Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9356EB10D8B911EFA9262CA0762E951A.roa
File: 9356EB10D8B911EFA9262CA0762E951A.roa (raw, json)
Hash identifier: LeD5z6cC5+zVg6UFE5RP99w6A9dEmKXLhYltXcYVfQc=
Subject key identifier: B6:09:1E:3E:FD:72:54:49:36:CC:00:D4:06:79:EC:4F:62:02:3B:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9356EB10D8B911EFA9262CA0762E951A.roa
Signing time: Wed 22 Jan 2025 12:08:22 +0000
ROA not before: Wed 22 Jan 2025 12:08:18 +0000
ROA not after: Sat 08 Feb 2025 12:08:18 +0000
asID: 18229
IP address blocks: 154.210.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81704 (0x13f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:08:18 2025 GMT
Not After : Feb 8 12:08:18 2025 GMT
Subject: CN=6790dfb6-13c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:d7:f7:20:a4:31:3f:0a:35:f3:b0:de:af:
9d:5a:1e:a2:03:bf:d4:33:0d:00:90:56:ec:c5:ef:
bc:c0:dd:a8:c8:e1:d4:2b:df:01:09:4d:dc:f8:8b:
0d:21:52:ae:bc:2f:79:6d:d4:6a:8e:5d:90:fc:20:
57:15:91:bf:8c:df:43:cb:60:6a:73:c6:08:dc:93:
ed:45:bd:d6:74:32:6c:ce:1c:08:e5:51:89:fa:6a:
a3:80:88:c9:7d:0c:a8:cd:f0:7b:38:49:b0:a1:7e:
94:9f:0d:31:a5:c7:5e:7b:cf:d4:e2:e1:11:90:43:
af:69:c9:58:48:16:b7:b8:bf:5f:f7:0e:10:34:31:
9d:b5:3c:ba:31:f8:ca:cc:6b:4b:4f:e6:5f:db:44:
7c:94:ed:ab:0b:0b:a8:01:ec:cf:7e:7d:17:88:c5:
80:44:ed:2a:aa:46:28:e2:75:be:a6:5d:6b:91:d9:
a0:93:24:8c:2a:fe:8a:33:46:d7:f0:de:3e:18:7b:
7a:e8:88:cd:98:f2:66:0e:ca:87:c0:89:40:2b:18:
79:8b:69:11:ad:d4:7f:06:d6:aa:94:a7:d4:08:f7:
87:98:56:1f:6f:5a:5e:cc:8c:73:4d:f8:de:00:60:
95:75:37:ae:18:e0:74:d2:86:e9:b1:a6:a3:78:dc:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:1E:3E:FD:72:54:49:36:CC:00:D4:06:79:EC:4F:62:02:3B:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9356EB10D8B911EFA9262CA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.216.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:3d:41:1d:6f:0c:c6:54:c3:be:1f:18:8f:b7:c2:6c:da:bc:
0e:c2:f7:1c:91:f6:61:fa:7f:f5:22:b2:92:ac:99:74:66:b4:
e2:00:89:38:5f:61:07:d0:a6:d1:dd:39:9f:4a:de:94:3e:5d:
17:74:ab:93:ae:70:79:d7:ad:97:fd:c0:ec:76:ac:7c:e5:67:
5b:76:51:0e:2d:23:fe:d6:6c:f4:15:33:bc:b0:14:a3:c0:c4:
1a:6b:84:8d:0c:a2:60:0d:a7:58:15:9d:f9:21:f1:bf:ea:f6:
ee:1b:fb:b2:d6:61:9c:49:d9:16:45:7c:21:05:28:b7:69:24:
15:19:07:ef:42:c5:67:57:2e:e3:90:a6:51:41:54:ed:30:ec:
76:d2:c5:82:d1:60:93:e2:c5:ce:b4:b0:1e:25:e1:f9:f3:71:
bb:89:b9:33:44:9e:6b:7c:49:6a:be:97:55:e4:61:50:43:9a:
52:b4:19:79:a6:89:85:39:d9:d7:4c:48:e9:4a:02:d2:1d:9d:
83:3c:bf:6c:af:ef:3e:cb:27:0f:3c:08:58:1b:fc:b5:ac:25:
1d:56:70:c2:c3:25:e3:c8:de:12:a1:64:89:5d:e4:36:1e:1e:
e1:5f:10:eb:55:11:e3:06:c7:76:fb:95:66:03:71:82:2f:6d:
b1:4f:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:47:42 2025 by rpki-client