Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08BF21AD4B411EF80768943762E951A.roa
File: B08BF21AD4B411EF80768943762E951A.roa (raw, json)
Hash identifier: Sk//CNbtNPRZVolUptN/GnDAXTeCJs/yUxwkzQVWbmc=
Subject key identifier: 34:00:03:49:48:63:7E:B2:7F:01:74:85:53:97:10:D9:D8:26:AD:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08BF21AD4B411EF80768943762E951A.roa
Signing time: Fri 17 Jan 2025 09:23:19 +0000
ROA not before: Fri 17 Jan 2025 09:23:16 +0000
ROA not after: Mon 17 Mar 2025 09:23:16 +0000
asID: 17561
IP address blocks: 154.213.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80983 (0x13c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 09:23:16 2025 GMT
Not After : Mar 17 09:23:16 2025 GMT
Subject: CN=678a2187-5730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:9e:52:e9:20:85:0a:3b:b6:db:c7:7d:54:
a8:11:23:6b:da:17:db:f8:59:27:4f:61:23:8c:b0:
e1:be:0a:b9:90:fc:cb:48:41:15:96:f9:9a:4d:70:
ae:95:3a:c0:9b:4e:3d:a0:0e:b6:35:e7:8d:94:7f:
73:ed:88:f5:cb:56:10:af:e2:9d:d4:58:d9:0f:71:
ba:3f:c8:e6:ed:50:ec:74:c8:0f:a7:3c:f9:5e:55:
18:83:6f:c1:af:4a:49:99:42:ba:79:49:65:e5:f3:
b1:84:05:d2:86:2e:b5:72:6f:8e:3b:b3:1d:a5:81:
f7:55:b6:35:80:d1:c1:0a:39:65:71:0c:2a:4e:a5:
ec:b9:31:af:40:1e:fb:fb:62:4f:46:db:4d:14:06:
07:01:d2:f5:77:44:9c:41:ad:81:ff:5d:0c:95:e7:
3c:6d:56:ae:a7:4e:7b:13:41:cd:0b:a1:9c:bf:0c:
bf:71:1c:79:aa:86:4c:bf:0e:10:f5:6d:a1:5e:6e:
1d:00:4a:da:ad:a0:dd:bb:35:28:6f:71:e2:56:0d:
77:bb:64:ea:95:6e:e9:b7:16:cb:95:74:43:04:ce:
57:17:7b:19:a0:10:64:3b:e6:62:45:ab:f5:e2:8c:
e3:b2:25:a0:01:c7:2f:e3:63:cf:dc:56:1d:4f:13:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:03:49:48:63:7E:B2:7F:01:74:85:53:97:10:D9:D8:26:AD:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B08BF21AD4B411EF80768943762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.190.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d9:e1:48:7c:40:cd:6b:c7:2c:d5:f2:45:c7:ed:e1:d6:3b:
1a:a0:4f:ea:7e:93:1b:64:30:ae:03:11:53:a4:9a:7f:9b:1f:
84:55:ad:34:17:f7:6e:37:0c:6d:09:73:97:37:3b:74:34:82:
75:e7:19:cf:be:14:26:19:38:21:b0:23:78:33:5d:f2:9f:ba:
68:a4:fb:9e:0a:af:47:b7:e3:50:3f:de:19:e1:70:b8:73:d8:
f2:17:ae:19:c4:b0:a4:4c:13:a6:ff:58:99:fc:2c:86:49:7c:
d9:2c:16:4b:40:b6:84:10:e4:87:7d:97:33:9a:51:80:05:03:
38:6d:f6:10:f2:6f:16:d7:c8:c1:69:83:4e:ec:96:b5:2d:0c:
73:e6:f7:b2:0e:ef:e0:ce:72:20:aa:12:39:ac:03:1f:02:81:
01:f8:0c:fa:14:29:c4:9f:1b:22:2a:09:ce:ad:74:32:e6:c4:
d2:92:4e:f7:b4:d4:ae:66:bd:59:8c:44:68:00:1c:37:bb:83:
41:df:33:69:55:4b:e6:c2:1b:02:ba:02:a1:af:73:da:10:ce:
2d:1a:5f:17:fa:dd:94:77:dc:6e:d4:97:2a:48:b5:dc:72:d8:
0c:ff:d3:02:d9:c9:a5:f8:21:75:af:b5:e4:47:fd:75:cd:7b:
68:5e:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:29 2025 by rpki-client