Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA6EF1CDA4911EFB378DEA4762E951A.roa
File: 2EA6EF1CDA4911EFB378DEA4762E951A.roa (raw, json)
Hash identifier: qM1+XDeaca0G2BnReBcVAP4UwD5zIJaTPVI1zvSVMYI=
Subject key identifier: D9:18:5A:D0:C3:AA:07:7F:65:28:13:19:D3:61:39:16:9E:37:CC:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014648
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA6EF1CDA4911EFB378DEA4762E951A.roa
Signing time: Fri 24 Jan 2025 11:48:52 +0000
ROA not before: Fri 24 Jan 2025 11:48:48 +0000
ROA not after: Sat 08 Feb 2025 11:48:48 +0000
asID: 18229
IP address blocks: 154.210.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83528 (0x14648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:48:48 2025 GMT
Not After : Feb 8 11:48:48 2025 GMT
Subject: CN=67937e24-e8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:5a:c7:7a:b6:79:f4:b1:ec:59:8c:0b:a8:
94:a9:9d:54:dc:f1:ef:52:cd:7e:62:26:c6:1e:56:
8b:af:b1:48:81:ad:ed:e6:f0:7c:2c:cf:1b:90:a3:
8b:e5:64:1a:f9:37:36:b6:7a:ca:63:e1:2d:30:0e:
fd:23:58:be:1c:2c:66:aa:cf:62:cb:2d:59:f0:62:
23:98:1a:45:f5:bf:a8:de:01:ca:f6:e9:88:62:9e:
0a:ea:42:62:23:67:40:ff:3b:4f:8b:aa:90:29:51:
07:0c:45:f8:65:18:52:c4:23:1f:46:12:c5:ef:b3:
67:76:d7:18:1a:42:66:4a:59:d8:bb:48:d7:b1:1c:
22:71:fd:b1:fb:c9:91:5c:d3:6f:3b:10:7f:85:cd:
67:09:71:95:7d:1c:b3:e4:fc:fe:ca:ef:fb:df:9f:
dd:e1:c7:32:f5:9d:50:81:20:fc:cf:fe:55:18:fc:
97:da:ab:b4:13:d0:1b:03:77:74:85:2e:46:98:81:
59:f5:27:ab:59:c4:17:26:60:f3:32:0e:ad:bf:26:
68:8d:d1:73:f6:5b:2d:ae:9b:3c:2e:f9:40:a4:e7:
4c:86:42:68:32:36:61:b6:13:5b:e7:bd:54:df:c2:
a8:34:df:0b:58:f0:71:e6:f4:d1:17:11:34:d7:83:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:5A:D0:C3:AA:07:7F:65:28:13:19:D3:61:39:16:9E:37:CC:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA6EF1CDA4911EFB378DEA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.179.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:70:5b:05:a2:8e:d7:49:4c:ca:85:88:98:bc:16:51:6c:19:
e6:d5:fa:91:e4:94:ab:6d:a2:05:a8:8d:42:7f:c6:75:e8:48:
f8:7f:ad:06:4d:ff:94:47:94:b3:86:46:4a:5d:7e:b0:0f:70:
9f:23:2c:b8:57:99:c8:f6:29:0f:3f:be:c1:6d:42:77:ce:b7:
3f:28:ea:a3:60:69:e3:37:1a:ff:74:37:b9:f4:b9:4f:39:7d:
80:c2:41:b4:c6:ce:e5:1e:e8:6f:ea:ee:64:bb:91:19:cb:83:
7a:9b:23:53:51:8d:27:a0:bc:51:51:c7:d9:d0:55:0d:e6:46:
b8:46:a0:c9:d6:95:84:a1:0b:de:a3:3a:e2:c2:b9:45:96:9c:
e7:f3:46:d8:5d:b0:20:16:dd:d2:98:55:8a:12:56:b8:2b:e3:
70:a6:64:c1:e3:b4:34:19:04:c8:cf:7e:c9:0f:d1:63:dd:6a:
5c:75:63:b1:17:38:72:72:5c:b4:2b:37:f8:e8:7e:7d:10:bb:
53:e3:6b:f7:ef:7d:fe:b4:c9:d7:d2:64:4d:0f:48:5e:3a:77:
71:7e:d1:9f:a1:f7:9a:2c:00:5a:03:06:fb:e2:03:1c:d6:c9:
2c:9c:ec:a0:30:43:8a:5d:77:09:f8:4d:65:f1:4a:24:80:01:
6a:5a:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:13 2025 by rpki-client