Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC15F078F5C911EFA9418065762E951A.roa
File: BC15F078F5C911EFA9418065762E951A.roa (raw, json)
Hash identifier: Na6tFRj4UMik75k9JL1+XJtTMRlFbQOuBmiqunIkV7Q=
Subject key identifier: FF:F4:A9:5A:C2:DE:89:EE:0F:35:FF:BE:54:28:61:02:C6:8D:EF:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC15F078F5C911EFA9418065762E951A.roa
Signing time: Fri 28 Feb 2025 11:47:07 +0000
ROA not before: Fri 28 Feb 2025 11:46:57 +0000
ROA not after: Fri 11 Apr 2025 11:46:57 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92928 (0x16b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:46:57 2025 GMT
Not After : Apr 11 11:46:57 2025 GMT
Subject: CN=67c1a23b-c28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:f1:a0:e4:d8:c8:66:1d:49:5e:b0:2e:1c:
a6:f5:6c:28:38:75:92:78:92:40:c1:5f:8b:0c:55:
28:bc:98:78:e8:03:85:92:a7:cd:c7:e5:d7:64:26:
bb:06:79:7c:c7:e8:f7:45:8d:29:b8:c3:2b:83:63:
27:18:1a:4c:c6:e7:8b:d2:d6:e1:2a:75:40:f3:5e:
9c:8a:cd:24:c1:28:51:3c:6c:23:c4:2d:ce:e0:3c:
8e:86:de:b8:39:b9:d3:49:5f:b6:1a:8c:c7:70:b2:
24:c8:22:5c:73:ad:83:c6:50:fb:f6:dc:3c:0a:a0:
c7:7a:48:f2:20:a4:70:c2:d3:e1:b7:79:1c:05:06:
9e:39:2c:4e:3b:28:26:f1:8a:bf:d2:38:3a:2c:31:
44:9f:16:36:c6:f1:a9:cd:e1:29:e3:3b:b3:d1:1d:
3b:4a:80:b5:ad:f6:7f:d8:24:68:d1:01:8e:f8:91:
ad:e2:02:e5:fe:54:16:e5:db:0c:10:38:90:99:98:
ab:6b:b2:a6:ee:43:5f:7b:e4:ce:b4:b5:6c:ce:20:
50:c4:55:52:8c:48:df:30:31:f4:32:26:70:27:d4:
ba:70:f7:2c:39:3a:e1:7b:2f:d5:08:7f:8a:4e:5e:
b4:ca:77:e1:be:01:bf:2a:d3:0e:34:9b:8e:b0:09:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:A9:5A:C2:DE:89:EE:0F:35:FF:BE:54:28:61:02:C6:8D:EF:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC15F078F5C911EFA9418065762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:43:50:a2:21:09:5a:db:a3:48:79:30:53:89:73:f7:8f:51:
21:94:0d:aa:62:ed:07:78:c4:5b:3d:b9:ed:97:b4:5e:00:c3:
c2:1d:87:1c:3b:7f:d3:f7:d1:1f:91:4d:b1:69:ea:ec:ce:aa:
23:2a:2a:74:fc:49:f8:45:00:bd:41:43:e6:22:e8:68:c0:f9:
6b:b2:68:a5:36:32:c5:6e:0c:bf:f1:7b:f3:47:bb:6f:4e:2e:
0d:eb:f8:c1:e3:29:ff:cd:f2:c0:9e:a9:7a:90:0d:78:44:47:
80:43:05:a3:2b:3f:c8:ec:ba:0a:86:1a:d3:20:ed:f9:6a:c2:
27:ee:eb:f9:02:5e:b2:fb:40:a9:61:bf:b7:3a:13:1b:25:e0:
88:7c:ab:eb:f3:c7:b0:b6:46:2e:20:96:46:6c:5b:80:f7:76:
26:f2:3c:0f:15:3c:80:02:49:c4:31:6c:20:e3:b2:30:fe:20:
b2:0f:14:67:67:97:f2:75:df:11:39:af:c8:3a:b6:59:60:f0:
cb:3c:6f:8d:f9:cf:1f:59:6b:7f:2d:13:7a:05:9a:91:b2:f3:
40:f2:df:e4:f6:b5:c1:3d:09:65:95:01:5d:e0:b4:81:cc:a5:
74:66:a7:46:69:d4:6e:9c:57:1e:3d:bd:5a:39:e4:43:dd:cf:
7f:03:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:43 2025 by rpki-client