Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D05D57C2D95B11EF8C08F163762E951A.roa
File: D05D57C2D95B11EF8C08F163762E951A.roa (raw, json)
Hash identifier: BKLNceSqvgUpL5SXqJiPrqTsa6+YpwQY/KvTFdAFtYg=
Subject key identifier: 6F:20:5B:52:AB:0D:AD:C8:BA:C4:09:9B:66:4C:0E:C0:B5:48:18:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014041
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D05D57C2D95B11EF8C08F163762E951A.roa
Signing time: Thu 23 Jan 2025 07:29:43 +0000
ROA not before: Thu 23 Jan 2025 07:29:40 +0000
ROA not after: Sat 08 Feb 2025 07:29:40 +0000
asID: 18229
IP address blocks: 154.210.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81985 (0x14041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:29:40 2025 GMT
Not After : Feb 8 07:29:40 2025 GMT
Subject: CN=6791efe7-bdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:f5:62:ab:eb:09:f3:4f:ee:fd:77:28:04:
7c:d2:bc:5a:34:1d:1e:90:21:9e:cb:a6:d6:ea:0b:
d6:0b:5c:74:3d:87:a1:58:7a:7f:ea:87:86:a0:ab:
8d:84:38:ab:e1:bc:a5:77:e4:35:10:61:6a:c2:c8:
43:8c:be:71:f8:fa:83:95:80:cb:4e:2e:c2:0c:6e:
5d:26:a4:4e:cb:31:43:60:8f:20:fe:bc:36:41:13:
b2:d4:f0:f0:c4:f9:82:6c:b8:bc:26:3c:80:e4:c6:
35:87:fc:95:5b:fc:8b:ec:c4:56:03:28:88:85:55:
27:c8:a7:71:84:a3:42:46:df:ca:91:ae:97:f8:f1:
09:e8:33:de:78:c3:99:e4:99:85:bd:f6:e7:8e:b9:
a9:4a:29:4b:26:35:25:53:ef:85:85:85:cf:1a:bd:
b6:16:cd:6c:9c:bd:d3:56:15:95:12:b0:c5:90:9b:
75:f6:6e:47:74:15:ae:15:c8:76:08:41:f7:e3:af:
70:ae:4a:9c:8e:cc:2c:f1:e5:27:f1:08:e4:71:28:
ce:82:f4:ac:8c:39:dd:35:3f:f5:72:63:a7:24:84:
e8:b4:ae:03:84:fa:52:17:6e:2b:c2:00:3d:54:b6:
23:15:8a:37:ac:d7:d3:5b:e3:57:26:d4:ab:ad:d5:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:20:5B:52:AB:0D:AD:C8:BA:C4:09:9B:66:4C:0E:C0:B5:48:18:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D05D57C2D95B11EF8C08F163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.161.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4d:90:69:1e:df:79:87:04:a5:a0:8d:66:72:3f:7f:56:88:
9f:62:c3:42:08:4f:a2:b2:44:c1:b4:99:05:be:c4:96:2b:e1:
3b:05:a4:9f:5c:1b:01:9e:1e:60:09:1d:3d:74:4c:7f:99:ce:
18:3e:54:7c:f5:63:c2:5c:78:26:19:04:10:d0:66:e4:73:d0:
81:42:e1:76:84:99:86:98:6e:43:5c:02:4d:c9:b4:65:2f:a8:
63:bf:5c:3e:6b:33:00:05:b3:bf:3e:4f:43:d3:52:af:37:78:
fc:6f:5f:31:45:00:4d:ff:06:55:74:83:a7:63:ce:8e:56:3e:
41:dc:54:47:c8:17:3e:6a:97:ac:47:e2:94:a7:86:54:22:ba:
6e:55:93:34:97:ad:55:fb:0f:0b:88:65:6e:ce:3c:5e:2a:88:
d8:24:11:44:bd:da:a9:f1:13:77:fa:f1:52:72:92:4e:f8:01:
06:32:be:01:9e:47:a3:57:c6:24:bc:23:b3:04:cd:ac:a6:9c:
67:1d:06:3e:48:7b:9f:e0:2c:4d:9b:79:5f:91:d3:4b:62:b6:
aa:d6:55:e2:81:15:15:3c:a5:8c:d5:0d:71:9b:52:b6:66:ec:
12:9f:0a:63:f2:db:c1:0b:25:e3:2e:8b:9c:04:9d:8f:c8:18:
8c:23:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:01 2025 by rpki-client