Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2785B95CDA4E11EF8DF43747762E951A.roa
File: 2785B95CDA4E11EF8DF43747762E951A.roa (raw, json)
Hash identifier: eurjMdXHmVMe0O//9BOV+Db99oRFu/uYulwtZTbPpds=
Subject key identifier: 0F:CF:71:07:43:3A:2A:4C:8E:3E:A8:42:6B:00:C9:C7:C8:5E:EE:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2785B95CDA4E11EF8DF43747762E951A.roa
Signing time: Fri 24 Jan 2025 12:24:28 +0000
ROA not before: Fri 24 Jan 2025 12:24:24 +0000
ROA not after: Sat 08 Feb 2025 12:24:24 +0000
asID: 18229
IP address blocks: 154.210.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83643 (0x146bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:24:24 2025 GMT
Not After : Feb 8 12:24:24 2025 GMT
Subject: CN=6793867c-e2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:c9:02:04:c2:6d:76:c8:ff:14:d2:57:1b:
c6:8e:9b:21:25:82:dc:ed:11:f3:98:9a:24:16:00:
a3:e9:75:ea:38:12:11:66:83:dc:84:23:1b:d2:f1:
e0:8c:06:e5:91:ac:ca:44:bc:73:2c:c8:ab:9d:a5:
5f:23:c5:02:aa:e5:30:34:3d:49:b1:1b:b2:3c:f6:
75:dd:66:29:e7:ca:fd:46:9f:94:cc:f1:d4:9e:a2:
fc:3b:d0:87:b5:93:60:03:2b:58:1a:ca:30:84:4b:
60:a9:6a:07:79:68:f8:66:e3:ba:55:70:f1:c4:e3:
42:11:5c:9f:96:14:e7:06:c0:17:b9:cb:6b:33:aa:
60:81:94:1d:04:81:04:bb:c5:67:22:3d:f3:23:d4:
3a:a2:81:46:1d:ed:65:e3:1a:4d:84:af:4a:2b:a2:
b3:e6:65:aa:ee:8a:57:41:82:91:5a:fd:af:e3:5f:
96:99:6f:0c:c3:b5:d4:0a:74:e6:38:e2:e5:93:04:
48:1d:09:16:7f:93:85:35:15:20:df:91:90:46:f7:
8d:e3:ab:fd:ef:b4:d6:51:a5:ae:cf:89:08:11:5f:
a8:31:ce:fc:0a:94:c0:2b:c3:39:9f:e4:db:d0:29:
46:ab:00:47:e3:8b:1a:02:14:a1:cd:42:92:44:b9:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CF:71:07:43:3A:2A:4C:8E:3E:A8:42:6B:00:C9:C7:C8:5E:EE:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2785B95CDA4E11EF8DF43747762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.157.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c8:0d:a2:6b:6d:a1:13:13:bc:16:a4:72:86:a9:50:1d:12:
a9:3d:76:ba:5f:d5:20:76:2a:5d:54:a0:56:f4:65:a1:9c:a6:
db:5f:74:bd:67:87:3a:d4:bf:88:2b:ee:7f:02:05:a2:97:75:
77:72:c2:cf:76:67:b6:8c:9a:fb:88:6a:bf:3a:a2:81:57:f7:
be:38:39:f3:88:50:a1:03:68:79:b6:12:37:d9:a8:fc:93:31:
56:ab:24:4b:70:74:b0:af:58:95:8d:07:84:b5:d4:57:5b:03:
ed:b2:14:2f:d0:a3:44:3f:d1:95:85:72:1e:e2:7d:67:ae:ed:
21:67:8a:21:ce:e5:00:6b:51:bd:62:0b:c4:04:c6:37:14:3b:
eb:6c:c7:0c:a9:f1:cc:aa:71:bb:08:65:49:ac:91:6f:e5:ed:
86:09:f5:67:49:14:51:fb:72:0e:29:a3:55:a3:3c:e1:1b:43:
62:24:d9:f3:0a:c2:6c:e1:95:f5:79:ad:fa:f1:52:36:57:ee:
c8:b8:ac:ae:6b:b7:78:94:fa:1e:49:b0:20:50:ea:3f:e5:71:
ff:e3:90:ff:df:9c:dc:fe:0f:20:43:ec:92:8d:2f:ea:5a:4f:
64:4c:e2:f3:60:cd:83:fc:4c:0e:e5:bc:ba:9a:98:87:e3:5f:
3c:72:ed:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:47 2025 by rpki-client