Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620E2314D8B611EF90CD098A762E951A.roa
File: 620E2314D8B611EF90CD098A762E951A.roa (raw, json)
Hash identifier: nhkhpYedoZu4F9YwtnLuqIXVYdgbfPQloYIRYwWixb4=
Subject key identifier: 29:0B:39:2B:26:9E:38:4F:96:86:C4:D4:BF:6B:76:71:90:95:D9:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620E2314D8B611EF90CD098A762E951A.roa
Signing time: Wed 22 Jan 2025 11:45:32 +0000
ROA not before: Wed 22 Jan 2025 11:45:26 +0000
ROA not after: Sat 08 Feb 2025 11:45:26 +0000
asID: 18229
IP address blocks: 154.210.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81680 (0x13f10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:45:26 2025 GMT
Not After : Feb 8 11:45:26 2025 GMT
Subject: CN=6790da5c-f443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:35:75:bf:0e:94:a7:8e:4f:82:9d:de:70:
1d:c9:7a:57:e6:59:18:4f:f4:27:5f:ca:1a:df:51:
86:e9:2f:1a:01:ca:25:65:32:76:b9:70:60:f1:4e:
4a:ea:9f:a5:59:11:cb:8c:fd:6c:4e:76:c9:db:f2:
51:10:2b:b1:e9:1d:5f:a3:5b:35:8a:6a:74:d3:c2:
d6:2f:fe:be:12:45:1d:30:27:4e:b9:ba:c8:94:1e:
b7:b4:39:9b:72:21:4e:80:c6:6b:be:1f:52:1a:87:
26:14:1d:8a:74:95:c6:fc:84:d6:70:c6:b3:b5:a3:
8f:d3:61:4d:db:d1:43:04:90:75:57:5d:a7:04:9e:
d9:60:32:e1:8c:88:23:36:7d:eb:e2:aa:6b:aa:7f:
d9:60:a7:eb:23:da:f4:05:f1:ff:46:6f:91:79:ce:
10:0f:11:68:47:d2:83:31:87:61:7f:09:09:02:8d:
5e:28:dc:de:df:bc:9d:cb:5d:51:71:ca:0c:96:58:
8f:8b:57:4a:52:64:31:98:d7:bd:33:b8:e9:51:b3:
eb:7e:11:f5:46:f3:80:17:d3:4a:61:4e:80:04:5c:
14:dc:61:48:41:1f:20:78:2f:7b:9d:98:b8:93:de:
0f:e4:70:55:dc:71:90:a3:b6:be:1e:e4:29:41:a1:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0B:39:2B:26:9E:38:4F:96:86:C4:D4:BF:6B:76:71:90:95:D9:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620E2314D8B611EF90CD098A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.203.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6f:8a:ba:9d:ab:c7:06:a1:80:ce:17:f5:5d:3f:11:94:6d:
d0:20:51:3d:28:22:b7:e1:98:1e:e8:01:05:34:d2:f4:cb:ef:
6f:f7:c8:fd:4a:52:20:03:df:fd:af:fd:5e:5d:7c:5d:f2:1d:
d5:c5:0b:a7:d2:f7:b6:e2:ee:65:68:c4:cf:79:99:73:ee:bc:
60:bc:e2:f9:c1:39:72:ce:30:b2:fc:12:d5:3e:11:93:db:e1:
a6:8a:a9:7c:9b:2f:31:f6:bf:5c:7c:04:5c:8a:a9:73:1c:50:
d3:e9:a0:79:cc:a4:93:ae:cf:a9:0a:e9:48:b7:c2:16:2e:50:
40:b0:6d:9f:cd:ee:fd:15:5b:0e:3f:e6:2f:c6:1a:b7:6c:9f:
62:83:e7:02:90:a3:5b:21:76:48:a6:e6:08:93:07:b4:58:ee:
2e:4c:0f:78:6d:c1:a4:f0:e9:4b:6f:fb:8f:75:62:a9:fd:73:
82:20:ab:44:ec:37:fd:83:f7:f6:25:58:31:6e:a0:c7:08:f8:
37:af:18:ef:fe:8e:f5:b0:79:9d:7f:cc:fc:cc:0a:6d:e3:79:
f4:31:9a:55:7d:ed:9a:a5:b9:23:ba:f3:37:b8:96:f3:43:57:
e7:be:32:bc:95:88:58:42:65:b7:5f:b3:7a:86:36:53:03:c4:
42:74:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:34 2025 by rpki-client