Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29C2112D95E11EFBC011F77762E951A.roa
File: A29C2112D95E11EFBC011F77762E951A.roa (raw, json)
Hash identifier: MitjIpUluEUnPKbK82/ftHPfx55apljK86RPcSKM6l4=
Subject key identifier: 6E:BC:B5:30:59:82:1D:F4:75:92:F3:73:11:0D:67:62:4C:74:0C:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014057
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29C2112D95E11EFBC011F77762E951A.roa
Signing time: Thu 23 Jan 2025 07:49:55 +0000
ROA not before: Thu 23 Jan 2025 07:49:51 +0000
ROA not after: Sat 08 Feb 2025 07:49:51 +0000
asID: 18229
IP address blocks: 154.210.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82007 (0x14057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:49:51 2025 GMT
Not After : Feb 8 07:49:51 2025 GMT
Subject: CN=6791f4a3-e54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:ba:36:c2:bf:df:26:1a:04:71:f3:e3:28:
17:11:5b:62:10:72:10:e5:df:09:dc:92:d9:d1:20:
91:73:2c:5d:f9:00:40:3f:d2:ee:84:05:89:09:30:
cd:23:1a:88:7e:88:b3:83:4b:82:2a:4e:7f:bb:df:
78:0c:73:30:ab:3c:6e:b1:ae:b7:9f:81:1f:c2:66:
f3:4a:80:e2:76:a8:0c:a5:34:7b:f3:5a:63:69:e0:
d3:8a:8e:64:0c:51:f3:40:c5:51:3c:76:6e:58:fc:
88:89:a7:78:b7:1a:e2:6b:04:87:ec:2c:fe:fc:ef:
c7:fd:05:37:6d:0b:02:8c:a5:0e:af:a9:17:07:89:
a2:eb:d8:49:97:5d:c6:30:cb:9d:08:18:e9:3d:05:
ae:62:9c:d3:5c:33:25:b1:04:04:8f:e2:a8:ea:49:
9c:51:06:32:d4:6a:79:57:40:57:b2:c9:a4:ce:b7:
7b:5c:ec:88:6b:81:ec:19:7b:3c:6d:b0:1f:33:d2:
4e:5a:98:0a:2c:ae:13:bf:c1:18:22:ce:87:bb:3b:
a6:97:f4:41:0c:0e:e8:3f:36:f9:b9:5d:7e:45:ed:
aa:5f:26:62:5d:9b:26:10:2d:24:6c:18:02:80:3b:
19:e8:34:ed:30:f2:c9:ef:d4:f2:f7:81:a9:0b:7e:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BC:B5:30:59:82:1D:F4:75:92:F3:73:11:0D:67:62:4C:74:0C:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A29C2112D95E11EFBC011F77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.172.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6c:3f:59:44:6f:ef:1c:b7:8d:4f:60:29:c6:4d:0f:66:a0:
0e:e9:f9:6a:32:da:db:5b:4f:e5:2e:c4:7e:41:ad:ed:3d:92:
57:f1:cf:ee:1f:a8:0a:c0:98:cf:68:ef:b6:ee:cb:4a:ac:29:
49:c2:37:1a:d8:31:5c:18:62:c0:fa:35:1d:36:eb:ea:59:86:
cb:e0:24:07:dc:5b:d1:f9:39:83:70:0e:0f:f9:e7:8f:cf:9c:
de:b5:42:4c:cf:db:da:90:ad:59:ce:f9:c8:7d:1c:a3:03:b4:
bb:d2:56:40:49:17:7f:f4:d3:24:4c:a7:c7:75:ec:31:75:27:
a4:c4:41:26:20:d7:1f:77:89:61:aa:f7:35:50:72:61:ed:88:
2d:8a:d5:90:e5:16:42:b0:94:e7:a5:e9:aa:68:5e:4b:c4:2d:
ab:25:d4:0a:ec:a8:88:dc:2a:7d:6a:9f:b2:5a:8d:02:d3:69:
da:a1:5d:39:bf:18:a3:65:1d:a3:a1:65:2e:66:fe:7a:cd:dd:
dc:0d:d4:2b:e1:a8:c3:d7:00:35:9f:5f:e2:8c:3f:97:fb:5e:
74:8b:9a:f5:93:25:21:61:29:0a:e2:f8:d4:d5:75:3d:9d:5f:
b5:92:bb:b7:c5:93:c6:dc:68:a9:97:b1:0a:c5:3d:63:ec:12:
ba:a7:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:40 2025 by rpki-client