Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA8792E2D8B511EF85348D85762E951A.roa
File: BA8792E2D8B511EF85348D85762E951A.roa (raw, json)
Hash identifier: k5WwFlCWfWfmt7vsJ0OGKsYGsxRE7yb9JfAxPJYI5Gs=
Subject key identifier: 01:80:56:A1:DD:20:99:0A:76:59:4F:40:76:97:74:35:72:EA:D9:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA8792E2D8B511EF85348D85762E951A.roa
Signing time: Wed 22 Jan 2025 11:40:51 +0000
ROA not before: Wed 22 Jan 2025 11:40:46 +0000
ROA not after: Sat 08 Feb 2025 11:40:46 +0000
asID: 18229
IP address blocks: 154.210.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81676 (0x13f0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:40:46 2025 GMT
Not After : Feb 8 11:40:46 2025 GMT
Subject: CN=6790d942-62ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:cd:01:34:7e:cc:34:7e:6b:d9:b6:31:8a:
5a:e0:73:67:40:10:07:b0:50:21:4c:17:7b:bc:06:
30:26:50:25:a8:b0:eb:01:13:a1:a2:78:13:f2:b8:
fb:56:e8:0d:83:02:b9:5d:2e:76:66:ca:03:d1:31:
fd:ab:cc:47:40:ed:42:8d:b0:65:c3:ca:5f:6a:c7:
1f:79:5b:0b:32:df:0e:03:03:f8:23:c6:19:12:15:
20:46:56:cf:8e:c5:96:58:56:0f:15:1c:d2:52:35:
7b:5d:25:34:1b:5b:cf:ce:55:b7:04:6c:dd:07:4e:
14:14:83:95:22:78:57:5c:1f:1c:1c:96:32:70:a0:
06:18:91:79:b9:90:34:b7:47:d2:ff:72:0a:5a:0f:
ea:ed:c9:29:73:77:7a:18:4a:ea:b3:f4:e3:31:e9:
71:19:ae:73:0d:62:6c:82:e3:14:31:19:2a:42:53:
f9:d4:17:2e:68:8c:28:cd:9f:bf:bf:25:dd:2d:b1:
21:9a:e7:0e:bc:6d:01:88:39:24:db:fa:7b:da:34:
00:d1:d5:3b:23:c8:36:43:2c:dc:f0:01:ec:a5:df:
5e:1e:be:11:ec:94:6f:47:9e:24:47:e3:28:01:78:
87:f0:33:c5:61:ed:72:9f:82:f3:93:9b:f0:d2:50:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:56:A1:DD:20:99:0A:76:59:4F:40:76:97:74:35:72:EA:D9:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA8792E2D8B511EF85348D85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.201.0/24
Signature Algorithm: sha256WithRSAEncryption
39:77:bb:4d:54:98:2f:81:11:de:33:71:d6:4b:4e:7b:5a:f0:
97:d5:39:78:8d:a9:ae:7a:e3:e5:42:b9:46:96:ce:f9:6c:31:
66:87:f8:7b:a5:ff:71:3d:b0:1c:6f:4f:ac:1a:a3:51:50:6a:
4a:62:f7:00:20:79:90:95:76:55:f9:db:24:93:03:94:c0:7f:
19:3d:6b:74:06:c9:61:ed:b3:26:0c:c9:cd:1b:9a:82:07:e1:
d4:20:2f:bc:8e:ae:73:3b:e8:8c:71:e3:49:f1:7e:62:4f:e4:
b6:4b:23:b5:b2:23:2a:38:94:8a:e8:20:95:15:28:88:6c:f3:
d3:51:44:a3:df:ae:48:52:03:04:f4:a8:5b:4b:09:61:37:46:
74:3b:55:72:04:4c:f6:09:fb:36:8f:d7:8a:a9:41:9d:01:d4:
e3:9d:6e:93:31:63:29:75:e5:dd:12:69:d7:1a:54:56:49:dc:
3e:76:b4:ce:68:14:f5:09:c1:6a:e8:03:b1:5e:4e:3c:6f:dc:
ab:3b:2b:9b:24:ae:f9:50:55:ba:f4:d6:5f:43:f4:b5:82:79:
0a:ee:ed:6c:c6:b3:64:f2:77:c5:90:93:36:3c:5b:54:60:ae:
aa:8b:be:01:86:78:79:7b:c1:a2:d9:26:62:0f:b6:9e:37:73:
8e:0a:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:41 2025 by rpki-client