Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD769692D8B611EFB415848C762E951A.roa
File: AD769692D8B611EFB415848C762E951A.roa (raw, json)
Hash identifier: SyXyLfB//PLfvzQgDtyFVnIXwrU06e4ykzeo59J+rLg=
Subject key identifier: 45:84:51:D0:10:F9:8A:54:A8:1F:07:12:83:70:35:24:98:65:3A:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD769692D8B611EFB415848C762E951A.roa
Signing time: Wed 22 Jan 2025 11:47:38 +0000
ROA not before: Wed 22 Jan 2025 11:47:33 +0000
ROA not after: Sat 08 Feb 2025 11:47:33 +0000
asID: 18229
IP address blocks: 154.210.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81682 (0x13f12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:47:33 2025 GMT
Not After : Feb 8 11:47:33 2025 GMT
Subject: CN=6790dada-6382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:57:9d:1e:96:a1:65:d7:1a:94:89:02:18:
1b:ea:9e:d5:6f:dc:07:c0:71:67:30:fc:20:83:12:
e5:ea:0e:29:b4:62:2b:bd:86:c0:52:57:6a:2e:69:
c4:46:da:0c:ce:ab:46:a8:3e:24:89:b3:bf:71:f1:
38:27:10:ce:c3:24:86:ee:67:af:bd:22:74:58:c3:
8a:51:9c:0a:59:e9:be:ba:96:08:dd:75:67:5f:79:
38:bf:9b:9c:4d:31:bd:f2:2d:13:72:60:b8:4e:e6:
d7:08:d7:5e:d6:68:25:cc:43:bb:d4:cb:5c:85:9d:
d1:31:83:ae:ae:26:83:bc:14:20:db:46:c2:59:cc:
dc:3a:c7:30:e6:1b:29:e6:31:76:ff:b5:61:df:9c:
f3:de:22:f2:ef:04:81:05:24:5c:65:fb:83:be:83:
b0:8f:3e:55:24:e1:22:4b:62:6f:ae:53:96:d0:41:
8f:af:62:1f:c8:eb:55:60:f0:f3:a1:d9:0e:0a:26:
1d:97:08:cf:e8:fa:ee:2f:7a:8d:dd:b8:72:2e:72:
d5:f8:3a:61:59:a6:e3:69:4e:72:b9:64:09:24:40:
4f:39:85:6a:29:1e:1c:ba:82:99:dd:d6:e1:5e:5c:
a2:c1:4e:5a:00:a3:5b:b8:7e:3c:2f:83:63:1a:7f:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:84:51:D0:10:F9:8A:54:A8:1F:07:12:83:70:35:24:98:65:3A:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD769692D8B611EFB415848C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:39:95:9d:59:f4:67:57:68:61:81:d0:39:5b:a4:a7:ea:b2:
a0:a9:83:4c:77:79:5e:c5:32:8f:f4:fe:e9:3b:06:03:cd:42:
cb:c4:35:d2:17:37:eb:e8:3c:d5:36:28:69:7b:f2:42:bd:02:
a5:a7:33:1b:c9:45:11:6f:8f:82:e6:4d:f9:6c:cc:b6:da:7d:
b7:1b:eb:15:a7:ea:00:5e:14:d3:92:44:09:21:5c:28:4a:38:
9b:53:4a:87:b9:ea:b3:35:ed:84:c6:46:f0:ac:8b:71:cc:9a:
ac:73:cc:50:ea:c3:7d:1c:53:59:54:20:55:c7:91:c3:35:ed:
21:61:b2:06:68:cc:d8:e0:77:87:45:67:80:ae:9d:60:e4:89:
c6:1a:42:76:18:d4:6d:f1:aa:5c:8d:16:9f:6b:81:ed:09:f9:
cf:e8:32:e2:8c:a1:b0:3a:aa:b1:d4:ce:56:b6:81:c3:24:5a:
08:a2:74:e7:ea:a6:e6:49:21:72:83:57:57:c6:f2:d8:83:14:
98:f5:ad:ae:65:b2:91:eb:28:41:28:59:be:a7:6a:89:93:6b:
55:84:14:cd:c9:08:75:ef:b4:27:d9:e7:95:99:95:d6:20:7b:
ac:12:b2:39:66:02:a0:c4:9b:17:d1:82:4f:7e:63:83:ee:b9:
a2:1f:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:03 2025 by rpki-client