Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DA01870D95B11EF89967063762E951A.roa
File: 8DA01870D95B11EF89967063762E951A.roa (raw, json)
Hash identifier: yz9oIii4mQDtZOGIDu8o/lbR46HDcfVHWvjvSboXv5U=
Subject key identifier: 01:03:A2:D5:89:59:12:F1:A7:1B:A1:14:0E:FA:1A:C5:FD:61:C4:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01403F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DA01870D95B11EF89967063762E951A.roa
Signing time: Thu 23 Jan 2025 07:27:51 +0000
ROA not before: Thu 23 Jan 2025 07:27:48 +0000
ROA not after: Sat 08 Feb 2025 07:27:48 +0000
asID: 18229
IP address blocks: 154.210.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81983 (0x1403f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:27:48 2025 GMT
Not After : Feb 8 07:27:48 2025 GMT
Subject: CN=6791ef77-2361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:11:65:51:84:2e:8b:64:ce:78:47:bd:15:
a0:01:06:71:97:70:08:8d:a8:94:cc:eb:61:fe:7f:
69:08:91:02:44:19:32:c6:53:a2:8d:cc:ec:e6:5b:
79:f0:a5:e0:2b:40:93:1b:cc:30:53:49:e6:98:6f:
29:2d:6f:b3:04:1a:3e:27:c0:82:a7:2f:58:f6:8f:
d3:f0:f1:34:f8:c8:9a:46:9a:71:bb:c9:5e:bd:b6:
73:48:8a:91:a3:69:92:1e:66:bd:56:68:5c:89:db:
44:46:36:ba:57:16:c9:db:b9:64:24:31:04:ac:04:
d6:c7:1c:9a:06:df:ec:79:f9:c5:18:3f:ae:f9:b2:
c0:39:e6:d9:dd:2f:02:2b:8b:98:bb:88:bf:13:de:
bb:6c:f2:ae:dd:ae:f5:cd:77:44:8d:72:da:17:7c:
5e:a8:be:f1:49:47:36:b1:6e:25:a3:cf:7b:b7:f3:
41:da:6f:42:68:94:9e:53:72:fd:4c:4d:8f:42:89:
05:66:2a:4d:e2:ee:9d:f5:4c:1e:d6:70:ef:10:04:
b6:be:d2:5c:a1:f7:5f:43:b2:a0:11:ef:c1:1b:f0:
1f:36:44:8f:fd:ff:41:89:16:36:15:9b:94:cb:ad:
2e:aa:9c:d9:84:21:9c:34:16:3a:b0:5c:94:a5:e3:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:03:A2:D5:89:59:12:F1:A7:1B:A1:14:0E:FA:1A:C5:FD:61:C4:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DA01870D95B11EF89967063762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.160.0/24
Signature Algorithm: sha256WithRSAEncryption
69:89:52:8c:66:04:37:67:c6:03:9a:ec:04:5a:64:5a:4e:84:
ea:31:8f:a8:61:6a:a0:cd:8e:6d:21:cf:91:ee:b7:b8:bb:a3:
d1:4b:e1:aa:6b:b7:e1:0f:29:55:6a:16:09:5a:05:d9:04:c4:
7f:d2:13:f4:e3:b7:a2:3d:e8:d3:87:ca:e5:96:4f:bb:59:e9:
a6:82:9c:a1:9e:91:13:57:ae:f4:37:3f:eb:4f:7e:27:c2:58:
a4:ca:e0:c1:31:38:22:15:dc:28:7a:2c:29:bf:93:3b:92:65:
7b:b4:28:ee:23:2f:06:4d:51:18:44:f2:d3:9f:29:b8:09:35:
1e:3a:a5:55:f4:7c:99:45:29:c0:4b:d1:6b:df:3f:f2:5d:0d:
86:5d:3f:69:a7:3f:fe:9f:98:47:0f:1c:91:f0:4a:af:a6:97:
80:65:38:8c:a7:79:35:f9:b0:1a:de:f6:9a:4f:4c:70:ed:cd:
1c:5d:7d:19:53:8a:94:99:ca:30:8c:05:21:84:94:48:77:0b:
ef:a8:79:39:41:88:d9:97:8e:b7:38:7f:9d:59:22:bb:38:4f:
36:c4:bd:4b:aa:99:d8:46:f3:be:c1:48:e8:dc:c2:f9:ec:30:
4a:76:54:23:97:5e:7c:ba:9e:b9:ac:1c:13:0d:73:20:a1:2d:
4d:24:c0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:51 2025 by rpki-client