Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2733D1ECDA5211EF94922363762E951A.roa
File: 2733D1ECDA5211EF94922363762E951A.roa (raw, json)
Hash identifier: 0Mrk0uYphUKTTEZfa4guzgsh2y9AzDj4Sv0lwsGAp3o=
Subject key identifier: 85:AC:F7:49:EC:65:4F:38:5A:80:C0:3E:3F:12:A3:03:2F:4E:85:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014719
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2733D1ECDA5211EF94922363762E951A.roa
Signing time: Fri 24 Jan 2025 12:53:05 +0000
ROA not before: Fri 24 Jan 2025 12:53:02 +0000
ROA not after: Sat 08 Feb 2025 12:53:02 +0000
asID: 18229
IP address blocks: 154.210.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83737 (0x14719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:53:02 2025 GMT
Not After : Feb 8 12:53:02 2025 GMT
Subject: CN=67938d31-6d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:9f:54:c5:7e:71:67:85:80:a2:83:c8:2f:
3b:d6:f4:e8:3d:10:ca:f4:25:1e:60:f5:02:a3:4c:
74:62:ab:03:24:72:f9:4d:f8:a3:e2:66:0a:04:32:
ab:24:49:65:b6:75:ff:2d:12:74:3d:28:37:84:d4:
55:c0:81:5a:8b:f4:7c:d9:3f:0f:11:7b:62:02:42:
c2:b7:59:6b:7a:38:5f:88:dd:71:09:9f:65:25:9c:
1b:25:07:3e:7c:a4:77:e1:63:f6:56:76:9a:cd:e9:
d4:93:c0:da:34:fe:da:32:c9:e4:19:30:17:76:29:
69:4d:5e:f1:d8:ee:e4:d4:26:71:6f:9c:c5:ba:f3:
59:71:8c:fd:ee:0c:aa:80:11:78:ba:4d:6c:d3:8c:
e8:cc:19:6a:28:d3:8b:39:48:27:73:91:fa:92:90:
1f:5d:c7:1b:f3:0e:35:5f:aa:2a:47:bc:39:7a:dc:
09:4f:25:f5:52:f9:ab:d3:0f:12:36:b7:bf:96:8e:
b9:dd:53:ae:9c:9d:aa:d0:74:b4:7b:03:de:29:e8:
5b:f7:a5:7b:4a:78:c9:19:77:64:08:a5:09:7b:a9:
bc:57:60:51:15:fd:98:fa:58:d3:55:b3:af:14:6f:
90:80:ac:aa:5d:b3:76:43:06:98:98:d5:9c:3e:63:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AC:F7:49:EC:65:4F:38:5A:80:C0:3E:3F:12:A3:03:2F:4E:85:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2733D1ECDA5211EF94922363762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.170.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e8:1b:1e:9e:a8:86:55:b0:00:0f:a2:64:17:b2:c6:4f:e4:
f5:b5:99:e9:3c:39:f9:81:c2:52:38:36:d9:c8:ed:78:8d:5d:
5c:c0:af:1c:10:64:b1:4e:e7:21:0b:dc:20:17:e4:d6:39:fe:
0f:70:4d:ac:2a:75:99:0e:63:ab:6a:4c:09:b8:fb:00:29:89:
7f:2e:67:d4:02:04:09:4f:45:05:59:bc:5d:5a:a2:87:d4:f5:
33:f6:f7:e5:0a:6d:24:c1:28:72:08:6b:5f:5c:54:b9:6d:6a:
02:95:f2:65:2e:5a:e6:09:33:6c:69:34:1a:b0:11:73:78:24:
75:2b:a7:d4:88:f0:16:c6:d6:cf:70:ee:b0:48:c1:bb:80:6c:
1e:c4:06:42:84:91:e6:ea:68:64:98:15:ff:3b:22:fb:87:dc:
40:00:9a:35:44:98:b3:49:2c:19:4c:ad:01:77:28:9f:88:4d:
e0:d5:25:5c:d4:d6:0c:c6:3b:b5:7f:7a:4b:fa:92:be:2f:65:
64:8a:fd:ea:34:82:3d:9a:b4:50:f0:47:48:9a:d7:72:9d:3c:
cd:6e:e7:66:da:ec:04:3c:59:70:f0:ef:20:0c:09:9b:82:2d:
02:2b:de:dd:ef:58:99:ff:46:c9:bd:ce:62:12:5f:e8:c3:36:
e0:d8:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:31 2025 by rpki-client