Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/855A90A8D96211EFADFA1E92762E951A.roa
File: 855A90A8D96211EFADFA1E92762E951A.roa (raw, json)
Hash identifier: 6YtijIJ9bhwtMjJB0plwQKQZHKcTfsftSRc4tqEi1mE=
Subject key identifier: 95:27:FE:6C:5E:99:CF:C4:F3:42:C5:1F:18:95:14:38:28:34:E2:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014075
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/855A90A8D96211EFADFA1E92762E951A.roa
Signing time: Thu 23 Jan 2025 08:17:44 +0000
ROA not before: Thu 23 Jan 2025 08:17:40 +0000
ROA not after: Sat 08 Feb 2025 08:17:40 +0000
asID: 18229
IP address blocks: 154.210.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82037 (0x14075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:17:40 2025 GMT
Not After : Feb 8 08:17:40 2025 GMT
Subject: CN=6791fb28-3764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:73:aa:95:46:d5:37:26:31:88:94:05:6e:
ab:a4:8c:c1:e3:b5:e4:6a:62:6c:1d:27:c1:61:bd:
29:7e:7f:d2:4a:af:76:c1:ce:5f:b4:0c:b8:2e:8a:
5e:fb:43:5f:9f:13:15:c4:33:25:c0:a6:6e:37:0e:
ee:4a:05:c0:a7:2b:ed:b2:9e:ee:5b:21:0e:05:8c:
db:ed:c1:18:ee:2f:71:98:75:15:b6:32:8f:61:bb:
91:97:f4:68:1b:00:c2:50:c8:c2:a4:4e:ab:a9:3f:
8a:9c:22:c9:ee:39:e8:2b:18:94:56:b3:c9:c6:35:
f1:00:ce:d3:56:5a:50:75:04:c3:e2:c1:9b:ff:e3:
62:04:ac:72:4d:8e:be:92:e3:f3:b8:9c:03:61:12:
93:d2:13:8d:e8:c0:60:a4:70:56:07:a6:02:15:c7:
e1:2d:c0:25:32:55:7e:fa:08:94:e7:1c:97:e5:48:
69:00:1d:22:e2:c3:30:55:00:61:06:ae:f3:16:52:
2b:49:2b:40:c2:17:51:8e:de:99:d5:3d:7f:a9:c8:
a1:6e:22:30:bc:0c:7d:ac:21:9e:5a:52:2b:ab:e3:
d8:ce:ec:dd:ea:3a:3c:31:93:02:73:f9:34:30:19:
9b:f6:b7:96:d7:70:f5:3c:cd:05:06:83:ca:9e:86:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:27:FE:6C:5E:99:CF:C4:F3:42:C5:1F:18:95:14:38:28:34:E2:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/855A90A8D96211EFADFA1E92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.187.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:24:ab:46:42:09:65:6b:0b:98:60:fd:79:3c:1c:90:be:d7:
e4:a2:fd:58:07:d4:37:9b:04:08:0a:7e:2b:e8:54:80:83:e8:
57:a3:b0:5d:33:b0:35:fd:7c:43:1d:34:44:b7:d8:4c:fb:57:
93:a7:68:63:70:3a:f4:b7:eb:cb:04:d0:f4:7f:ff:75:5a:fc:
98:c0:cb:66:3c:05:1c:b1:20:15:3f:e9:45:21:9b:48:25:23:
3a:c6:9b:60:b9:67:e2:d7:1c:db:3f:23:f4:5e:8f:1e:8a:e4:
6b:e5:9c:a4:34:bd:67:36:99:0f:63:5f:8d:a1:46:c8:c6:c5:
6f:5c:04:d9:48:16:6b:50:b7:9e:7d:c0:db:6d:2d:b7:28:f7:
77:e8:e8:d5:bc:c3:5d:bd:f4:f9:d4:2c:71:b7:65:bb:7c:cd:
ba:3c:2f:2d:c9:7f:ce:f2:8d:42:a1:6d:54:1a:63:cf:48:65:
d8:46:54:c3:fa:c6:d5:e8:84:80:23:31:97:dd:77:0f:84:71:
05:cd:c2:09:12:e0:ad:b1:90:4e:c1:ec:19:33:fb:e6:d9:b2:
eb:f6:c7:90:dc:ca:21:95:65:2e:28:ec:0b:53:a6:9b:80:c4:
21:6b:88:68:21:92:e5:a5:a1:0e:85:77:74:cf:61:50:e6:b2:
b4:52:f2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:45 2025 by rpki-client