Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B34D2392DA4611EF9AE7D092762E951A.roa
File: B34D2392DA4611EF9AE7D092762E951A.roa (raw, json)
Hash identifier: wxDc4kv0uf2RFwfnM7Y2sOTl+29lTSwjiITs5qWGH9A=
Subject key identifier: 0F:4A:EC:63:A6:23:A4:C1:F3:F8:45:07:9B:E3:55:35:0D:CC:3A:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014614
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B34D2392DA4611EF9AE7D092762E951A.roa
Signing time: Fri 24 Jan 2025 11:31:06 +0000
ROA not before: Fri 24 Jan 2025 11:31:02 +0000
ROA not after: Sat 08 Feb 2025 11:31:02 +0000
asID: 18229
IP address blocks: 154.210.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83476 (0x14614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:31:02 2025 GMT
Not After : Feb 8 11:31:02 2025 GMT
Subject: CN=679379fa-0067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:96:ca:81:73:28:fc:7d:ab:a6:bc:63:83:
a3:68:6a:60:86:a2:b9:1a:c8:df:3b:0d:a6:4d:d0:
3b:ee:46:f0:92:9e:0a:99:3a:63:55:76:3d:10:e5:
7e:e6:01:34:21:f5:ac:cf:a1:68:99:3d:6a:d9:fa:
3b:47:2d:2d:70:b8:8e:24:28:b8:85:61:4f:82:96:
99:e8:01:ed:93:91:12:f6:84:e0:4a:dd:45:9e:2b:
93:00:b7:51:10:31:c2:de:8c:44:12:f8:16:8e:8a:
9d:b0:2f:d1:c4:84:33:74:45:0e:ce:56:9d:67:9a:
15:15:57:b6:98:ff:5d:26:da:97:65:cd:ff:9d:3d:
0b:7a:51:cf:03:74:28:0a:2a:0b:d4:3d:be:eb:23:
2b:aa:77:69:1c:72:cb:66:72:5d:f6:3f:d3:a1:06:
85:a9:f0:70:f2:84:dd:3a:7e:72:2b:8f:05:26:8e:
4b:f0:44:1d:3e:be:c9:da:48:b3:94:05:60:af:03:
71:8d:e7:e1:39:5c:64:be:8c:a6:bd:22:6f:c4:af:
ee:90:8a:01:9b:73:14:c8:6d:d6:5d:c7:d6:97:db:
d3:1c:cb:89:28:02:8f:0f:27:db:0f:57:05:e1:c7:
aa:aa:b6:3a:17:ae:ce:23:5a:36:e4:b7:b6:2e:de:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4A:EC:63:A6:23:A4:C1:F3:F8:45:07:9B:E3:55:35:0D:CC:3A:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B34D2392DA4611EF9AE7D092762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.182.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0c:58:c2:ac:c7:73:39:96:cc:41:b4:47:df:f5:e7:3c:ed:
46:a9:55:78:c3:b6:8a:08:38:41:0d:fe:fd:d7:ff:9f:8e:e9:
59:fe:cd:3b:22:1a:26:51:30:aa:c5:15:ac:51:61:ad:11:cf:
db:47:92:96:81:c9:c8:b0:2e:c8:41:37:c6:58:51:de:f0:f6:
5f:7c:28:31:4b:a7:b9:27:d1:6b:8e:86:3c:ef:08:4a:80:4e:
33:da:91:b4:4c:16:7b:f2:0f:7f:1e:ec:b5:89:4f:f8:37:a2:
fb:29:09:be:b7:6f:56:7f:cd:26:6d:21:4c:ea:b3:1e:e9:5b:
99:f9:72:fa:bf:fc:7f:e7:3b:0d:8c:71:1f:6e:7e:e5:fa:64:
d0:01:4a:cb:e0:2f:eb:14:10:6a:31:76:6f:2c:1f:2d:65:5b:
06:df:6a:83:26:3e:5f:2e:98:f0:5f:11:92:b2:3a:f1:15:06:
0c:e0:f2:10:85:32:11:bb:c7:0f:26:cc:68:a9:5a:33:4a:c3:
2d:b3:62:76:c6:c7:0e:86:cd:10:da:5b:88:dd:e1:5f:1c:78:
60:88:b7:1b:6d:f7:ad:c0:73:0e:0a:1a:92:24:87:f7:8c:5d:
58:37:41:26:a6:0e:19:74:4f:25:1a:fc:e9:d0:8f:eb:5e:b2:
ad:94:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:48 2025 by rpki-client