Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D467462D8AE11EFA49AE855762E951A.roa
File: 8D467462D8AE11EFA49AE855762E951A.roa (raw, json)
Hash identifier: KPvrovhfoVzQOePAwaDBAivi5lcIZkgH4s9SRDgwQTg=
Subject key identifier: 29:4E:4D:E2:A5:F0:6D:C7:39:AD:33:6F:27:E3:3C:5A:8B:3C:88:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ED8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D467462D8AE11EFA49AE855762E951A.roa
Signing time: Wed 22 Jan 2025 10:49:28 +0000
ROA not before: Wed 22 Jan 2025 10:49:24 +0000
ROA not after: Sat 08 Feb 2025 10:49:24 +0000
asID: 150008
IP address blocks: 154.210.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81624 (0x13ed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:49:24 2025 GMT
Not After : Feb 8 10:49:24 2025 GMT
Subject: CN=6790cd38-ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:90:14:82:c5:d3:9a:7e:1f:b8:85:e2:a1:
ba:47:e2:9f:fc:bc:a7:70:73:27:d4:a1:85:f8:6c:
71:8e:23:2e:fd:4d:7a:dc:97:24:1d:6a:40:d1:4a:
62:52:f0:b9:68:7c:3f:0a:b8:aa:0e:3e:63:20:cf:
7a:ee:7a:a7:6a:67:f5:b8:0f:cd:31:e6:8a:c8:13:
04:ed:8a:cd:dd:a6:8a:b0:6d:c7:88:2e:b2:fe:24:
ea:4c:63:b3:aa:df:31:50:ea:ed:1a:92:ee:6f:dd:
af:ea:d1:05:21:3c:35:4f:d7:81:62:82:f0:ee:7d:
a2:a8:22:f2:9f:26:ef:b7:c7:99:01:09:f4:02:33:
53:9e:70:e4:90:d9:4d:cb:96:54:ed:90:d2:2c:36:
8c:38:99:82:b3:56:a8:f3:06:4e:4a:62:0e:98:15:
b6:d4:51:d2:7e:b3:23:d9:4b:94:d9:90:0d:8c:01:
12:63:75:33:97:72:35:98:68:1d:68:ee:9f:8b:92:
89:cd:b5:cc:6e:26:84:e4:09:e0:16:9f:ae:cb:9e:
6b:84:c4:97:3b:16:41:59:ef:be:1b:c3:03:71:87:
f7:c8:05:2b:02:50:d1:8a:b2:f6:78:3d:d8:4d:c8:
f7:b8:57:9a:7a:2b:4b:67:dd:92:dd:fc:af:dd:73:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:4D:E2:A5:F0:6D:C7:39:AD:33:6F:27:E3:3C:5A:8B:3C:88:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D467462D8AE11EFA49AE855762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.229.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ec:e6:f8:e1:5b:fb:9c:2a:8a:67:36:a7:64:c7:e9:3b:c7:
ae:4c:5a:64:49:37:e6:e1:51:53:21:89:9b:28:ad:9d:e8:b5:
26:a2:65:47:20:56:13:9d:50:ef:88:b0:06:0c:c1:36:af:7e:
f7:2d:8e:7a:4c:ee:25:fa:a9:d6:d7:32:c9:81:10:7b:38:0f:
99:31:d8:f4:e1:10:ca:98:e0:17:53:0c:97:50:5e:b3:0a:db:
c0:ac:52:12:88:7e:23:78:7b:db:2e:5d:c7:61:ed:24:52:e7:
0d:bc:ee:c1:3b:00:5e:9e:9f:c7:8f:a4:29:f5:e3:7e:b1:2f:
05:1a:f3:f2:ec:9e:f0:f0:cf:a7:3e:bd:1f:41:9d:9e:0b:c5:
2b:3a:28:00:76:80:51:93:6f:86:48:78:c9:e2:50:e4:2e:68:
1c:40:68:00:58:50:f4:e3:02:89:8e:c2:f0:5f:0c:42:93:8f:
3b:a2:e3:2c:b2:89:7e:52:ca:63:4e:62:ab:83:81:7b:fa:25:
07:a4:27:c2:b6:97:8d:35:2f:06:79:08:0f:80:dc:02:d1:21:
80:b0:84:58:0f:13:eb:86:06:a7:43:85:65:bb:d5:c0:3a:09:
2e:f0:c1:07:e5:17:13:3a:36:29:1a:9f:ef:c5:ed:27:21:33:
12:50:a5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:16 2025 by rpki-client