Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF40F578D8B811EFB65C8399762E951A.roa
File: BF40F578D8B811EFB65C8399762E951A.roa (raw, json)
Hash identifier: SyfB83M0pmD8G7qHy7OSzaIOcdHgkcfzDzwf2wQmias=
Subject key identifier: 9E:5B:8D:95:E0:6F:B4:E6:55:B8:B4:2B:6A:DF:F3:22:F4:B8:E1:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF40F578D8B811EFB65C8399762E951A.roa
Signing time: Wed 22 Jan 2025 12:02:27 +0000
ROA not before: Wed 22 Jan 2025 12:02:23 +0000
ROA not after: Sat 08 Feb 2025 12:02:23 +0000
asID: 18229
IP address blocks: 154.210.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81698 (0x13f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:02:23 2025 GMT
Not After : Feb 8 12:02:23 2025 GMT
Subject: CN=6790de52-65dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:d0:fc:24:37:db:c4:cf:6f:81:6b:87:34:
38:85:b9:c2:7d:73:ce:93:68:78:85:1d:c5:14:ef:
7c:e7:f3:c0:37:d3:ae:84:08:98:e4:09:94:1e:dc:
64:d2:e6:3e:e5:eb:83:a4:48:fe:e2:7b:9f:df:1b:
43:ab:1e:6a:3a:7f:9c:41:25:1f:76:ec:b9:41:ef:
f1:e2:7d:99:d7:4e:1b:36:80:fc:9b:fb:0c:7f:46:
51:1b:52:48:cd:6d:59:81:59:d2:22:82:4a:05:a1:
aa:0e:75:50:a9:08:90:92:07:57:15:9e:19:b3:7a:
27:22:23:d0:2e:8b:15:2c:f6:90:ed:96:d7:49:3d:
21:9c:de:65:66:b9:7c:0b:e7:d8:c2:ae:65:70:1d:
8b:19:f4:30:13:91:9c:b8:25:9d:78:a9:7d:eb:2c:
ce:53:21:0c:cc:42:da:89:e2:21:34:1d:c3:a7:c2:
6e:d6:12:05:a3:f3:dd:35:c1:ef:e2:a7:a0:a5:8c:
78:3f:95:3f:84:a8:97:f6:fd:a8:a2:1f:5e:89:79:
3c:df:c8:e7:7b:89:fc:d3:19:b3:10:05:bd:da:ad:
15:32:4d:1c:a2:07:b6:61:85:f2:82:dd:67:ce:8e:
27:e7:bb:cf:27:5b:f1:83:00:b2:31:bd:bb:28:51:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5B:8D:95:E0:6F:B4:E6:55:B8:B4:2B:6A:DF:F3:22:F4:B8:E1:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF40F578D8B811EFB65C8399762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.212.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:fb:53:8f:96:2c:a6:37:92:6a:bf:37:cd:a2:26:6d:5e:bf:
a8:88:88:c9:20:80:2f:ea:ef:36:60:f4:c4:75:6a:45:85:14:
86:03:8d:33:7d:36:4e:65:85:8d:71:8f:ee:15:11:a3:00:9b:
fb:0e:e2:82:1a:c7:95:82:a9:1c:6a:f8:32:f1:71:c7:13:ad:
4b:93:e0:7b:e2:11:65:4a:d9:e2:52:f1:7b:6f:91:2c:7a:12:
f1:03:cc:0e:b1:46:11:ab:52:4f:1e:88:3f:d1:31:c7:b7:a0:
30:d1:61:9e:66:f0:19:e6:1b:b9:c4:24:ac:84:b0:ef:be:97:
92:90:15:65:ed:ef:39:bb:a5:4d:7b:18:bd:32:c2:df:50:3b:
fb:a7:da:19:b8:36:92:cb:c2:5a:d3:c2:75:12:78:0c:af:92:
53:b8:e0:55:bb:ac:7b:68:8a:13:6c:76:c7:8f:8e:13:23:dd:
1b:33:4e:44:8b:2d:02:20:c9:01:da:5c:73:85:ac:14:c8:b3:
b3:73:ff:81:c7:6f:45:39:47:67:39:d0:fd:73:e2:e2:84:95:
ab:54:46:00:8d:ff:de:4c:51:95:24:96:ed:d1:e3:d5:67:ba:
e9:c5:9e:b9:ff:e6:f2:0f:ee:68:5c:41:55:c8:26:c5:3d:bf:
e1:4c:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:41 2025 by rpki-client