Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE28C5EDA4711EF85477B97762E951A.roa
File: 5BE28C5EDA4711EF85477B97762E951A.roa (raw, json)
Hash identifier: YfCSLWxdl+5iEaJprww+ZL5fRgYfkOmNxpMfx+zLvSs=
Subject key identifier: 08:AC:D9:14:CA:99:22:2D:C5:B9:3B:22:2E:AE:33:12:62:20:C3:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014621
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE28C5EDA4711EF85477B97762E951A.roa
Signing time: Fri 24 Jan 2025 11:35:49 +0000
ROA not before: Fri 24 Jan 2025 11:35:45 +0000
ROA not after: Sat 08 Feb 2025 11:35:45 +0000
asID: 18229
IP address blocks: 154.210.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83489 (0x14621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:35:45 2025 GMT
Not After : Feb 8 11:35:45 2025 GMT
Subject: CN=67937b15-52b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:06:32:81:58:a1:ff:3b:31:bf:69:ce:f0:
53:f6:1b:31:0a:8f:83:0b:45:a1:fc:cb:cc:a8:82:
bd:70:fe:45:11:34:63:00:1a:fe:fb:6c:88:41:d3:
46:44:21:8e:f8:d8:24:a2:92:90:7e:71:1f:8d:86:
1f:ec:67:8d:7b:61:9f:39:64:28:ca:e7:9d:a2:1b:
c0:29:c9:f8:5f:69:c6:db:b9:55:a7:71:40:a2:a5:
dd:5a:f1:27:0d:ce:d0:93:50:c0:4a:01:20:48:5f:
b3:3e:98:65:b1:47:3d:c5:c8:ed:4f:92:d7:04:c7:
c6:39:f1:d2:92:f6:e4:d9:dc:29:55:6d:7c:79:be:
eb:8b:87:5e:86:b9:c9:6a:01:e3:3a:c0:fb:3d:29:
dc:32:b3:e2:7f:2f:31:75:87:f9:7d:b8:9f:de:5a:
e9:9d:f7:6e:4e:31:86:b4:f6:b6:9a:40:59:16:1f:
11:df:c2:32:73:1d:23:77:29:99:01:96:59:84:d9:
46:27:bd:da:d8:14:c9:cf:0d:16:b3:55:e4:f4:e3:
36:67:45:cb:c9:08:3b:85:4a:d8:a7:9e:11:16:49:
ce:f9:13:d5:21:fb:0b:09:c8:ec:67:e1:ac:f6:5a:
9d:39:96:34:1a:59:c3:08:7e:fe:b9:ee:ab:aa:d9:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AC:D9:14:CA:99:22:2D:C5:B9:3B:22:2E:AE:33:12:62:20:C3:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE28C5EDA4711EF85477B97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.173.0/24
Signature Algorithm: sha256WithRSAEncryption
37:83:6c:ae:60:71:70:ef:75:6f:eb:0e:75:69:f1:78:2b:0c:
31:a7:5e:88:9e:9b:96:8f:17:3e:eb:3a:12:10:28:bb:0a:49:
63:90:f8:0a:91:25:f7:53:b3:8b:00:7c:0f:ed:2c:ea:54:19:
40:ae:92:fb:98:68:f1:0e:c4:81:00:77:07:40:13:de:81:9e:
1e:d1:1f:a0:b6:0a:95:09:f6:e3:07:51:04:c1:36:4e:b2:47:
9b:c2:ab:14:90:6e:9d:c5:89:df:99:87:be:59:e5:c2:73:b3:
f5:12:a5:8c:a2:1b:d6:d5:89:7f:02:75:78:73:a5:6f:66:84:
73:0a:59:f4:74:d3:88:e2:53:e6:94:72:1b:49:0d:ea:99:3e:
19:7c:25:61:5c:46:d4:9e:34:4d:e1:f3:47:57:d4:9d:a7:c0:
ed:84:e0:7d:63:46:3d:b0:57:22:6c:90:ab:88:4b:9f:a0:a7:
93:b9:bd:5d:9e:fa:a0:ce:4e:d9:2c:d8:6b:45:f9:84:56:bb:
51:ad:e1:eb:5b:0c:bf:43:a1:67:f9:36:eb:21:76:d9:41:6a:
77:35:bd:bd:5e:5b:10:5c:66:f2:ce:6a:dd:70:50:ae:17:de:
2d:6e:a7:b4:32:5e:2b:2f:32:df:17:66:3b:3d:57:13:ce:b5:
9d:ee:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:05 2025 by rpki-client