Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05B553B4D96311EFAE70D494762E951A.roa
File: 05B553B4D96311EFAE70D494762E951A.roa (raw, json)
Hash identifier: MyowLjMl+ejjYrVmjX+hmtx7/3sQ1kTljbc8iD+GJqk=
Subject key identifier: 1C:60:56:A8:42:54:F9:52:54:83:E3:F3:B9:35:AD:6D:E4:F8:90:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01407B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05B553B4D96311EFAE70D494762E951A.roa
Signing time: Thu 23 Jan 2025 08:21:19 +0000
ROA not before: Thu 23 Jan 2025 08:21:16 +0000
ROA not after: Sat 08 Feb 2025 08:21:16 +0000
asID: 18229
IP address blocks: 154.210.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82043 (0x1407b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:21:16 2025 GMT
Not After : Feb 8 08:21:16 2025 GMT
Subject: CN=6791fbff-0492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:73:45:ef:5e:d8:00:7d:74:da:ca:42:ba:
c4:69:0f:19:b6:45:c5:99:77:ac:d6:25:a6:b1:b7:
4a:54:85:10:65:28:81:68:44:6d:f4:93:7a:34:80:
c2:84:7c:a8:32:da:61:95:f3:9d:6a:9a:68:3d:dd:
f0:83:7c:22:f8:aa:b8:a5:78:8c:04:c2:cd:94:1e:
e6:b1:01:f2:fa:b3:4e:34:0f:09:68:a8:8f:a3:cc:
e9:ce:01:1d:b6:11:37:7a:3a:10:dd:96:23:5b:4a:
51:b0:59:13:c8:46:d4:45:06:d1:f9:00:61:f5:1b:
f0:8f:1b:b1:5c:d5:15:1f:95:e9:9c:cc:bc:3b:b1:
21:23:da:4c:96:9c:a8:87:d2:3b:32:0e:b2:2e:d1:
2f:d0:47:36:c1:4d:2b:0a:e2:e5:66:50:fc:16:9d:
14:6e:02:59:47:bd:25:b5:82:cb:61:8f:46:62:ae:
e0:43:0c:01:20:f4:63:3c:44:b3:44:08:e8:6a:36:
23:be:9c:27:3a:c2:0d:2b:c8:a9:d6:ed:af:2f:4a:
c1:ba:7e:21:d9:ac:8f:3a:17:16:51:1b:f8:be:c7:
c3:dc:01:dd:34:ad:6e:dd:93:7d:92:6d:80:b4:5d:
e3:cb:42:d5:69:3e:54:2e:3c:f0:56:e7:92:81:92:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:60:56:A8:42:54:F9:52:54:83:E3:F3:B9:35:AD:6D:E4:F8:90:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05B553B4D96311EFAE70D494762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b7:3a:9f:6a:8e:3d:93:af:58:fb:30:bb:ed:e0:8d:95:73:
89:ec:b4:fe:6a:31:36:7f:30:4a:a6:01:b0:89:6e:66:fa:61:
0c:d3:ee:91:de:ce:88:b8:66:6c:a1:53:c5:0a:7e:46:00:1e:
06:0c:e7:26:aa:6c:99:f1:3a:aa:02:e6:2f:17:ec:84:cc:fc:
56:0d:71:58:df:63:6f:19:5d:cd:2d:99:b6:1e:e7:53:86:d3:
de:f1:87:60:69:d0:0f:86:73:0c:37:b8:02:c6:45:b0:72:da:
c8:21:78:ea:ac:8d:aa:d1:93:e3:67:89:66:4f:c3:54:15:4a:
dd:b0:a5:68:4f:dd:6c:44:4b:fc:5a:b7:a7:81:81:1e:d3:53:
56:33:2a:45:20:70:31:4b:0f:10:e1:3d:7f:61:b0:b1:3a:3c:
08:f6:aa:52:b8:c5:23:16:c0:96:27:83:1e:05:67:7b:2b:e8:
e6:8d:fa:cf:da:fe:6e:26:e1:14:91:ad:b2:d5:b4:5e:b0:4f:
92:e0:4f:be:5d:be:57:72:d7:b4:1e:f8:ac:66:3c:30:c5:2d:
7e:b3:0a:ff:6e:8f:6a:91:54:00:d3:1d:f4:cb:c3:3d:da:94:
e6:4e:3f:25:76:be:dd:70:45:49:94:4b:15:fb:7d:48:b5:d7:
7d:29:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:39 2025 by rpki-client