Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD563D7AD15611EF95C2DFB4762E951A.roa
File: DD563D7AD15611EF95C2DFB4762E951A.roa (raw, json)
Hash identifier: 27JzMhgTC8SYWmEkp5e25utEWga0zd6lpOgzohNVIa4=
Subject key identifier: CD:57:0D:48:E5:9D:DA:75:BB:60:EC:D0:01:8E:4D:1A:30:86:D7:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ACE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD563D7AD15611EF95C2DFB4762E951A.roa
Signing time: Mon 13 Jan 2025 02:34:08 +0000
ROA not before: Mon 13 Jan 2025 02:34:05 +0000
ROA not after: Thu 13 Mar 2025 02:34:05 +0000
asID: 17561
IP address blocks: 154.216.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80590 (0x13ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 02:34:05 2025 GMT
Not After : Mar 13 02:34:05 2025 GMT
Subject: CN=67847ba0-1403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:41:db:46:f7:3d:a4:88:01:fc:15:79:ca:
64:a0:75:b0:f0:e2:d2:41:4e:3a:6a:75:d9:31:84:
2f:0c:01:d7:9a:a4:a6:b2:a4:9c:87:2a:2a:5a:5c:
ad:a0:54:98:30:a7:c6:24:d6:4c:97:63:a2:94:22:
8e:3e:1c:d5:14:90:53:31:b7:bc:8b:fe:27:fb:84:
38:26:77:83:13:3a:1d:61:32:a5:56:5a:90:ad:15:
86:8d:5c:75:b6:59:69:6e:9c:66:85:a3:7c:63:63:
e6:87:df:40:91:f8:69:ae:cb:b9:9c:42:bf:7f:56:
57:70:03:aa:00:4a:3b:b4:fe:20:c8:58:6f:46:ed:
74:bb:8a:6d:9c:ee:12:ee:e9:ab:07:5d:f7:7b:17:
66:5b:7e:16:c2:f1:db:fe:7b:5f:12:a5:4d:a6:26:
07:f7:5e:34:a3:77:ad:4b:8c:b1:5c:cb:74:9e:b4:
0a:d7:f3:b7:72:7f:68:aa:39:74:24:4f:c6:9e:5b:
f2:49:de:d1:42:9d:23:f9:8d:ac:bb:2b:f6:0c:50:
f2:ed:11:bf:ee:99:30:eb:8f:92:55:67:e0:be:a3:
64:65:cb:92:c7:b0:b1:44:50:17:66:ec:14:9a:d0:
53:4c:b4:e1:95:7f:1f:8c:ea:fb:e4:c2:81:d1:92:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:0D:48:E5:9D:DA:75:BB:60:EC:D0:01:8E:4D:1A:30:86:D7:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD563D7AD15611EF95C2DFB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.18.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6f:19:de:82:3c:41:ba:b9:b1:cf:38:da:bd:52:2a:5a:82:
9b:38:8d:d7:b9:86:80:5d:c6:5c:35:93:68:cc:09:06:ad:ac:
bc:44:55:02:3a:f4:8f:a4:0c:6e:1e:13:93:59:5f:10:63:b3:
2e:2c:34:7a:41:5e:65:55:b2:c9:c9:5d:54:08:67:f4:4e:ab:
f1:05:a0:18:fa:83:4d:ba:9f:c1:c9:d8:b4:54:f8:3e:b4:3a:
33:e2:bc:1d:60:c1:7f:53:90:1b:44:ea:37:79:96:ef:96:99:
0d:5e:d7:fa:aa:7b:cb:0a:67:77:fa:ac:42:a9:ba:72:b8:81:
15:8c:b6:7b:48:06:f3:38:9d:25:eb:36:68:d4:9a:b7:13:de:
05:00:6a:31:5a:e0:13:91:47:0f:3b:e7:d2:65:1f:1b:59:a4:
00:6f:cb:3e:4e:5c:0a:d7:5d:4d:9c:12:c3:f2:2b:56:dd:b9:
7b:e8:25:21:0d:99:b5:3c:65:d7:b0:44:b1:21:bd:68:97:0d:
69:db:0d:a7:c1:70:de:92:58:88:82:06:1c:25:22:cb:c9:a8:
bf:7c:82:74:67:df:6d:92:5a:45:a3:cc:53:a3:e9:e7:ec:06:
23:d7:6d:5d:9b:19:7b:9d:23:91:63:45:00:77:ab:f7:7a:29:
93:fc:7e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:39:48 2025 by rpki-client