Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA4AD4AD96111EFB5A24A89762E951A.roa
File: 3CA4AD4AD96111EFB5A24A89762E951A.roa (raw, json)
Hash identifier: o69KtPlC6/eKFVpSFrGxKfOZjN+9B2VsY0p89NalaMY=
Subject key identifier: 98:CD:6D:E7:D6:3A:11:1A:E8:A6:2D:9F:78:58:7F:58:00:5C:FB:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01406B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA4AD4AD96111EFB5A24A89762E951A.roa
Signing time: Thu 23 Jan 2025 08:08:33 +0000
ROA not before: Thu 23 Jan 2025 08:08:29 +0000
ROA not after: Sat 08 Feb 2025 08:08:29 +0000
asID: 18229
IP address blocks: 154.210.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82027 (0x1406b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:08:29 2025 GMT
Not After : Feb 8 08:08:29 2025 GMT
Subject: CN=6791f900-fa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:3b:c5:aa:4f:2b:29:c2:ca:d8:73:b7:5f:
3c:dd:3b:5d:a1:69:1a:53:3b:45:48:22:f8:60:0a:
a6:57:31:17:67:b2:cb:95:f0:39:55:64:58:85:8b:
42:da:8e:20:ec:f0:75:6e:22:70:f4:ac:14:5f:69:
21:c8:b1:ef:eb:78:5a:cc:0d:d3:fe:31:4e:e5:c9:
93:2f:0a:d5:b4:03:bd:4f:c5:05:8a:10:58:39:31:
b1:ac:1e:6e:07:09:4b:92:d2:0c:cc:58:4d:8b:a6:
56:18:f9:65:05:c9:3f:d9:42:75:e4:c8:38:56:89:
af:28:2a:dc:d6:31:9a:a0:3c:5e:54:82:26:bc:2d:
71:03:a6:39:51:5c:f0:78:1d:18:31:a4:83:54:e6:
27:2e:d0:df:a9:6c:e4:80:c2:40:b6:87:f8:eb:ec:
96:67:c5:81:36:27:d8:f3:7a:6f:2f:81:d4:a4:73:
00:a8:9e:5a:c6:7a:15:cd:75:69:28:a2:32:0f:84:
43:1d:c1:b1:f7:50:60:52:1d:21:df:e9:e9:6b:9c:
6d:b4:77:b8:64:17:b1:93:c2:9f:4d:24:3f:97:3c:
2a:7e:0d:f2:e1:71:db:7a:17:28:89:9c:9b:75:02:
ac:35:30:03:62:66:60:ed:3d:7b:cb:f4:d4:17:16:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CD:6D:E7:D6:3A:11:1A:E8:A6:2D:9F:78:58:7F:58:00:5C:FB:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA4AD4AD96111EFB5A24A89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.182.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:78:3e:e0:43:7b:9a:03:ad:b6:5a:16:d1:7a:69:c5:ca:02:
be:ab:cd:26:1a:47:f1:77:e0:4a:82:2c:17:c9:00:af:d5:89:
95:15:91:fe:30:0e:9e:dc:7d:86:0e:89:8c:87:5d:f4:92:b3:
41:6e:a5:46:de:71:ea:c0:30:30:69:7c:3a:88:e5:9e:7e:e3:
9b:7f:dc:81:8d:4b:a0:0f:6b:c3:c8:bc:3e:c9:12:c1:b6:01:
c1:7b:a9:d0:8e:8c:ce:2d:14:a8:4a:47:5d:26:8e:90:ce:7c:
3b:e5:a2:14:e0:6f:4d:b1:06:24:d3:78:9a:9d:b8:cd:c4:93:
22:53:8c:69:bc:58:b9:f2:c3:b1:59:a9:52:71:3f:b7:b5:fd:
2f:b6:db:99:31:f4:71:7f:10:14:64:d5:5d:9d:60:1c:6b:e9:
d6:3c:11:f1:b4:49:5d:17:c3:10:e4:2d:a6:76:ae:ae:85:0f:
62:48:78:9d:8e:ef:41:2f:8c:6d:d5:92:7b:d4:77:5c:fc:eb:
24:b6:d3:f6:e8:c7:f7:b9:9a:fe:f7:a1:7f:59:8e:51:69:05:
93:8f:39:a9:db:a5:7f:ff:aa:c9:80:8b:29:08:d4:eb:75:8e:
fb:e7:97:e4:06:25:28:30:a1:b2:0c:a6:1c:19:ae:73:2b:e1:
c6:08:bc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:41 2025 by rpki-client