Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FA93014DA5911EF87367492762E951A.roa
File: 1FA93014DA5911EF87367492762E951A.roa (raw, json)
Hash identifier: h+l8lm08PViIHs0FWXY/m8qp5+VktG5yUdkdrIg+NdI=
Subject key identifier: 3C:4E:E9:73:18:69:B0:65:AE:A7:82:7D:CC:24:BA:5D:FF:16:CC:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FA93014DA5911EF87367492762E951A.roa
Signing time: Fri 24 Jan 2025 13:42:59 +0000
ROA not before: Fri 24 Jan 2025 13:42:55 +0000
ROA not after: Wed 05 Mar 2025 13:42:55 +0000
asID: 48031
IP address blocks: 154.218.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83873 (0x147a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:42:55 2025 GMT
Not After : Mar 5 13:42:55 2025 GMT
Subject: CN=679398e3-22da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:06:0d:5e:bb:00:24:b5:7f:f4:17:17:57:
c1:89:61:db:b2:fd:f9:0b:38:f5:63:bb:63:41:61:
51:98:4d:89:f8:c2:3d:5c:aa:84:82:6e:8b:fd:32:
ec:b9:40:41:c3:c3:be:23:9d:fe:7f:ab:ae:50:fd:
16:14:99:4e:51:24:6c:d2:7f:15:d1:c5:ab:7f:50:
2a:db:0f:ef:47:3e:d9:66:7e:0e:76:4d:42:a2:3f:
2f:e7:51:18:a1:50:9a:c2:93:6f:eb:ef:f6:1c:83:
a3:e3:b4:59:3a:63:5c:6c:73:f5:f4:53:e9:e0:60:
22:36:5e:22:73:8f:0a:a3:d3:e8:aa:d6:63:d9:ec:
05:f2:52:88:12:82:9c:98:2a:2b:d3:dd:e6:03:d4:
6f:b6:cd:8c:50:2f:65:42:ac:7f:b0:9a:7e:a9:cd:
c0:17:d8:a9:ef:be:e2:5d:da:81:9f:f2:f0:b1:90:
ef:4d:db:2c:ab:0c:0a:06:34:22:5e:6e:ef:b8:af:
07:8c:05:f7:17:1e:04:16:6a:bf:a5:d8:b4:d4:6b:
b3:74:ab:97:35:5b:48:be:91:ce:86:72:87:7c:ef:
13:c9:69:ee:d7:de:a2:75:13:d9:87:e9:2c:55:43:
52:11:45:32:f4:67:f4:83:6d:51:90:9e:21:7a:02:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:E9:73:18:69:B0:65:AE:A7:82:7D:CC:24:BA:5D:FF:16:CC:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FA93014DA5911EF87367492762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e1:85:86:d3:46:97:bf:6a:2d:fe:28:cf:59:71:48:a6:97:
6a:df:e8:f0:ea:71:26:e5:db:60:4a:c4:d5:c6:5e:7a:13:77:
6f:56:40:13:8c:51:f1:2d:18:a3:dc:bb:df:e6:b2:4e:86:30:
b8:35:31:4f:58:07:8c:3d:99:2d:0e:39:39:e2:e4:09:6d:0d:
c1:48:43:82:9a:43:d4:66:fd:cc:35:33:0a:7d:3e:21:41:32:
83:5e:9f:61:58:40:a5:dc:8f:e8:08:3d:83:39:b8:09:5c:0f:
e3:c7:88:81:d2:64:6c:c7:00:00:02:8e:1b:3c:2d:76:3b:30:
5d:bc:76:17:11:33:95:ba:eb:6d:7d:ae:59:94:54:6d:8d:c4:
69:a2:ea:f7:2e:59:6b:b5:ec:f7:fd:2e:54:89:46:ff:4b:d1:
31:8a:bb:6b:c2:f2:33:c3:6b:5b:6f:03:2d:9a:da:4f:6b:8d:
f4:a5:2d:44:3f:c7:4f:5d:4f:44:07:4a:c8:1e:66:40:74:00:
3d:cf:b6:44:6f:ab:6d:5b:29:0a:79:f1:2e:30:9f:03:9b:9f:
37:90:8e:11:05:6c:a1:df:a1:6c:6c:57:13:4a:9d:8c:4e:a2:
ab:1c:48:ae:28:63:be:fa:e8:ff:dc:79:c6:ed:40:da:c9:c8:
f4:d2:f7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:58:48 2025 by rpki-client