Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84229790DA5111EF83ADAE5E762E951A.roa
File: 84229790DA5111EF83ADAE5E762E951A.roa (raw, json)
Hash identifier: yWqnHmNI32+ChflFZyAsQ1LUQ53ng6LXnaqFHMtWRnc=
Subject key identifier: CD:8C:D8:BC:28:D8:43:BF:F6:14:D9:B0:5A:21:A9:88:E6:25:E9:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014707
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84229790DA5111EF83ADAE5E762E951A.roa
Signing time: Fri 24 Jan 2025 12:48:32 +0000
ROA not before: Fri 24 Jan 2025 12:48:28 +0000
ROA not after: Sat 08 Feb 2025 12:48:28 +0000
asID: 18229
IP address blocks: 154.210.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83719 (0x14707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:48:28 2025 GMT
Not After : Feb 8 12:48:28 2025 GMT
Subject: CN=67938c1f-1e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:8c:81:c5:e9:29:e4:66:f9:6d:12:4e:67:
8b:2f:61:37:7c:04:80:c5:cf:39:9d:0c:b4:3d:74:
34:7c:bf:06:98:87:02:dd:fe:b6:62:20:8d:13:79:
c0:c4:a1:48:96:3f:a3:f6:2c:41:f1:cd:46:d8:9e:
45:9a:30:3a:65:17:94:b4:c7:e4:89:72:12:1f:4d:
4d:56:0f:e3:90:ca:65:8f:b4:ec:fe:ab:f5:e5:be:
0a:df:b1:5b:53:83:37:2a:8e:e8:e7:00:5c:25:45:
19:89:48:3c:62:af:fa:bd:e1:33:7c:ec:37:34:56:
27:56:bb:c2:e9:a1:9c:de:1d:55:c2:77:a4:6a:7b:
30:e6:fd:53:8e:74:10:1a:91:f9:d6:28:7e:ca:9b:
15:ba:d6:6c:0f:ab:31:9d:29:2d:01:01:74:00:05:
3f:d4:00:30:12:b7:c8:1e:a5:6c:9d:dd:77:5c:d9:
71:0a:ee:fb:92:fc:84:c3:fa:28:1b:7e:c5:dc:98:
8c:6f:09:28:59:08:02:5c:7d:f2:f4:44:b7:19:a6:
d8:e3:27:54:9b:73:af:13:14:07:05:2c:18:9a:8c:
49:cc:36:71:eb:71:4a:d5:07:d9:f4:8e:18:b2:1e:
82:9d:9f:ce:7f:f3:4b:89:82:c1:ba:d7:42:3d:94:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8C:D8:BC:28:D8:43:BF:F6:14:D9:B0:5A:21:A9:88:E6:25:E9:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84229790DA5111EF83ADAE5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.168.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:00:83:ca:52:b6:bc:13:36:8f:9a:e7:bf:9e:1d:e0:a5:47:
75:29:51:de:26:f9:e8:74:39:9b:05:19:50:dd:8f:c2:b5:3f:
79:f8:51:10:3b:d3:a8:af:28:2b:56:b7:65:27:d5:46:43:fa:
d2:ef:e1:4c:8c:db:67:85:ab:6e:08:67:e8:16:f5:c3:1d:88:
01:ff:b7:1e:58:66:ea:a2:77:36:d6:24:27:c2:48:49:6a:b5:
5e:7a:b3:75:f1:27:97:f1:75:a3:ab:54:bc:0d:b7:71:36:02:
30:b2:b7:0b:d4:0c:10:93:51:ae:f6:6f:dd:0c:d2:ad:e7:14:
2f:59:42:7c:ce:69:d4:ce:75:72:57:91:4b:63:3e:12:b6:04:
ba:7c:b2:92:4c:f6:28:b3:2b:b8:f0:fc:18:24:ad:a7:0e:08:
ce:07:c2:e3:e4:5b:04:b4:fc:8f:8a:a0:16:8f:c7:de:3a:12:
04:5d:8e:75:73:ac:8d:8f:bd:a9:2f:69:b8:29:4b:66:7f:ca:
05:01:b5:86:f1:b5:a8:0d:74:17:a8:ff:7f:2e:7d:99:a1:a2:
32:7b:1f:a1:a3:c3:a6:7a:94:bf:4a:fc:cf:6c:5a:18:29:94:
54:32:32:98:e9:ad:b8:8c:66:0b:35:75:b8:a9:82:e5:48:8a:
b8:98:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:50:59 2025 by rpki-client