Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2392E574D8BC11EF8B9335B0762E951A.roa
File: 2392E574D8BC11EF8B9335B0762E951A.roa (raw, json)
Hash identifier: i0YWg7MLpPxKeqSSEIxO6aaT09Bjh/CFmXJWe/ne4EM=
Subject key identifier: 33:AB:03:A6:73:CA:FB:50:7F:E1:73:09:B6:5F:77:4F:F9:A9:59:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2392E574D8BC11EF8B9335B0762E951A.roa
Signing time: Wed 22 Jan 2025 12:26:43 +0000
ROA not before: Wed 22 Jan 2025 12:26:40 +0000
ROA not after: Sat 08 Feb 2025 12:26:40 +0000
asID: 18229
IP address blocks: 154.210.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81724 (0x13f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:26:40 2025 GMT
Not After : Feb 8 12:26:40 2025 GMT
Subject: CN=6790e403-b285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:81:b6:4e:49:71:66:0b:41:73:c0:e1:1a:
22:53:25:bc:63:f7:9a:4e:92:a7:21:72:53:6c:f1:
6a:93:91:23:c0:f1:ae:7d:8f:d2:53:c4:a1:1a:9e:
35:4f:1a:3b:65:e9:50:9a:9a:15:0e:12:b6:7c:0a:
f0:ba:09:67:8d:f6:f5:bf:67:6a:c9:0c:dc:63:de:
d1:c9:2c:37:79:d1:f0:e5:1d:31:4e:aa:d9:5f:d2:
d2:0f:30:56:1d:66:d1:a4:7d:3f:b9:8d:40:0a:f3:
a2:e0:28:5a:41:fe:1e:71:b3:39:05:e1:42:33:c2:
c2:d4:94:5f:2c:16:bc:65:a0:5e:9d:93:38:d7:0a:
66:2e:d1:aa:3d:fb:02:48:52:fc:ab:90:79:20:02:
82:ba:20:4c:aa:12:23:75:43:9b:d3:bf:6d:3e:e4:
88:fc:e7:e3:36:bc:7e:d7:c9:af:d4:f2:6c:11:b8:
24:51:4c:11:27:43:28:39:29:49:c5:f0:94:42:e5:
d8:5f:46:29:73:f9:5e:21:e2:c5:e2:5a:80:08:e5:
5a:28:64:c9:e8:9f:3b:30:e3:53:09:c4:7f:b0:06:
7a:32:bd:41:40:84:05:b3:b2:4e:27:f2:82:8a:a9:
18:49:bb:cd:9e:bc:b7:90:45:14:c3:9a:ba:d7:11:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:03:A6:73:CA:FB:50:7F:E1:73:09:B6:5F:77:4F:F9:A9:59:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2392E574D8BC11EF8B9335B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:04:63:d8:d7:7d:84:20:97:db:40:1f:58:c5:c6:29:1d:59:
66:2c:fd:91:ab:e5:59:43:7b:aa:06:ea:11:3c:7d:9c:92:54:
74:b6:04:c4:5c:83:ca:90:e7:88:66:bf:6c:a3:43:65:8f:8f:
f4:13:74:0f:3d:e3:ea:42:fa:9b:06:b1:7a:08:47:18:a9:ad:
62:53:e3:62:d6:c3:f2:ec:e1:00:63:eb:c2:d7:55:07:d5:f7:
33:89:cc:a2:e0:62:28:6d:a8:f9:61:10:7a:72:85:d5:8c:ca:
43:42:e3:b7:31:42:d6:09:3f:7e:71:f1:30:79:91:3c:e5:a5:
c3:42:32:59:6f:cb:7c:49:7c:79:b9:8e:69:1d:8c:6b:72:37:
a0:62:65:5b:ca:3c:fb:17:26:76:ed:68:52:85:5b:91:b8:58:
e7:26:5b:1b:e2:81:92:0f:7e:74:5a:d5:65:1a:cd:ec:4c:ee:
0e:55:22:17:e5:c3:9c:72:a0:9e:a9:5d:d9:4a:c2:3f:9d:80:
54:3f:c6:01:52:cc:bd:7e:b9:3e:f9:03:56:48:03:2f:46:ad:
89:da:67:25:4f:43:4e:ef:e8:0f:30:64:78:fc:80:74:df:6f:
ba:89:5b:9e:29:f3:b2:f9:8c:b5:ec:de:70:c6:aa:15:2e:74:
c7:69:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:26 2025 by rpki-client