Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D889CFD6DA4911EF815D80A9762E951A.roa
File: D889CFD6DA4911EF815D80A9762E951A.roa (raw, json)
Hash identifier: 6uHkQVxYfiWqAYyvimw9zSswbPKYnO9QdvbEo4O+uDU=
Subject key identifier: 5B:DD:2C:CC:64:8B:70:96:77:3D:EE:5C:CC:FE:8C:FB:A9:8F:5B:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014655
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D889CFD6DA4911EF815D80A9762E951A.roa
Signing time: Fri 24 Jan 2025 11:53:38 +0000
ROA not before: Fri 24 Jan 2025 11:53:21 +0000
ROA not after: Sat 08 Feb 2025 11:53:21 +0000
asID: 18229
IP address blocks: 154.210.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83541 (0x14655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:53:21 2025 GMT
Not After : Feb 8 11:53:21 2025 GMT
Subject: CN=67937f42-b001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:f8:69:33:4c:20:e9:c0:07:95:45:3a:93:
fc:45:60:d6:18:31:6d:87:a8:06:d2:e0:a8:7e:b3:
f1:3d:77:4b:5f:8b:02:42:ca:d0:5e:b7:d5:78:a7:
b6:e5:10:f0:5a:79:07:1b:86:f7:35:85:99:5f:84:
2b:a9:d5:33:1b:2f:66:05:d0:8e:5a:21:d2:d2:84:
fc:0c:98:f6:96:02:3e:5c:57:a1:bf:6d:2b:fe:9f:
3c:97:da:66:30:3c:1f:2a:27:fa:ff:2a:db:9e:ed:
9b:64:21:fb:89:31:28:67:aa:c3:cc:c8:9f:a7:63:
d1:f8:11:10:bf:0b:06:93:62:c0:48:28:17:c4:14:
3d:a4:87:36:25:94:9f:be:03:1b:fc:d7:e2:c0:2e:
2b:d4:d8:01:c0:41:6f:1d:00:0f:17:ab:11:48:08:
95:c7:46:ff:c2:0e:bd:b5:91:cc:60:24:9e:6d:55:
74:f9:ba:2d:78:31:c4:94:93:64:2e:8d:90:fe:8f:
90:f0:26:d4:c5:4a:5e:26:6d:ad:63:52:36:c4:8f:
93:55:22:60:1d:d5:ef:89:71:c2:97:a0:34:e4:40:
4b:3a:47:e0:d3:1e:d9:82:36:d9:eb:69:ed:aa:8d:
cd:c4:d8:48:38:76:77:8e:44:af:e9:97:ff:51:a4:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:2C:CC:64:8B:70:96:77:3D:EE:5C:CC:FE:8C:FB:A9:8F:5B:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D889CFD6DA4911EF815D80A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.181.0/24
Signature Algorithm: sha256WithRSAEncryption
51:24:b7:7d:d2:7c:57:cd:ad:53:e9:9c:53:bc:c9:df:d7:57:
6f:2b:de:23:7c:b8:28:40:7c:44:ed:d0:26:8a:62:15:47:34:
37:01:b3:b5:2e:f5:56:71:c3:fb:0a:8c:5c:31:af:2f:fd:0a:
16:1d:46:00:99:ab:6d:10:fd:e3:c2:db:0a:f6:99:2d:86:31:
8b:a3:a9:9f:7a:11:11:82:05:33:ff:e2:4d:64:f3:48:b9:b8:
c7:a4:5c:7b:73:62:11:7b:c8:44:3b:a5:be:ee:d7:51:96:e6:
df:dd:34:4f:3d:a1:f2:6e:41:68:8f:0c:61:98:32:0f:1f:68:
e4:75:52:5c:11:b2:51:7e:e2:a8:cd:9b:47:0f:c0:80:3d:0d:
1d:53:11:cf:7f:d1:e4:d1:f0:ec:56:fe:bb:91:f8:bd:71:0f:
33:59:0b:50:74:9d:2a:4c:65:63:07:dd:4b:67:a8:13:f0:ce:
fa:ca:8e:d7:08:a2:ef:d3:98:98:aa:b1:4f:94:1a:5f:71:74:
95:ac:59:e2:33:19:12:a0:99:c4:0a:e3:89:43:4a:c9:9c:38:
94:5d:79:59:21:41:a2:de:82:59:f0:b3:34:cf:73:a0:8c:3a:
97:69:20:2c:37:e8:13:3d:8b:49:78:33:cd:85:61:41:98:14:
13:40:40:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:42 2025 by rpki-client