Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9290EE7ADA6B11EFB5D6418E762E951A.roa
File: 9290EE7ADA6B11EFB5D6418E762E951A.roa (raw, json)
Hash identifier: Pib0Su6l+0IZEQZO/tLd+RKMMjnva+RN+LrmxOvjitg=
Subject key identifier: D1:34:1D:2A:8C:D5:0B:C2:6B:27:50:AD:7D:DB:B1:99:A1:18:D0:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9290EE7ADA6B11EFB5D6418E762E951A.roa
Signing time: Fri 24 Jan 2025 15:55:03 +0000
ROA not before: Fri 24 Jan 2025 15:54:59 +0000
ROA not after: Mon 03 Mar 2025 15:54:59 +0000
asID: 203020
IP address blocks: 154.223.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84178 (0x148d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:54:59 2025 GMT
Not After : Mar 3 15:54:59 2025 GMT
Subject: CN=6793b7d7-1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:2e:05:11:e1:f5:d9:aa:97:78:50:01:b1:
99:ae:b8:f1:6e:1a:ff:b7:f5:75:8f:25:f5:d3:b7:
a1:c2:a6:55:1c:b2:95:2a:43:ee:0e:a3:9c:26:03:
74:78:8a:97:68:f6:d8:c5:b7:d4:8a:ba:ed:8f:97:
8f:57:f1:8f:5d:4c:27:95:46:8a:2a:30:e9:5d:67:
08:b8:7a:86:3f:29:c4:0e:28:1f:90:41:40:10:3d:
d0:56:8e:5d:b6:49:84:a6:1f:83:a4:83:6b:2f:92:
bf:1b:bd:d1:d3:3a:e1:02:1e:ae:53:fb:08:5f:5e:
33:fc:1e:fc:98:9d:22:9f:b4:88:0a:0d:96:a4:8e:
e6:1b:47:cd:11:e3:1a:36:b9:03:5c:30:a4:1b:88:
8a:04:a8:13:31:f6:69:ed:3c:ed:ac:f3:09:a8:42:
7f:fd:1c:9a:88:0a:77:d3:5b:b4:7f:02:2a:60:f2:
3d:ce:f6:21:7e:02:40:bc:6f:76:3f:2e:23:18:6f:
63:b5:ff:64:12:39:9a:10:18:8d:c3:f2:6f:22:5a:
75:14:7e:a2:f8:87:2b:c3:58:1a:eb:f0:02:d9:6c:
94:d5:81:eb:6b:41:ca:d4:1f:c4:62:50:34:0b:82:
05:fa:61:c8:87:dd:d8:b9:bd:96:87:fe:d0:d1:b8:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:1D:2A:8C:D5:0B:C2:6B:27:50:AD:7D:DB:B1:99:A1:18:D0:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9290EE7ADA6B11EFB5D6418E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6b:98:cb:18:bd:ef:2d:9c:6f:05:bb:fb:e4:b0:c2:ab:54:
79:aa:fd:74:75:f9:4e:fc:22:c9:d8:8b:80:b8:05:e4:93:53:
d5:ec:0f:ac:59:9d:06:8b:9e:71:17:91:e4:55:83:1e:5c:e4:
40:2a:11:9f:b3:45:49:2f:32:41:bd:41:b7:1c:de:7a:76:99:
ac:11:d2:4e:2b:25:a4:e9:76:f7:94:81:a1:ae:b8:72:04:38:
7e:50:d0:b5:26:2e:b7:c4:57:57:f8:d7:b0:71:ea:8c:ff:4e:
96:bd:be:56:ea:ba:14:78:b3:1d:9c:40:90:22:0c:60:00:7d:
7a:ec:10:71:e5:20:f9:26:48:a5:52:99:ef:74:da:a3:ef:76:
da:7a:7b:9c:ae:4b:6f:ee:a3:39:a7:f7:7f:38:e5:bc:4d:73:
89:98:5d:4f:e6:df:f1:84:6e:8b:2d:e9:89:57:be:ac:de:ed:
49:64:69:59:da:09:30:af:e9:ea:45:55:2a:20:b6:4d:aa:f2:
25:6a:04:37:6f:48:80:5b:bf:2a:3b:e1:c3:9c:4b:02:3b:73:
83:d9:7a:0a:c9:63:68:ad:3b:3d:48:66:0c:64:cc:39:d8:7d:
44:6c:1b:e4:97:a7:81:2a:97:1f:09:5e:6c:c4:10:fc:56:6c:
26:1d:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:56 2025 by rpki-client