Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A7922AD50811EF8CED1660762E951A.roa
File: 18A7922AD50811EF8CED1660762E951A.roa (raw, json)
Hash identifier: lPMDkfdgn5gmkGA8uN8hDqOqNAaR6WmAIqzA0qJn/QU=
Subject key identifier: 17:D1:C6:B7:B8:1E:63:F3:7E:3E:18:B6:CB:CB:EA:6F:1D:3B:2E:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A7922AD50811EF8CED1660762E951A.roa
Signing time: Fri 17 Jan 2025 19:20:22 +0000
ROA not before: Fri 17 Jan 2025 19:20:18 +0000
ROA not after: Sat 22 Feb 2025 19:20:18 +0000
asID: 54801
IP address blocks: 154.218.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81193 (0x13d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 19:20:18 2025 GMT
Not After : Feb 22 19:20:18 2025 GMT
Subject: CN=678aad76-4d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:d6:8f:00:e5:39:a0:fc:d1:17:5b:01:04:
5d:03:df:c6:88:2b:4e:43:8d:64:34:75:4f:ae:19:
ef:c3:5a:b0:42:c3:5a:8b:98:0d:fc:ec:c6:aa:dd:
7a:d1:f6:37:9d:44:77:35:88:3e:3d:30:46:ca:91:
bb:e6:e6:04:5e:4c:6d:59:3a:db:fb:3c:66:dd:c9:
9c:67:ff:cb:db:e5:d7:61:11:51:ec:59:3a:7d:29:
47:5f:35:8f:9e:90:ee:5a:e8:df:d2:9f:67:b1:06:
48:94:63:85:46:d4:43:9a:fb:fa:71:18:10:6a:74:
44:69:ef:a3:1f:87:33:37:8f:7d:b4:3f:da:a2:18:
5a:38:d7:1c:45:75:6d:01:40:67:2b:75:ae:f8:22:
09:3a:29:27:05:b9:51:a4:ea:28:27:9b:b5:04:2a:
43:fb:7d:3d:47:4b:06:08:19:5c:20:36:65:6d:f0:
65:3d:bc:51:f7:1a:f8:b7:5b:19:7e:6f:2f:99:8c:
de:c4:98:9f:fb:50:aa:76:51:99:01:48:f6:fd:bf:
98:27:79:08:c7:df:82:90:29:a8:1d:da:ce:10:08:
0a:55:37:17:b1:cb:c9:06:d0:2a:b2:51:83:ec:97:
0d:ae:33:33:d9:92:bd:82:b4:52:e6:74:a6:3b:47:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:C6:B7:B8:1E:63:F3:7E:3E:18:B6:CB:CB:EA:6F:1D:3B:2E:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18A7922AD50811EF8CED1660762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:1c:1d:5f:cf:52:19:ce:14:8f:ec:2e:ab:3d:4b:e3:52:3f:
c6:4f:93:f1:c8:f3:4e:f4:6d:29:32:23:d8:e0:ec:11:db:15:
36:d5:4f:39:fd:e0:0b:6b:11:6a:c4:50:b1:6b:25:24:5a:bc:
ba:f9:ed:98:bc:f1:42:54:b0:2d:69:c5:63:ba:b8:76:a5:aa:
c3:f3:49:16:41:c5:e7:92:91:01:29:ec:0a:7d:88:5e:88:3f:
af:9a:23:b1:2b:56:1b:7d:88:41:60:40:6e:cc:93:05:c0:b7:
a9:34:b4:f8:6b:df:1c:a9:67:3f:ac:3e:f9:aa:89:c2:95:ab:
63:73:35:18:f1:a5:c2:45:81:c1:2d:ab:d2:69:58:e3:60:36:
a0:54:5a:e6:86:6e:0f:eb:55:47:44:0c:e9:1a:ac:5f:8e:9d:
4d:fd:ae:f5:f5:ae:4b:e3:78:80:4d:76:62:2e:7c:81:59:37:
ce:64:47:16:67:5e:87:4b:6c:ea:b9:04:cd:39:41:9f:d4:61:
da:5d:ea:91:88:0a:d0:fe:9c:0f:db:23:65:15:c9:5b:1d:1a:
96:f8:04:65:d8:cf:0d:89:29:09:e1:d6:cb:60:3f:87:af:4f:
9f:f3:ec:9b:74:3c:8e:b3:ac:52:a7:7f:42:9a:98:3b:df:f4:
2a:18:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:32 2025 by rpki-client