Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E8E94EED95911EF9528FC55762E951A.roa
File: 7E8E94EED95911EF9528FC55762E951A.roa (raw, json)
Hash identifier: FL2nSqEF/klIjKuc4wu6gtBQyxC5+qQV3MNS8r1aot4=
Subject key identifier: 9F:DE:5D:62:5B:3B:CA:79:70:3C:39:E3:DF:E7:23:A9:25:C7:B8:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01402D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E8E94EED95911EF9528FC55762E951A.roa
Signing time: Thu 23 Jan 2025 07:13:07 +0000
ROA not before: Thu 23 Jan 2025 07:13:03 +0000
ROA not after: Sat 08 Feb 2025 07:13:03 +0000
asID: 18229
IP address blocks: 154.210.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81965 (0x1402d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:13:03 2025 GMT
Not After : Feb 8 07:13:03 2025 GMT
Subject: CN=6791ec03-3e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:bd:8a:ab:97:2c:ee:3c:09:62:b3:80:d6:
e3:62:e8:f8:08:2d:38:e7:04:d4:bf:0e:67:af:e7:
18:38:98:81:a0:bd:5f:38:d0:0b:54:a5:17:6d:9f:
51:d3:8a:cc:f2:57:71:d6:e4:bd:52:fb:34:4c:85:
e2:4f:dd:77:f4:5e:8d:75:a4:ed:20:45:76:1a:ad:
1f:2a:57:67:2a:47:bc:94:a8:31:3e:c7:4e:d7:c7:
3e:a0:6c:71:03:dd:eb:7c:47:26:3f:08:8b:61:57:
6c:f3:70:cb:47:5f:90:83:36:22:d7:a2:ae:39:82:
f5:c8:e0:85:2e:a6:6c:04:04:58:1f:24:40:e3:0d:
8f:e3:a5:2d:02:54:81:01:91:a1:20:a4:ca:f6:42:
af:e5:2b:f2:f9:d0:81:a0:f6:19:9f:8e:2e:77:be:
0e:ac:d2:b2:ab:2e:21:f9:e2:8c:ac:61:a0:b2:f8:
8a:39:33:6c:23:45:1a:c8:02:a2:4a:d9:6d:f2:40:
5c:f9:d2:f1:b7:60:ed:e1:8c:83:27:d7:10:61:e9:
43:a7:81:4f:a1:74:35:0e:8a:20:37:02:47:18:ac:
5f:a6:5e:d5:39:02:86:50:e6:4d:63:12:a9:85:51:
60:5b:40:d6:f8:48:b4:8b:72:8d:5f:06:28:f4:26:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:5D:62:5B:3B:CA:79:70:3C:39:E3:DF:E7:23:A9:25:C7:B8:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E8E94EED95911EF9528FC55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:55:b8:80:1f:31:77:b4:8d:cb:2a:1f:e4:2d:41:01:85:a3:
71:19:50:2a:e9:ab:03:17:2a:ea:89:da:c3:49:1f:41:34:99:
92:74:86:90:5e:98:68:b0:84:f8:39:1c:ec:13:2a:2b:39:be:
c6:27:2a:70:5f:e6:d5:15:b6:7e:99:b9:42:e9:ce:31:05:19:
7d:dc:4e:cb:c6:16:b7:2f:3c:9a:f6:f6:86:e1:27:c6:d8:c1:
a7:7b:07:ac:57:7a:14:fc:b5:bc:b2:7d:be:6e:14:a5:f2:2c:
86:34:88:42:12:8e:09:24:50:e4:d2:98:b6:4d:5a:42:db:ee:
5c:c8:08:32:50:7c:31:a1:39:64:11:db:5a:05:87:20:ef:3f:
d4:e8:61:06:ee:1e:cf:cf:72:07:f9:e9:3b:1c:33:06:92:57:
eb:9d:e7:be:c3:4e:7d:f8:c2:77:a6:ee:b4:d0:4a:cd:4a:de:
ac:8a:ac:b0:32:98:4d:5f:97:37:a0:23:cb:f5:9d:71:77:8e:
39:a1:10:19:15:be:87:5f:b9:fe:cd:e7:be:1e:0c:1d:fe:a5:
13:df:9f:fe:7d:df:75:00:fd:15:1a:7f:8a:81:ac:34:eb:e0:
06:10:d6:b1:7c:36:7f:54:0a:fc:98:43:c1:18:f8:33:c8:ba:
7f:cb:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:09 2025 by rpki-client