Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519A9642D95C11EFBBED5968762E951A.roa
File: 519A9642D95C11EFBBED5968762E951A.roa (raw, json)
Hash identifier: S9r2VGcaetF9oQY3xpqN7g6DuRQujd5EdGrbGQDLUOY=
Subject key identifier: C2:84:C8:F5:C8:A5:A7:B0:23:DB:D7:66:FA:D0:43:98:F9:7D:D6:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014045
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519A9642D95C11EFBBED5968762E951A.roa
Signing time: Thu 23 Jan 2025 07:33:20 +0000
ROA not before: Thu 23 Jan 2025 07:33:16 +0000
ROA not after: Sat 08 Feb 2025 07:33:16 +0000
asID: 18229
IP address blocks: 154.210.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81989 (0x14045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:33:16 2025 GMT
Not After : Feb 8 07:33:16 2025 GMT
Subject: CN=6791f0c0-a524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:3b:2a:0a:b9:d2:9b:28:8b:d0:5c:84:26:
f2:e3:f5:ba:be:92:29:d4:53:80:ef:90:af:c7:c3:
f9:db:51:16:e6:e7:7b:6d:db:43:0c:13:4e:0c:62:
dc:12:9e:63:2a:94:d7:74:3b:34:42:68:7c:45:8f:
e0:4d:a6:ab:5c:5d:c9:9d:ba:a0:bf:10:fb:5f:64:
7a:a9:e3:44:24:db:7a:eb:8f:c2:98:93:8c:9e:6e:
a4:e6:2e:64:f6:fe:cc:6b:62:44:1f:a7:90:67:ba:
78:a5:b6:31:fb:98:12:e8:29:5b:71:1e:be:05:59:
a8:f5:6c:ba:3d:3c:31:b4:26:aa:53:e5:5a:5c:11:
f1:a9:e9:f6:f9:73:9f:a0:a4:35:42:4d:9e:9c:72:
6d:b4:6d:3b:6f:ab:a0:d8:e2:bc:88:02:d0:5a:c4:
dc:60:a1:12:76:13:a6:e6:2f:eb:d4:6e:c3:1b:18:
25:57:0c:97:e3:7f:92:9b:9e:b1:3f:54:b6:cc:07:
15:c0:2e:2c:28:51:8f:3d:46:ce:84:53:07:02:00:
4c:a5:e1:14:78:48:07:6f:6c:b8:56:43:d6:40:9f:
5a:7d:ed:67:f2:9d:54:da:41:81:e0:de:47:46:fc:
cd:ee:46:f7:e3:33:6c:bb:5f:6a:f3:2e:53:56:0e:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:84:C8:F5:C8:A5:A7:B0:23:DB:D7:66:FA:D0:43:98:F9:7D:D6:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519A9642D95C11EFBBED5968762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.163.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ee:25:7e:48:50:3b:a6:2c:70:3d:9a:32:3c:de:bd:9c:3d:
90:e2:fb:92:29:06:be:1a:96:f0:1f:ee:fb:c1:d0:ae:4e:90:
09:cf:04:30:6d:a6:06:7a:74:11:2b:84:43:da:15:76:7a:f8:
bd:d1:c5:c0:9c:8b:6f:66:c0:cb:c5:9b:e0:64:49:d7:30:f2:
b0:e4:d7:f4:7c:09:ff:36:83:fc:03:de:e0:0a:1c:89:3b:30:
bc:62:34:e2:ac:ad:42:19:7a:16:15:a4:1d:e7:33:23:c6:11:
63:36:a5:0f:16:f3:42:11:43:dc:08:86:a6:94:73:f2:00:f1:
25:7a:a6:ba:74:65:4b:f3:79:ca:9f:f3:dd:ec:71:65:8a:47:
7a:28:e2:a2:97:66:53:e3:d0:f1:c5:a6:87:a4:7b:4a:e9:f5:
bf:d4:58:2b:c0:0a:d1:8b:93:de:f1:dd:8a:78:15:43:85:a2:
2b:98:5c:44:ae:c7:e2:7c:1e:59:e4:2b:f1:51:08:1c:a9:fd:
10:c1:ff:59:c3:03:63:72:f9:99:e6:df:32:2d:52:98:df:30:
69:cf:ca:6e:47:be:66:82:3c:15:45:4e:18:39:40:50:ea:66:
0d:6c:88:fa:b6:11:83:1b:d8:3f:92:9d:6c:3e:ef:c7:80:12:
cc:0b:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:04:26 2025 by rpki-client