKEB/b6vdhi3L3vRRzqAHGbnxypX9k=
Subject key identifier: C5:40:B5:A5:A2:AC:90:BA:3A:AA:C3:FD:48:24:3E:2E:E6:E3:96:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6835E04F5CD11EFB5D2217E762E951A.roa
Signing time: Fri 28 Feb 2025 12:15:08 +0000
ROA not before: Fri 28 Feb 2025 12:15:04 +0000
ROA not after: Fri 11 Apr 2025 12:15:04 +0000
asID: 138915
IP address blocks: 154.203.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92950 (0x16b16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:15:04 2025 GMT
Not After : Apr 11 12:15:04 2025 GMT
Subject: CN=67c1a8cc-4541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:6c:ce:be:cf:0b:95:1b:2b:26:76:54:18:
11:86:70:9e:81:5c:cb:7e:c7:79:6b:06:b9:3c:58:
a5:2a:35:71:81:d1:df:0f:8f:ae:d0:ad:97:b9:bf:
ee:3c:53:3d:5f:0c:b9:bb:c1:69:0e:e3:8e:81:b5:
dd:0d:97:68:91:63:55:5a:8b:52:b8:af:20:4c:2e:
42:4b:57:38:1e:de:3d:2f:3b:8b:d6:38:63:18:1c:
b8:b1:50:96:9d:6f:13:0c:0c:f6:73:94:0c:4c:7a:
3c:be:dc:c0:7b:40:a4:55:d6:ef:bf:8d:d3:52:b8:
4c:ed:98:4b:71:fe:a6:58:85:73:24:08:b6:e3:c5:
23:41:9a:78:8a:3f:dd:7f:42:a4:7f:d2:ca:11:08:
df:45:5f:dc:17:05:1d:bc:fe:bd:ba:f7:72:d9:49:
8c:cf:5f:b1:08:b8:34:77:33:df:e6:88:9a:50:f1:
c2:0e:4a:ee:c3:e4:8f:bd:c1:eb:3c:ac:8b:49:a3:
06:67:4f:0f:55:f8:5f:b6:26:09:db:76:9f:42:6b:
df:a1:bc:a3:bb:3f:df:2e:ec:89:eb:ce:26:0c:20:
a5:00:47:54:d1:4f:32:4c:38:4c:1b:ed:d1:b5:20:
9a:71:c7:d0:01:f5:54:2c:8c:c5:91:13:30:93:d0:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:40:B5:A5:A2:AC:90:BA:3A:AA:C3:FD:48:24:3E:2E:E6:E3:96:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6835E04F5CD11EFB5D2217E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.140.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:29:4b:9d:cf:8c:4f:84:8b:de:15:e6:a3:55:f1:5f:a5:5e:
92:53:b1:7c:19:6b:24:36:8e:a0:0e:94:e8:2a:24:f3:db:8e:
99:7d:cb:88:b6:12:d3:82:eb:f8:d4:c0:a4:76:58:cb:92:f5:
11:c8:91:47:eb:b3:4e:dd:39:b4:46:bb:39:65:8e:13:27:c2:
82:d2:00:66:94:de:ac:b8:14:c1:b7:5c:a1:f4:18:de:3c:16:
d4:91:d4:0d:09:81:28:22:17:2d:ce:1b:16:01:93:34:62:31:
64:e2:33:1a:23:8e:a9:0c:2a:ec:af:6d:e2:45:d9:db:cb:83:
c5:80:70:60:af:47:a8:3b:63:1c:30:b5:1f:fb:88:1e:7e:d1:
1a:61:cc:05:4c:04:a0:44:d5:44:86:95:af:30:d8:b6:9c:bd:
9d:61:6b:83:52:3c:77:dd:f2:1b:20:76:54:31:bd:7c:e3:79:
71:27:73:b7:71:86:f1:8e:ab:31:e4:8a:4f:f3:6b:2c:76:af:
be:0c:f6:ab:84:86:a9:34:67:b9:fe:d9:52:d7:08:56:94:0a:
55:68:1b:56:ee:ce:cb:bf:dc:39:eb:e9:14:fb:c6:35:29:06:
66:62:e4:1b:4f:d0:1b:9a:fc:a5:e4:cf:e0:fc:fe:22:64:00:
40:0b:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:36 2025 by rpki-client