Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C85A105CD95A11EF9BEFFC5C762E951A.roa
File: C85A105CD95A11EF9BEFFC5C762E951A.roa (raw, json)
Hash identifier: ucxWnYEInulZw3G0dV92QFyJSNMCRHmCXpT+u7i4qmI=
Subject key identifier: 8F:4F:94:82:94:29:01:3A:F9:B9:B2:2B:CF:8B:89:10:C8:DF:A9:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014037
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C85A105CD95A11EF9BEFFC5C762E951A.roa
Signing time: Thu 23 Jan 2025 07:22:20 +0000
ROA not before: Thu 23 Jan 2025 07:22:17 +0000
ROA not after: Sat 08 Feb 2025 07:22:17 +0000
asID: 18229
IP address blocks: 154.210.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81975 (0x14037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:22:17 2025 GMT
Not After : Feb 8 07:22:17 2025 GMT
Subject: CN=6791ee2c-a334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:08:71:d2:4d:17:a6:02:a9:79:2b:6e:7a:
0d:b7:ae:f5:14:3e:29:9e:ab:b2:12:40:6a:10:da:
a1:86:33:f9:01:9d:99:62:18:39:eb:af:67:54:29:
4b:9a:e5:4c:2c:d7:b1:2a:40:4e:6d:c2:ab:9b:e5:
b7:87:d9:31:46:6f:62:63:20:38:4a:54:7d:78:01:
e4:14:83:e0:b3:0b:8f:85:95:9e:cf:ab:60:5e:dd:
4e:1d:ba:e8:fb:b1:e6:5a:6b:19:21:8d:c2:fe:28:
d6:77:70:93:5a:56:be:b6:f2:e1:58:cb:48:0c:f3:
d4:25:a7:b1:91:4e:a9:cd:5a:a5:70:03:ba:89:bf:
46:ce:7b:59:1e:28:ed:99:a3:3f:5c:49:ae:94:2d:
c7:30:6a:9d:7f:bf:d8:0b:d3:79:55:14:5f:e4:b5:
b2:43:22:b6:d0:4e:48:45:74:c2:71:bf:5e:72:14:
cb:3e:67:fb:9e:32:a1:d7:9a:54:2f:94:65:e0:a9:
f5:7c:51:b5:10:2e:ae:c8:d9:1c:79:08:90:6e:a9:
5b:d0:c5:ac:bb:a3:2a:2e:4b:8d:da:ce:36:1e:26:
bf:91:17:9c:a2:5b:2f:60:22:4b:1f:3d:cf:a7:31:
31:4d:b6:a3:b0:7f:75:d3:21:69:b9:a1:f7:6b:06:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:94:82:94:29:01:3A:F9:B9:B2:2B:CF:8B:89:10:C8:DF:A9:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C85A105CD95A11EF9BEFFC5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:e3:9b:a3:71:c9:19:89:3f:50:b3:18:3b:8e:14:9a:c9:46:
30:59:10:ee:59:a5:88:cd:b0:eb:17:b2:86:71:a4:f8:f3:5f:
e2:34:43:59:a1:a0:2a:49:30:31:06:30:23:ee:8a:32:dc:f8:
24:22:e6:b5:95:33:f0:37:2d:e5:c3:38:bd:af:5f:64:e6:0f:
6a:4d:6d:06:88:39:1d:e9:07:5a:b9:66:24:67:5c:aa:2c:ee:
61:6d:b3:70:0d:a1:85:cd:34:bb:92:80:b9:73:a7:d0:6c:be:
10:68:ca:4a:a9:a2:23:80:d8:09:f0:93:f9:d2:de:03:e5:ad:
d7:5c:3d:72:cf:dd:e8:95:fd:0f:88:23:1c:d9:38:f2:5c:c1:
a8:4e:40:50:e0:08:0e:dc:f7:63:3d:8d:5a:6e:30:a1:80:59:
7c:38:1d:86:86:d4:25:61:73:43:c7:41:76:da:d9:05:f4:d3:
ca:72:61:bc:c4:74:bf:0f:76:7f:12:4a:73:7e:fd:93:19:b2:
d4:90:28:24:a7:c0:da:19:41:9a:54:fb:0d:73:e3:26:53:20:
c1:1e:29:22:97:80:0d:90:d1:9e:04:dd:2b:4e:dd:ad:f0:c2:
3d:96:68:8c:6f:5e:7e:dd:a6:bf:cb:13:b9:96:88:a3:af:51:
34:6f:13:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:52 2025 by rpki-client