Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A946EE84B20D11EFA6998554762E951A.roa
File: A946EE84B20D11EFA6998554762E951A.roa (raw, json)
Hash identifier: PLyB44UyDubIdrFJetzW08J8uf9888/BuwGyGlH2IQg=
Subject key identifier: 33:CE:25:6E:4D:C5:85:E3:81:F8:FB:69:F1:4F:C4:FF:6F:F5:E2:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01179C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A946EE84B20D11EFA6998554762E951A.roa
Signing time: Wed 04 Dec 2024 07:02:02 +0000
ROA not before: Wed 04 Dec 2024 07:01:58 +0000
ROA not after: Sat 01 Feb 2025 07:01:58 +0000
asID: 150008
IP address blocks: 154.210.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71580 (0x1179c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:01:58 2024 GMT
Not After : Feb 1 07:01:58 2025 GMT
Subject: CN=674ffe69-b34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:81:04:8d:7b:8e:bc:83:70:c8:d5:95:01:
eb:53:1e:ca:9d:62:2d:ce:d1:04:e2:97:02:10:61:
9f:8d:d8:64:69:4f:7b:a9:ed:5a:c5:85:b6:42:15:
ff:9a:68:80:c4:df:3a:21:3f:0f:6d:c7:80:74:78:
0a:4f:03:ec:24:4b:46:4b:a0:31:9f:d1:d4:65:b3:
bc:97:67:32:b7:cd:98:a9:17:38:03:ee:f4:f5:93:
4e:39:c0:b5:2a:04:4d:4b:e9:c7:fc:80:97:38:fa:
b4:2b:68:5c:4b:e8:43:de:56:0f:fe:27:a9:89:18:
8e:7c:17:fc:bb:92:e0:fe:a1:35:66:89:e1:67:7e:
f2:5f:c1:18:e7:f6:3f:dc:14:60:78:e7:70:d1:41:
ee:d9:ca:3f:9f:b7:62:2e:46:cb:b6:7c:3e:8d:eb:
1a:24:0a:8f:cc:0f:5e:ed:16:52:f5:8e:c7:27:7f:
21:8d:95:3a:a4:49:1e:49:94:4a:c6:51:5a:e9:4d:
18:74:53:c5:6d:27:00:22:b8:7e:01:51:68:32:3b:
9b:7c:7c:a2:a2:be:dc:48:f8:7c:6a:c6:9a:0b:98:
02:74:65:34:42:19:5d:f1:ee:14:39:0e:c2:d7:5f:
32:97:fc:4c:2b:6f:0f:11:f6:6f:8b:31:36:f6:a1:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:25:6E:4D:C5:85:E3:81:F8:FB:69:F1:4F:C4:FF:6F:F5:E2:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A946EE84B20D11EFA6998554762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.213.0/24
Signature Algorithm: sha256WithRSAEncryption
94:de:2b:2d:cb:51:81:2a:46:c5:e1:ab:52:cb:4f:e8:a1:9f:
6a:f1:f0:31:f9:e3:04:b0:d3:c2:94:0d:47:92:d8:05:cd:6d:
a7:ce:9f:39:07:fe:2c:64:ab:4b:0a:ff:09:85:ac:ab:88:d0:
b0:d7:4e:47:59:df:e9:7e:9b:69:d1:b7:ba:c5:57:80:03:7c:
1d:58:de:55:70:34:0a:da:2f:fc:c3:39:45:18:63:8b:cb:87:
bb:6d:92:b8:e3:bc:bb:65:8e:8d:23:32:8c:d0:71:42:3b:4b:
c6:82:bf:2b:f6:b4:3d:d1:4c:e3:a7:9c:2f:c7:8e:aa:c0:c4:
79:a0:14:88:70:82:15:1c:47:60:7c:50:1b:63:78:c5:04:ff:
06:f1:9e:76:49:20:f3:65:92:b0:97:67:b1:10:2e:43:22:d9:
b7:b2:91:12:e8:96:0d:18:d3:f7:90:8c:cd:b8:2b:4a:30:6e:
a3:39:7f:cd:59:ef:07:57:12:f4:63:70:7c:61:36:2b:97:6e:
11:ae:da:cc:55:d6:eb:ca:6a:c2:df:44:50:b1:75:90:62:c4:
30:98:20:5e:c0:76:00:39:31:f9:3b:63:61:5f:d0:11:f3:05:
5f:0a:45:cf:b6:92:ec:59:36:43:f0:21:dc:e4:36:95:e8:a3:
4d:70:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:21:30 2025 by rpki-client