Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4831578D8B911EF968FC6A0762E951A.roa
File: D4831578D8B911EF968FC6A0762E951A.roa (raw, json)
Hash identifier: jCbu+nQgQTAGxtH2hhS0iAgwDNUre0k5J4crSUJyNWE=
Subject key identifier: 18:FF:B3:64:AA:2B:0A:22:B4:9A:99:AB:41:C9:84:6B:34:0D:2B:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4831578D8B911EF968FC6A0762E951A.roa
Signing time: Wed 22 Jan 2025 12:10:12 +0000
ROA not before: Wed 22 Jan 2025 12:10:08 +0000
ROA not after: Sat 08 Feb 2025 12:10:08 +0000
asID: 18229
IP address blocks: 154.210.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81706 (0x13f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:10:08 2025 GMT
Not After : Feb 8 12:10:08 2025 GMT
Subject: CN=6790e024-400e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:15:21:a2:6a:c9:63:3c:5f:23:40:2c:a9:7a:
f1:23:c4:83:64:63:a2:55:67:a9:0d:69:67:5b:b6:
bd:a3:23:99:ca:94:0e:6e:1d:2c:22:7e:61:b0:ff:
54:a5:40:47:5c:aa:7d:62:94:bd:c1:3a:40:da:d3:
0b:4b:a7:87:fd:8d:2a:d5:64:60:a7:83:15:de:30:
c7:15:f7:2b:24:0c:d2:13:21:8a:e3:49:9e:cc:82:
4a:2a:d6:aa:f6:5c:6d:be:06:c3:d5:85:82:eb:dc:
26:8a:a6:67:b0:98:ce:31:e9:df:5d:d4:7a:ef:2c:
04:fc:4e:a4:6f:6f:17:e6:66:ff:a0:27:d5:e3:03:
29:ae:d0:b7:a2:2c:d6:a9:9d:31:b0:96:db:6e:06:
13:80:a6:b2:06:3f:cc:63:1f:01:35:f2:11:6f:a8:
92:31:c6:bd:a3:2f:db:f2:21:3e:95:59:08:6c:6c:
cb:71:02:a9:d9:53:0e:32:79:ce:8e:94:7b:27:3c:
59:40:c8:39:40:e2:85:46:97:ef:88:45:9f:4d:84:
a7:b4:8c:a8:79:f6:c1:b4:4a:07:32:b3:50:b8:b7:
3d:c8:16:a5:ce:91:48:0f:00:a1:dc:7c:ef:1f:4a:
f4:4c:61:cf:24:34:cd:13:94:2a:4f:be:f8:ac:9b:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:B3:64:AA:2B:0A:22:B4:9A:99:AB:41:C9:84:6B:34:0D:2B:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4831578D8B911EF968FC6A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:14:6a:03:1f:79:de:cb:17:ea:91:da:7c:c7:67:31:ad:ff:
f8:78:c0:dc:10:89:82:13:f6:1f:70:54:37:87:d6:5d:55:1d:
77:0f:4f:49:e1:7d:21:48:86:38:45:4f:25:12:0a:d0:4a:63:
ef:bc:96:f1:6f:76:97:0b:df:d7:f0:a1:6b:4d:7e:cb:80:3f:
85:5c:9a:1f:22:73:86:ee:62:3e:09:e3:22:cd:d1:1c:79:37:
bd:1a:3c:35:70:3a:2b:ba:74:d6:c8:f1:1c:bd:a6:cc:1c:1e:
22:65:74:9d:15:b1:85:4e:93:4f:98:85:d3:a9:80:e1:23:5b:
e5:db:9b:3e:3e:89:18:7c:84:d0:18:04:15:41:e7:a2:32:fa:
17:e8:3f:9b:f7:53:59:11:6c:07:18:12:47:9f:39:56:48:41:
33:ed:00:96:2e:e0:e7:67:88:8e:21:a3:e4:42:a8:79:05:63:
3c:53:2b:4a:70:10:fb:05:47:04:9a:60:74:55:d6:3a:6a:58:
fd:4f:c9:46:25:f3:d0:95:8d:83:c6:b8:57:b6:64:ea:99:a8:
cb:fc:64:cb:b5:ae:62:5d:09:f2:e5:4f:84:80:ec:c9:e0:ac:
07:4a:4f:be:06:0b:22:ae:75:ce:dc:54:ff:87:28:59:c2:ea:
d9:c7:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:11 2025 by rpki-client