Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45DA6BF8DA5011EF83866255762E951A.roa
File: 45DA6BF8DA5011EF83866255762E951A.roa (raw, json)
Hash identifier: nSh3Lf28dYcx4Bo36lZToMMPNXW9KQEhXPZH0WZI6WA=
Subject key identifier: 08:E4:8F:CC:68:DA:16:E9:A0:87:E2:2E:21:20:E7:AF:00:CF:79:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45DA6BF8DA5011EF83866255762E951A.roa
Signing time: Fri 24 Jan 2025 12:39:38 +0000
ROA not before: Fri 24 Jan 2025 12:39:34 +0000
ROA not after: Sat 08 Feb 2025 12:39:34 +0000
asID: 18229
IP address blocks: 154.210.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83692 (0x146ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:39:34 2025 GMT
Not After : Feb 8 12:39:34 2025 GMT
Subject: CN=67938a09-84ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:75:0a:53:8a:44:6f:7e:86:2c:e7:8e:f3:
b9:d2:d0:81:62:47:91:3f:3e:03:37:cb:0c:6b:d2:
b0:52:2f:40:cf:5c:3e:77:d2:04:f4:12:63:21:dd:
3a:b2:b2:0b:80:1e:5a:cb:46:ae:30:c9:de:90:ac:
5f:07:0f:b5:d5:6e:0f:38:61:94:b6:07:42:10:ba:
8a:74:da:6f:38:c0:3b:46:0a:bd:04:bd:d5:ba:70:
68:3a:4f:24:34:a8:45:fd:4c:5d:18:5a:62:c9:0d:
76:f6:6c:57:64:b4:0f:09:a4:4f:35:8a:1f:ba:ca:
39:43:9a:2e:86:7c:d5:f7:59:70:a3:ed:8a:1e:c3:
57:8a:e5:f9:ff:de:cc:b1:99:d5:e7:b2:36:0d:25:
31:00:0e:56:e5:58:2a:f3:15:12:f3:40:61:ab:80:
57:a2:d9:ab:c7:b5:5b:61:9b:ed:3c:8d:e5:ec:4c:
cf:84:ed:0f:2c:5d:70:b6:93:c5:30:1e:6a:f5:fe:
69:55:b2:87:98:7b:ad:d9:8b:41:55:e9:2b:50:80:
a1:c9:71:90:ec:a3:70:87:1c:69:38:0d:4b:86:88:
b9:d3:9f:4f:60:8f:0a:e5:27:e7:8b:e9:02:e8:30:
20:7c:0a:84:8a:0a:af:c1:e6:dd:aa:44:7b:1a:a7:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E4:8F:CC:68:DA:16:E9:A0:87:E2:2E:21:20:E7:AF:00:CF:79:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45DA6BF8DA5011EF83866255762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:6b:78:8c:2a:3e:70:d4:a9:d7:db:54:56:09:20:74:b6:88:
48:4c:9a:21:b8:80:cd:88:df:49:f5:24:27:28:7a:0d:91:c2:
d2:d0:b3:80:f7:fe:e4:60:e4:aa:7d:c6:ce:2e:de:34:6e:50:
b6:a2:af:8b:e2:a4:3f:c5:a3:de:37:f7:97:5d:05:4c:f1:48:
69:b3:12:8f:0b:4d:df:e7:d0:bc:aa:47:94:7c:82:3e:a1:ed:
5b:df:9d:8c:df:74:64:7b:25:c1:09:5a:43:3a:71:a4:12:00:
3d:39:58:1b:04:d8:3b:1c:c5:dc:1e:9b:00:b1:c8:85:df:be:
99:30:93:66:e6:6b:a3:f1:d0:52:5c:37:a4:98:92:4e:78:65:
29:35:c9:60:72:b5:17:68:b0:c0:73:ac:12:fb:85:35:b4:25:
d0:fb:cd:81:83:6c:88:4a:61:39:3f:4c:42:2a:49:e2:eb:2b:
9f:c9:6b:8a:1a:19:0a:1f:33:2c:dd:03:2d:3c:f7:07:fa:19:
0b:1a:87:1b:f4:80:e1:c2:4e:2e:e7:70:80:48:c9:cb:e5:43:
93:d7:d2:75:95:7d:e5:31:c7:fe:a1:a2:4d:ce:90:05:13:44:
57:9a:94:89:7c:b3:56:30:55:32:1d:12:fb:26:9c:01:e7:c0:
63:1b:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:48 2025 by rpki-client