Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58EE4C92B21311EF90832E7D762E951A.roa
File: 58EE4C92B21311EF90832E7D762E951A.roa (raw, json)
Hash identifier: BifDrHYME72qRUByLU+JZZOghoSRy/F3IhJZlxlUco8=
Subject key identifier: 8C:8E:12:D6:77:9D:45:49:C4:67:15:04:4E:AE:5E:6B:DA:A4:0C:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58EE4C92B21311EF90832E7D762E951A.roa
Signing time: Wed 04 Dec 2024 07:42:44 +0000
ROA not before: Wed 04 Dec 2024 07:42:40 +0000
ROA not after: Sat 01 Feb 2025 07:42:40 +0000
asID: 18229
IP address blocks: 154.210.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71620 (0x117c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:42:40 2024 GMT
Not After : Feb 1 07:42:40 2025 GMT
Subject: CN=675007f4-b81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:3d:9f:1f:af:2c:2d:8d:83:73:07:fd:17:
57:26:5a:6f:34:84:30:25:58:cc:c0:70:dd:94:21:
e8:8d:4e:aa:58:2b:de:89:42:58:0b:f1:78:61:e8:
a4:33:38:01:a7:42:ff:da:95:03:4a:af:5e:d4:9c:
94:fc:ce:19:97:7e:d4:be:38:6a:e6:d3:34:08:08:
a4:34:8a:83:b3:a7:85:70:83:a9:ca:7a:78:9b:7e:
3b:b0:c2:36:98:6e:93:74:a2:c2:16:4a:e0:5c:ff:
c4:6c:83:0b:a4:bb:af:7b:c5:74:ea:14:8b:ea:84:
5c:34:90:36:f7:03:8b:3d:91:78:79:5b:a2:a1:90:
05:80:f9:ee:ff:e8:cb:92:bd:1f:b6:fa:09:1f:f6:
d8:b1:65:cc:1f:51:43:d9:10:eb:f5:fb:a0:d3:02:
2d:dd:02:9c:c9:fb:7e:91:02:3b:c8:37:89:e4:bb:
92:7d:c7:ce:a8:d9:19:73:f2:99:e3:64:2b:5f:10:
ed:f4:e7:c1:47:f6:70:b1:50:af:ec:d4:3b:47:72:
14:a6:c6:59:88:d1:22:38:7e:4a:e1:5d:a4:af:2d:
2e:9e:d3:08:fb:7f:e4:0a:a3:5b:1c:cf:7c:b0:d5:
70:50:3d:e4:bd:2e:32:de:71:99:24:ee:86:b3:ac:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8E:12:D6:77:9D:45:49:C4:67:15:04:4E:AE:5E:6B:DA:A4:0C:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58EE4C92B21311EF90832E7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b2:1a:89:ea:d3:18:2b:63:f1:08:bb:d2:89:19:3b:5d:0d:
04:78:bb:29:1f:99:50:eb:d1:ad:cd:e0:f5:c3:89:bb:12:e9:
44:39:ce:c1:37:f4:30:59:98:1b:67:09:ee:1f:f9:d7:b7:c5:
c9:8e:f1:0d:3d:4b:88:40:24:0e:a3:90:c2:c3:ce:41:b9:40:
fd:25:81:75:90:6b:05:36:18:45:c5:c8:e1:37:96:54:7e:e0:
42:d6:54:f2:27:da:0f:ff:89:a4:6c:b4:d4:62:9a:67:3d:05:
52:ad:27:fe:35:37:66:9c:a0:f2:96:ae:c2:f1:54:3c:f7:da:
03:88:6d:15:23:f0:4d:46:f3:f3:6b:5e:5a:82:c2:fd:c6:e5:
b6:d4:a7:2a:b6:f7:32:ba:c2:bf:27:5c:2b:b3:d0:35:c5:b5:
51:12:7e:a1:19:87:e1:f0:c4:23:8f:cb:97:9e:d1:35:45:8c:
65:63:4e:57:6f:75:bf:97:3d:2d:f0:09:cb:7e:2a:27:fe:48:
37:fa:20:7e:a9:ae:8c:5f:5c:8e:ef:e1:67:7f:c0:f5:19:24:
73:b2:64:cf:c2:cc:03:52:c5:81:0c:b6:14:b5:9f:8d:57:e2:
51:e3:9e:0b:63:bc:02:52:31:5a:a5:57:66:e7:8d:11:0d:2d:
74:77:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:04 2025 by rpki-client