Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9708DF8D9DA11EF964047AE762E951A.roa
File: A9708DF8D9DA11EF964047AE762E951A.roa (raw, json)
Hash identifier: xqc+2VP4BG8LabKKolITrZZAwHhJRfVWmt4T8ETL6m0=
Subject key identifier: D5:8E:F6:D0:B9:89:75:28:90:1A:55:65:E3:CC:15:30:E9:64:57:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014357
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9708DF8D9DA11EF964047AE762E951A.roa
Signing time: Thu 23 Jan 2025 22:37:44 +0000
ROA not before: Fri 24 Jan 2025 22:37:40 +0000
ROA not after: Sat 01 Mar 2025 22:37:40 +0000
asID: 62240
IP address blocks: 154.223.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82775 (0x14357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:37:40 2025 GMT
Not After : Mar 1 22:37:40 2025 GMT
Subject: CN=6792c4b8-061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:94:00:14:5c:c5:29:78:1c:ba:d7:a4:24:
aa:89:4d:2e:22:46:76:ae:83:2e:1c:00:a7:ef:68:
15:30:d9:a5:c7:1d:54:85:33:ae:ba:cc:8b:6e:dd:
97:e5:7b:01:22:b5:ad:bd:c9:31:b5:3e:49:8b:8b:
aa:9e:29:ab:37:64:15:1f:12:2b:9b:d6:ef:26:e2:
d2:b5:64:e3:91:0f:fa:6d:98:dd:8d:d3:d6:4b:66:
35:2f:89:f1:7e:37:3e:4a:18:e6:96:81:8d:9f:ff:
5d:e5:bd:93:83:fc:69:06:1c:b0:97:c5:bf:04:f2:
27:e8:d9:2b:fa:a3:bc:06:4f:91:5b:c2:7b:ef:d3:
54:b6:d2:9d:4d:0f:f1:35:75:65:1a:bf:d5:9b:b6:
cb:8e:7d:f2:73:30:48:1f:8d:af:1e:d8:6b:cd:c8:
fc:7c:c1:26:7a:2b:26:0c:00:7f:2f:f8:34:54:17:
6f:ac:4b:90:b0:ab:ea:db:e2:da:49:ea:38:32:80:
e2:d9:05:f9:e7:19:6a:72:15:b6:58:2e:95:7f:84:
f4:d5:9c:37:e2:02:96:3c:14:6a:53:8b:30:63:7b:
11:e6:fb:78:aa:fe:63:60:9f:0e:e0:1f:08:38:79:
43:e8:fe:d2:0c:f8:2d:00:9c:1a:f9:6d:07:f8:29:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:F6:D0:B9:89:75:28:90:1A:55:65:E3:CC:15:30:E9:64:57:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9708DF8D9DA11EF964047AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.210.0/24
Signature Algorithm: sha256WithRSAEncryption
af:26:d3:33:ea:1a:85:ad:b8:9f:05:26:71:6b:69:7c:a1:5b:
43:a2:73:6d:a3:71:a4:b8:a4:1f:91:0a:4f:af:09:02:ea:2e:
5a:0e:be:2d:0a:f8:18:de:0c:12:66:5a:6c:d7:37:5c:27:fb:
35:7b:4d:77:63:36:01:2b:3b:84:a2:db:41:b3:28:f2:0a:59:
07:4b:be:72:b8:28:2c:5f:2c:13:bd:6f:00:8d:18:88:d5:77:
7b:f0:2e:26:d3:a3:ca:0d:27:3b:28:e7:fb:3e:1f:fc:1d:1b:
ca:f7:cc:92:e4:37:72:f8:52:8f:be:8c:1f:48:69:fd:91:ed:
60:2f:18:bb:17:62:24:c1:26:28:b1:96:db:48:96:2b:4d:90:
fd:e9:8f:6a:a0:9e:d1:fd:5d:93:21:de:4d:b0:fa:b6:6e:d9:
b6:8e:d3:22:88:3d:03:e7:0b:36:63:97:c0:97:ae:44:29:78:
7f:51:8b:ad:64:b1:cf:49:9c:fc:e9:94:30:d2:21:3e:58:f1:
6b:32:ca:33:92:ec:ee:9a:f8:8f:77:ec:31:b6:3b:e0:24:d0:
13:c9:a0:47:96:ed:81:df:ec:23:99:67:e9:58:54:f1:ac:1b:
d0:12:ad:dd:24:e8:0f:c1:ce:4d:fa:b4:cd:ed:e1:be:8b:6b:
47:51:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:28 2025 by rpki-client