Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9974840ED8B311EF807E6277762E951A.roa
File: 9974840ED8B311EF807E6277762E951A.roa (raw, json)
Hash identifier: pIH2ji3elBX4idBo8ztI1Z9c0/w1FeXER2odgUtcVSM=
Subject key identifier: 52:08:56:B8:84:7D:7F:A5:2B:12:65:E1:A0:D1:48:DC:37:32:6B:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9974840ED8B311EF807E6277762E951A.roa
Signing time: Wed 22 Jan 2025 11:25:36 +0000
ROA not before: Wed 22 Jan 2025 11:25:26 +0000
ROA not after: Sat 08 Feb 2025 11:25:26 +0000
asID: 18229
IP address blocks: 154.210.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81662 (0x13efe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:25:26 2025 GMT
Not After : Feb 8 11:25:26 2025 GMT
Subject: CN=6790d5b0-95ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:a5:b3:af:f6:44:a1:56:33:fe:80:58:89:
6b:2f:41:f0:ea:1c:30:a2:0d:b6:d0:c9:85:49:5d:
cc:de:7d:86:7e:93:17:d0:80:04:23:bb:6e:78:0a:
06:bf:ed:a2:fd:80:58:db:8d:b9:c0:36:3c:cf:a8:
36:92:55:e2:3f:03:a1:9d:4b:f4:97:cb:ab:8d:d9:
85:0e:46:c5:0d:ed:00:e9:c4:22:d6:d5:bd:04:60:
a5:13:5b:1a:81:49:ed:90:47:13:4f:2c:ef:77:a2:
97:20:e0:cc:c7:48:82:98:fd:17:e1:9d:2c:61:89:
05:de:45:6a:c3:dd:30:60:69:8c:d8:8f:fa:56:4c:
65:fe:3c:24:52:50:4b:02:51:36:e7:a8:5d:0f:b8:
c7:28:4a:06:b0:de:eb:2f:88:b5:52:e1:5b:fa:f2:
b1:15:61:81:a7:5a:e3:a2:90:91:92:12:ba:8b:11:
58:86:54:b2:5c:e1:24:75:59:bf:39:a8:81:ec:86:
00:e9:7d:c3:c0:42:c5:5d:b8:4e:94:1e:4f:03:0d:
4c:8d:c2:28:67:11:cd:7d:09:78:4a:38:ba:57:80:
52:33:7e:72:0c:c5:70:da:08:e0:7c:7c:b5:bf:5d:
0e:f5:39:59:7f:1d:68:f1:83:74:e5:c5:b2:10:aa:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:08:56:B8:84:7D:7F:A5:2B:12:65:E1:A0:D1:48:DC:37:32:6B:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9974840ED8B311EF807E6277762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.194.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b0:58:43:5c:dd:0f:58:aa:32:41:ae:11:bb:c3:7b:c9:ac:
e3:a3:5b:1e:a3:36:83:9d:95:0b:88:4c:84:92:0f:8e:ea:b7:
1f:8f:a4:fd:5e:8c:a2:b8:4c:aa:6b:5f:5f:73:5a:11:04:97:
b8:cb:85:2b:0a:3b:a2:a0:27:f5:20:fd:ee:99:ba:85:f1:2e:
55:3a:ec:89:0b:66:84:87:03:4b:4d:71:21:ff:0c:f5:00:a7:
2b:00:67:16:ec:c3:96:9e:d9:75:ed:1d:4a:fb:6f:6e:b3:dd:
53:26:e0:e4:2d:9d:62:fb:af:f9:f3:26:14:bb:c8:a1:14:b0:
f1:ae:9b:b4:18:0a:3c:ed:45:9b:76:61:30:87:09:88:96:f4:
a8:7f:e6:f2:93:fa:a9:a4:cd:78:49:53:10:4b:1d:2c:29:97:
dd:67:2a:0c:71:18:7a:6d:6b:2f:77:e9:b3:10:19:fa:5e:46:
1b:41:71:f2:70:76:e1:85:92:16:72:55:da:30:6b:91:4b:96:
9d:9b:a8:da:59:0f:dd:f0:9c:3c:b1:fb:04:2b:ee:d6:54:d2:
fb:c3:4a:8c:ae:36:4b:8b:31:30:af:d4:fb:68:c3:ad:15:0e:
6b:b1:e9:92:3c:9d:66:b5:59:2f:ce:2d:ab:44:88:82:3b:e5:
f1:10:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:38 2025 by rpki-client