Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B764C6D8AC11EFBBC6D645762E951A.roa
File: 24B764C6D8AC11EFBBC6D645762E951A.roa (raw, json)
Hash identifier: QkStszhX4NJu5q+Q1NkOizJsepBHdVqPLcxSQ1AMFy8=
Subject key identifier: 30:5D:6A:BF:0D:82:88:FA:24:AF:0A:FA:EF:BF:D0:73:D8:FA:81:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B764C6D8AC11EFBBC6D645762E951A.roa
Signing time: Wed 22 Jan 2025 10:32:13 +0000
ROA not before: Wed 22 Jan 2025 10:32:10 +0000
ROA not after: Sat 08 Feb 2025 10:32:10 +0000
asID: 150008
IP address blocks: 154.210.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81606 (0x13ec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:32:10 2025 GMT
Not After : Feb 8 10:32:10 2025 GMT
Subject: CN=6790c92d-b190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:a6:46:52:60:b3:ba:df:e3:a4:5c:f9:ff:
08:9f:4a:24:2b:35:4c:f2:d0:81:fe:8b:e0:64:98:
3f:62:c2:ff:b8:bf:bc:f2:bc:c5:cb:66:f0:99:56:
97:b2:c4:21:ce:f5:4c:84:5f:a9:6c:c8:27:ba:81:
ec:a9:37:7d:91:fd:84:d6:6e:60:a0:87:d0:a0:89:
6e:11:a5:61:f0:42:01:64:50:d7:d4:83:94:48:7a:
70:61:a1:8b:87:2b:a0:1e:31:46:8a:5e:4d:05:b8:
64:f7:f5:bb:63:f4:d4:81:1b:82:ef:6c:31:63:a7:
bf:8a:1f:23:b2:2a:28:a2:0d:8c:20:03:ca:bc:e5:
86:58:82:9c:b9:b3:95:f4:ee:01:f8:75:49:8b:4a:
66:9c:2d:b2:47:fa:20:d0:9a:69:e0:75:dc:e6:0d:
36:fb:80:e0:ea:ca:ef:a6:b1:dd:3b:9d:f6:e5:d3:
f6:a6:ad:f7:a6:2a:d8:30:65:51:21:b7:66:a5:c3:
04:2d:25:7e:ec:62:cb:0a:87:4d:c6:ad:2d:6f:ff:
01:33:7c:12:f6:60:99:26:74:a7:b5:60:5c:08:c2:
8d:02:9f:8e:61:0c:ce:ae:01:14:68:c7:aa:4c:f7:
55:90:92:b4:c1:47:18:8b:d7:e0:7d:36:dc:f1:13:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:6A:BF:0D:82:88:FA:24:AF:0A:FA:EF:BF:D0:73:D8:FA:81:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B764C6D8AC11EFBBC6D645762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.232.0/24
Signature Algorithm: sha256WithRSAEncryption
95:dd:36:f1:a8:01:39:ee:8e:77:0d:77:64:e6:f3:62:d7:b1:
4c:7e:d5:f8:8d:4c:87:f5:16:d7:f0:d7:01:5d:80:c0:b2:e1:
db:1b:a8:9c:f7:84:14:5a:34:b0:67:2d:4e:d8:e1:e4:79:9b:
e0:53:9a:6a:f6:c5:d7:70:63:1c:4f:74:86:47:9c:9a:45:a3:
75:28:82:a5:84:22:ff:b4:e7:67:16:72:b1:dd:22:8b:86:dc:
b8:23:b2:ab:da:4c:33:c1:ac:ef:2d:f5:36:7b:61:24:68:ef:
6f:fc:5e:0c:8d:73:c4:79:bc:26:65:16:48:2b:eb:c4:53:d3:
a1:92:82:83:bd:63:87:28:3f:5d:b9:a3:d7:a4:2f:92:48:9f:
51:29:4c:24:83:99:04:d6:f6:ab:e6:d7:3b:59:b2:03:36:d5:
7e:3f:67:9d:6a:50:fb:3c:2b:6b:1f:ef:cb:f5:54:44:7e:7b:
e0:da:1a:e7:95:d8:2b:ff:d2:a4:de:e1:5e:30:b8:09:64:84:
58:0f:f0:d3:51:7c:42:d8:93:3d:9c:9c:68:2a:3d:ed:9f:e9:
1b:90:9d:71:87:60:8d:ed:e9:fa:cf:ae:8e:52:7c:13:1d:08:
6a:c4:37:ec:7e:85:58:7e:1c:d1:2f:a0:8e:66:71:20:0d:94:
3f:1a:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:33 2025 by rpki-client