Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D2975D8DA4C11EFB33316BC762E951A.roa
File: 9D2975D8DA4C11EFB33316BC762E951A.roa (raw, json)
Hash identifier: zzj7gXirvCBjubDZqKPqZJRQ14idnK0LvpeKjfYZgXE=
Subject key identifier: 07:7F:43:35:D8:75:7E:6D:7B:CC:58:EB:C1:94:CD:54:CB:BD:F0:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014696
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D2975D8DA4C11EFB33316BC762E951A.roa
Signing time: Fri 24 Jan 2025 12:13:26 +0000
ROA not before: Fri 24 Jan 2025 12:13:22 +0000
ROA not after: Sat 08 Feb 2025 12:13:22 +0000
asID: 18229
IP address blocks: 154.210.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83606 (0x14696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:13:22 2025 GMT
Not After : Feb 8 12:13:22 2025 GMT
Subject: CN=679383e6-bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:46:10:82:fc:ce:79:9b:e8:23:fb:aa:35:92:
06:ee:b0:c7:58:a7:7d:6b:62:2d:ae:2a:a7:40:9f:
61:a6:8e:9a:ca:b8:a9:93:f4:8f:a3:a0:09:86:7c:
1c:ce:54:27:60:2c:e1:88:15:f3:ec:d3:33:40:48:
7f:e0:c7:da:dd:ae:5b:af:f9:49:0e:f0:ff:6a:7f:
06:bd:d0:de:de:49:48:3c:05:f2:e0:f8:81:84:04:
73:7f:81:13:86:af:e0:fd:fd:b7:ce:8d:a5:4c:14:
88:28:82:36:9f:bc:54:29:23:ba:25:11:dd:ce:48:
07:6c:0d:4f:d3:06:85:e9:6f:fb:00:fc:98:8e:1c:
81:47:7d:ec:cd:8a:7a:21:c6:4b:ed:8e:97:28:06:
85:b3:66:e9:c9:b2:da:7e:63:d6:36:83:fe:18:a3:
a3:10:8f:f7:fd:2e:aa:bd:a1:68:26:aa:b0:72:17:
b8:1a:ea:f9:07:11:55:71:5d:dc:ba:b3:15:10:36:
cb:f7:d1:a2:32:89:d5:b7:1e:19:9d:4a:0b:a3:17:
e5:9e:f4:50:78:00:25:7e:d9:12:52:5d:c5:9a:cf:
90:90:77:1b:3f:5e:af:f6:9f:6f:4d:39:24:be:3f:
d0:fb:35:a6:1d:f4:c4:eb:c7:c9:cd:7a:13:8b:89:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:43:35:D8:75:7E:6D:7B:CC:58:EB:C1:94:CD:54:CB:BD:F0:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D2975D8DA4C11EFB33316BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.152.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:36:9d:84:e0:af:85:fc:e7:8e:a1:64:19:43:f1:ed:80:38:
e0:dd:cc:3f:9e:88:95:64:02:07:52:f6:1f:64:02:6c:f5:ed:
e5:b6:21:69:7d:88:3e:c8:57:ea:27:8e:a6:58:34:3d:36:bb:
80:9f:b2:c8:58:ba:ee:c6:93:67:2c:aa:0a:5b:26:a6:12:ad:
d3:31:70:b1:95:d7:2e:35:f1:05:8f:03:43:1c:1d:15:4c:77:
ef:2f:5b:e2:08:88:9d:a2:7f:9c:39:ef:7e:92:28:65:f0:bf:
a4:77:66:95:cc:ca:a1:b8:86:2c:bf:8b:f3:d5:7b:d5:78:cb:
aa:80:fa:47:2a:c0:d6:ac:3f:5c:00:42:42:6a:6f:89:c7:be:
e0:61:bc:e2:c6:ad:5f:94:8d:1a:36:72:9e:6b:6c:fd:8e:cd:
15:5e:86:7f:12:45:77:68:eb:cb:cd:b4:7e:12:5c:4c:e5:f1:
63:64:9c:ef:be:61:5b:27:2b:b4:74:65:75:c8:7a:24:0f:41:
36:e1:b0:f2:4e:bb:e8:a0:25:f7:c1:17:86:ad:27:79:5e:be:
58:eb:41:98:62:8b:b3:aa:91:1d:1a:80:f2:28:c1:e2:e9:33:
4f:66:2d:45:67:d4:88:c0:d9:49:40:ea:63:7f:f5:70:b4:0d:
83:88:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:50 2025 by rpki-client