Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62C4A31ED8BB11EFA75A9CAB762E951A.roa
File: 62C4A31ED8BB11EFA75A9CAB762E951A.roa (raw, json)
Hash identifier: fUl9r9Q+UOi4m5CRg6/Dw5SH3oag7luF2roYW6Td8wk=
Subject key identifier: 52:D5:DE:F2:C3:3C:6F:FD:69:66:57:01:53:B7:4E:D2:6C:C2:EA:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62C4A31ED8BB11EFA75A9CAB762E951A.roa
Signing time: Wed 22 Jan 2025 12:21:20 +0000
ROA not before: Wed 22 Jan 2025 12:21:15 +0000
ROA not after: Sat 08 Feb 2025 12:21:15 +0000
asID: 18229
IP address blocks: 154.210.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81718 (0x13f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:21:15 2025 GMT
Not After : Feb 8 12:21:15 2025 GMT
Subject: CN=6790e2c0-de6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:10:95:29:01:1b:33:21:dc:1a:23:19:dc:
b8:09:68:23:d7:ce:8f:f8:3a:51:af:5a:dd:2b:aa:
d8:40:fd:a2:48:62:65:44:3e:aa:b9:0d:6f:63:80:
4b:10:b5:72:e3:35:ba:9e:b1:e4:3c:8d:75:f7:5c:
f0:fa:48:04:0c:16:eb:b2:cb:a2:47:af:42:da:f9:
e5:85:bf:82:9d:8c:39:a4:2d:31:27:3c:aa:83:24:
fd:5b:68:47:2d:88:5f:dd:60:1e:e7:a2:14:bf:2f:
ef:ca:fd:32:0c:f8:ba:09:07:35:ef:90:82:34:ba:
8a:3e:a7:86:5f:c3:f8:3d:cb:a2:cc:a2:a5:ef:7c:
c7:84:f0:bb:8e:c8:e0:8f:a5:98:00:bd:71:15:f3:
6f:7c:74:d5:0b:27:74:44:88:44:34:f4:11:06:49:
12:39:bc:43:53:de:55:1a:fe:d7:d8:fc:42:22:32:
c6:57:d4:62:dc:a9:dd:57:f9:ed:22:f2:04:24:c2:
ba:75:00:28:e1:cf:40:fb:3c:77:3b:04:b8:ac:55:
f3:5c:6d:54:0a:c8:94:4b:a0:a4:7f:af:ae:0f:67:
33:4c:3f:0b:62:23:76:20:3f:39:56:60:23:cc:68:
b2:a2:ac:72:30:ec:f6:8c:97:de:93:35:b7:8b:52:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D5:DE:F2:C3:3C:6F:FD:69:66:57:01:53:B7:4E:D2:6C:C2:EA:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62C4A31ED8BB11EFA75A9CAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:83:8b:45:af:81:05:fd:a4:ac:21:82:cc:39:1f:42:b9:de:
8d:b2:2c:ef:3b:51:fc:26:03:4b:f9:14:f7:21:32:01:0f:b5:
5f:d7:51:c2:99:d4:90:df:45:61:05:70:d3:e0:43:f6:1a:d2:
2e:85:a1:04:7a:27:8c:b1:22:cf:d4:43:a2:bf:db:bf:48:9a:
6f:b8:ca:38:84:f6:c4:33:0e:20:56:52:17:a4:71:4c:18:b1:
74:f5:8f:bf:0f:1d:e6:00:ea:ef:cf:e1:ce:bc:90:d0:2b:ed:
66:59:40:ea:81:d4:68:c9:34:3a:b2:d5:e6:e8:7c:9c:18:3f:
b7:42:ae:4b:6d:fb:98:aa:5d:7e:1a:20:42:7e:d2:86:15:b9:
8e:d8:ef:61:01:3d:b3:75:78:13:e0:f4:0d:79:26:03:bc:a2:
b9:1c:39:3a:5a:53:c4:c3:bf:37:16:f4:83:d6:4b:a5:36:61:
e7:50:12:61:e6:55:ea:1a:58:55:a4:d2:3e:ae:90:9a:63:3e:
c5:6c:f0:60:57:5c:16:da:b7:25:c0:58:eb:a3:b6:61:16:65:
52:90:70:70:38:12:cb:01:55:0c:44:b2:ee:01:e6:b2:8c:fd:
86:40:ae:59:93:32:ea:c0:8b:47:2b:44:c4:d6:98:9f:49:4b:
a6:f5:9d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:40 2025 by rpki-client