Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88DF2012B21211EF863FE377762E951A.roa
File: 88DF2012B21211EF863FE377762E951A.roa (raw, json)
Hash identifier: 3osTL9JAZ1+RsUj0jKJ4S+CLD+zrFAup3CbXPCq92JA=
Subject key identifier: 11:E5:59:89:C7:A2:92:62:86:CD:E1:C9:93:5B:84:80:08:44:7A:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88DF2012B21211EF863FE377762E951A.roa
Signing time: Wed 04 Dec 2024 07:36:55 +0000
ROA not before: Wed 04 Dec 2024 07:36:51 +0000
ROA not after: Sat 01 Feb 2025 07:36:51 +0000
asID: 18229
IP address blocks: 154.210.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71610 (0x117ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:36:51 2024 GMT
Not After : Feb 1 07:36:51 2025 GMT
Subject: CN=67500697-e161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:07:9f:ad:f8:fb:f4:52:15:f8:2f:f8:af:
08:93:d7:1a:7d:91:81:76:76:26:2d:65:2c:99:a9:
4f:a5:a5:cb:26:7c:27:d2:5c:6d:9d:c5:d0:08:b2:
e7:cb:85:94:ef:05:57:79:42:77:08:a3:85:d9:b7:
a1:b6:89:aa:98:fd:cf:21:22:02:10:37:cf:8b:b5:
68:ed:97:72:32:94:b2:f9:3f:4d:bc:c2:8e:0e:94:
18:60:69:7c:44:3c:bb:8a:84:5c:7a:90:f5:65:7c:
a6:a2:84:32:47:ff:37:5e:ec:56:57:2d:6a:37:2f:
5d:e2:d7:ca:6e:f4:1c:0b:dd:62:bd:2e:58:1b:4d:
f3:4d:0f:1d:9e:60:67:7c:eb:c6:95:8f:f7:c2:14:
da:3d:ec:54:71:71:8f:68:fb:0a:a1:85:67:73:b5:
fa:ce:2e:93:6c:32:19:0f:bf:af:cd:7c:0d:2e:52:
9e:eb:c4:5d:92:f7:a3:7d:51:19:9f:31:a9:42:cb:
35:aa:ab:fe:9d:e8:f2:7a:10:5f:54:b2:bb:8c:53:
a3:f0:dc:ed:f4:41:dd:aa:0e:f3:2c:1d:08:3a:f1:
bf:5e:cb:27:9c:b2:e3:c4:32:f7:37:77:a4:81:a8:
b9:49:3c:11:c1:d0:48:cf:f6:49:c3:e8:7b:c1:65:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E5:59:89:C7:A2:92:62:86:CD:E1:C9:93:5B:84:80:08:44:7A:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88DF2012B21211EF863FE377762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.212.0/24
Signature Algorithm: sha256WithRSAEncryption
23:80:07:f3:88:78:8a:4f:20:42:c1:b8:ac:b9:2b:9b:24:25:
e0:6d:4b:22:1e:de:2c:1b:ba:d1:66:6d:92:f0:2a:ea:84:1b:
97:2b:5e:ff:86:cf:eb:fc:81:25:26:04:44:9e:ee:19:d5:5c:
98:b8:51:dd:2d:3f:2e:7c:26:9f:3f:dd:68:96:4c:17:cb:e1:
7e:49:58:fe:2c:77:c5:0f:3d:ca:cd:b5:6e:01:ea:86:a7:91:
89:15:78:07:ca:fc:68:70:8c:fd:61:05:bc:73:87:94:01:2b:
c2:a7:01:35:7b:9b:6f:fd:f7:34:c3:87:68:67:74:da:6c:0b:
4c:4d:db:d4:c2:98:6b:b6:78:61:2c:85:44:5a:99:72:0b:d1:
14:0b:c8:62:cd:40:cc:c6:71:6a:85:ce:a7:af:35:9e:a0:7b:
a1:41:b5:6b:97:65:d6:c0:a7:33:5d:bd:e7:21:7d:0d:44:6e:
fe:3c:c5:a1:e3:8e:97:e8:62:71:1c:72:54:19:fe:a8:1c:bc:
6e:0d:20:4d:35:8b:21:0e:4d:1a:18:12:ba:bc:3b:6c:ec:b2:
86:9a:08:75:78:32:65:da:16:bf:0a:60:cc:f8:6c:27:3f:21:
6a:17:d5:c1:8b:0e:fc:ae:63:45:5f:23:64:a7:72:e8:c0:80:
00:7d:4b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:31 2025 by rpki-client