Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA45BBCD8B311EFBD695B74762E951A.roa
File: 0CA45BBCD8B311EFBD695B74762E951A.roa (raw, json)
Hash identifier: GhD+1WaKlQFwJwtbd9syaSeGQ0L4Mb53/ISpwH9Tf70=
Subject key identifier: EE:D7:A7:9A:B8:D9:24:F0:CD:73:A2:C1:74:9D:51:09:EE:29:1A:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA45BBCD8B311EFBD695B74762E951A.roa
Signing time: Wed 22 Jan 2025 11:21:40 +0000
ROA not before: Wed 22 Jan 2025 11:21:36 +0000
ROA not after: Sat 08 Feb 2025 11:21:36 +0000
asID: 18229
IP address blocks: 154.210.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81658 (0x13efa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:21:36 2025 GMT
Not After : Feb 8 11:21:36 2025 GMT
Subject: CN=6790d4c3-6509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:f6:50:bf:ba:16:c4:b6:a2:b4:8e:1f:9f:
76:c0:62:b1:f4:03:12:c8:61:c2:a7:b8:91:3b:45:
c2:88:90:45:c3:19:1d:f0:9d:a8:04:97:76:30:44:
71:26:8d:7d:18:73:df:df:7a:0e:b6:e1:de:e9:15:
db:7c:44:42:83:91:dd:da:b8:90:17:45:6b:dc:b1:
00:9d:c4:22:02:32:4d:7a:a4:e3:2e:1b:4d:2b:52:
96:79:3a:f7:12:9e:8d:51:68:d0:33:6d:ae:49:5b:
5d:23:95:26:b4:fe:a9:aa:c7:43:e8:70:40:8b:2a:
ea:1d:fe:a8:64:0d:b2:6d:b2:e4:34:6b:3c:37:04:
28:9a:00:9f:d3:e1:58:08:55:18:ae:f0:49:21:27:
2b:ce:6c:a2:5c:c2:b8:64:d0:7f:a7:b6:af:de:70:
31:a8:86:45:91:27:89:e7:64:9f:cd:c5:f5:ea:97:
a0:c6:c0:53:8d:c3:96:26:01:3a:de:56:14:30:90:
0e:b0:c3:0b:93:a2:c5:d6:f1:91:6f:e6:f9:33:81:
ad:45:27:ae:bf:d8:b5:7d:08:1c:df:20:9c:fd:ed:
29:4f:0a:7d:e5:5a:cc:ab:19:9d:11:8c:73:d4:ee:
47:26:18:43:32:c2:f9:27:27:2b:da:17:d7:d3:bb:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:A7:9A:B8:D9:24:F0:CD:73:A2:C1:74:9D:51:09:EE:29:1A:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CA45BBCD8B311EFBD695B74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.192.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6a:30:11:8b:e7:0c:79:2a:75:9c:8a:f3:b3:92:a9:09:89:
6d:fd:20:4e:58:50:82:2e:da:cc:1c:d5:b8:06:e2:d8:b1:ea:
b6:78:3e:d2:91:ac:50:56:88:09:ad:ca:4e:53:e6:19:ed:6c:
e2:36:6a:dc:90:02:40:93:85:73:00:77:3e:17:ac:52:56:75:
e6:57:43:59:f4:97:1e:77:3b:0d:b6:1d:d0:87:34:fb:4c:ff:
06:82:17:8f:99:6b:2d:0b:e1:c4:df:90:e3:84:f6:80:8d:6b:
b9:62:68:17:b9:db:55:f8:40:9f:e6:d6:ea:d8:35:e4:16:48:
fb:38:1e:ba:7c:2c:a2:e2:b5:6a:b5:2f:b0:ab:1c:a6:7c:47:
0d:80:34:07:d6:29:26:c8:7d:f8:3f:d5:5f:46:06:99:5b:3d:
7d:33:18:96:60:d4:45:0b:1b:53:dd:d9:04:67:d0:58:be:7d:
aa:4a:a8:94:0f:fb:af:45:b9:88:8d:99:28:7f:93:48:9a:df:
b1:29:4f:11:3c:64:b4:5a:56:4e:86:5f:29:5c:39:90:fd:d6:
c2:04:c2:58:ea:e4:0f:8b:e9:e6:05:bf:24:df:c9:3b:a7:13:
ee:0c:b5:c8:26:d2:ef:ee:77:f2:a4:cb:0a:58:78:72:f9:0e:
ad:66:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:13 2025 by rpki-client