Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB888EEECAD111EF8C48A64A762E951A.roa
File: CB888EEECAD111EF8C48A64A762E951A.roa (raw, json)
Hash identifier: 0/92AAASPiCUUhXf+Z08ECyGHHJwd/9svF/U40IjqP4=
Subject key identifier: A7:58:6C:E5:91:90:81:E4:E4:55:69:27:61:19:B5:34:16:36:25:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013519
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB888EEECAD111EF8C48A64A762E951A.roa
Signing time: Sat 04 Jan 2025 19:26:28 +0000
ROA not before: Sun 05 Jan 2025 19:26:24 +0000
ROA not after: Sun 09 Feb 2025 19:26:24 +0000
asID: 203020
IP address blocks: 154.217.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79129 (0x13519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:26:24 2025 GMT
Not After : Feb 9 19:26:24 2025 GMT
Subject: CN=67798b64-96ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:4b:12:7f:8c:41:a6:f6:6d:1c:45:05:5c:
7c:6a:86:c4:38:6b:0b:9c:4e:4e:92:39:c6:af:b4:
4a:8a:c8:0f:8e:76:8f:c1:4b:0d:ec:8d:65:24:f8:
2f:fc:f0:76:5a:c3:c1:c5:fa:14:c2:7c:92:94:0b:
36:ed:40:95:c0:4d:f9:cf:d3:6c:aa:61:25:b4:b9:
34:e5:44:8c:0d:3b:62:2e:4a:69:4f:0f:45:2c:c2:
5d:ae:fb:0a:ab:07:0b:3b:37:c6:32:1a:f5:41:09:
70:72:ef:80:61:6e:b5:6d:f8:7a:ad:32:88:58:14:
1c:04:e7:1f:a4:a1:17:ea:d3:06:79:90:09:0b:c1:
c7:ea:81:b4:29:8e:a7:83:cc:42:b6:d3:9f:64:71:
75:6b:44:12:3a:41:d9:df:63:ca:2a:6e:5f:29:60:
75:3e:3f:e3:08:5d:48:7b:42:ff:41:55:49:70:c8:
d3:bf:0e:a4:bd:47:d5:64:fa:27:52:3d:aa:df:cf:
6e:3b:07:c1:bf:0c:48:21:07:a4:7a:82:b0:ba:67:
f4:9d:40:bb:36:8d:34:a7:03:d2:f8:e7:c4:ee:5f:
78:17:97:cc:ea:a8:07:f2:5a:43:1e:3a:e4:ac:d4:
dd:84:09:90:94:e7:f8:2a:ee:9f:06:61:27:3a:02:
b3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:58:6C:E5:91:90:81:E4:E4:55:69:27:61:19:B5:34:16:36:25:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB888EEECAD111EF8C48A64A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.179.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7c:e7:51:b2:f8:e3:fb:60:af:59:7d:f2:25:2e:8f:9e:92:
4c:2d:1b:43:7f:bf:57:9c:ad:52:d3:2d:d3:fa:ec:aa:5e:ef:
b4:6d:37:7c:e4:dd:53:d5:1a:34:d9:9d:9c:c7:e4:c1:17:9e:
6a:d1:51:46:c2:68:68:1c:b4:e1:7d:26:f0:5f:47:be:34:cd:
d1:77:2c:02:92:75:0c:07:ca:e6:68:0b:09:9d:6b:53:c2:ad:
12:53:b4:cb:0a:68:31:ac:0a:9d:44:98:5e:7e:c5:23:d8:3a:
ae:01:69:84:74:5e:47:82:48:b7:10:91:89:61:fa:6e:c0:8f:
44:04:63:97:25:1a:10:49:62:15:22:46:26:3c:c5:07:ec:09:
9e:9d:80:c5:52:85:73:b4:cf:aa:41:f4:e1:e3:36:d2:53:9c:
a9:a8:e7:bc:c1:a0:45:1c:70:47:27:ac:01:49:e0:a3:25:94:
f4:b5:34:2f:78:06:7c:2a:30:c2:2d:0f:12:68:f9:85:5a:bf:
78:0f:7d:18:c0:cb:a9:2b:1d:00:06:f5:45:18:3b:5d:1a:f7:
e4:cb:1f:86:b6:3c:f0:c2:f7:23:b8:69:63:bf:a3:89:29:2e:
20:5e:22:fa:7c:64:bf:42:f5:3a:b2:ff:37:01:32:8f:50:2f:
6c:00:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:38:10 2025 by rpki-client