Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CCC69B0D8BE11EFBD5BDABD762E951A.roa
File: 2CCC69B0D8BE11EFBD5BDABD762E951A.roa (raw, json)
Hash identifier: LW3EkYVP0aT9AGBM/b2atchheumKUzMSRG4AL9r+1Vg=
Subject key identifier: 3F:D1:A5:8C:70:CA:A4:31:00:16:18:C2:FC:6C:88:E3:36:37:25:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CCC69B0D8BE11EFBD5BDABD762E951A.roa
Signing time: Wed 22 Jan 2025 12:41:18 +0000
ROA not before: Wed 22 Jan 2025 12:41:14 +0000
ROA not after: Sat 08 Feb 2025 12:41:14 +0000
asID: 18229
IP address blocks: 154.210.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81742 (0x13f4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:41:14 2025 GMT
Not After : Feb 8 12:41:14 2025 GMT
Subject: CN=6790e76e-3611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:eb:2f:14:4a:a7:95:4b:a0:89:09:7a:a0:15:
19:aa:a1:f8:4e:a3:cc:ea:22:fc:b8:75:c9:a4:36:
a8:9b:e3:4a:46:39:9e:bf:42:5b:b0:9f:d1:0b:18:
c3:90:a4:a2:ef:9f:b4:f6:a3:34:2f:34:64:ed:26:
c1:f4:c7:ff:99:f4:76:3d:67:ad:1e:04:78:fe:db:
02:9c:ba:41:05:4e:91:f8:0d:62:d5:ac:e2:11:1c:
bb:5f:4f:de:63:42:87:0b:aa:67:96:fe:d4:43:b8:
4a:49:7d:8e:1e:88:84:6f:04:f6:b4:57:b0:12:1c:
3b:72:8b:82:da:e4:0e:fc:d6:73:32:0a:6b:d0:d5:
57:c6:a8:83:be:66:3e:7c:ac:67:ac:d9:d0:28:0c:
0b:96:72:9e:17:a5:d3:57:e8:bb:28:35:07:46:68:
0a:45:9f:aa:91:69:87:29:19:88:32:b9:df:7c:6c:
bc:67:8d:c8:88:07:14:b9:10:62:b2:8f:ea:76:87:
8b:11:11:48:84:07:93:49:02:eb:d0:c9:81:35:d1:
a7:9a:93:3b:3c:9e:a7:03:b5:05:42:ec:09:86:27:
44:8e:2f:d4:38:3f:06:f6:f9:d4:f9:14:9d:71:fa:
8a:ce:c2:71:46:bd:b8:fd:62:24:45:59:df:80:d9:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:A5:8C:70:CA:A4:31:00:16:18:C2:FC:6C:88:E3:36:37:25:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CCC69B0D8BE11EFBD5BDABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:50:a4:6e:d8:3b:d6:ae:c7:9a:0e:51:b6:3e:a7:51:24:d1:
60:b1:77:ea:bf:76:35:91:27:a9:31:28:5b:ae:03:d6:ea:f0:
f9:ce:19:84:f8:e2:e1:c1:14:5e:18:fe:dc:f9:b7:e2:12:32:
2b:8c:92:a8:55:f3:88:5c:a1:7f:16:aa:75:7c:02:8e:da:46:
75:ae:e1:f1:50:47:ef:d0:6e:5f:c8:9c:f2:a1:57:b3:36:20:
92:36:65:2d:fc:ec:d0:a4:b5:5c:b6:3c:cd:46:3e:6c:ee:63:
c1:d7:7d:86:5c:ef:c3:f9:5f:f2:de:34:d2:67:3f:68:b4:76:
07:e2:70:64:52:eb:1c:6b:4e:b4:2d:57:c0:38:88:bd:8f:8d:
47:88:bb:cc:25:70:dc:56:4b:c4:77:1e:9b:00:24:19:3b:ec:
55:98:08:7a:9c:ee:4e:f4:2f:0a:42:92:96:64:4b:26:e2:72:
7a:93:30:a5:12:cb:da:90:f9:26:4d:31:ee:eb:eb:9e:b1:d9:
29:28:5a:b2:14:9c:5e:02:ee:92:cd:b3:b6:f7:37:e5:f5:fe:
01:89:02:2f:d6:a1:98:89:da:62:84:9d:65:c3:0e:bd:87:03:
5d:e3:aa:42:0b:d4:65:c4:1a:2b:97:f7:1e:b2:87:f5:0e:d5:
ba:6c:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:03 2025 by rpki-client