Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE1C32F8D8BA11EF804F2AA7762E951A.roa
File: DE1C32F8D8BA11EF804F2AA7762E951A.roa (raw, json)
Hash identifier: ln60RwOxrsPP36O2abbo6vW9UYv4nINk3xtxrGiHqDY=
Subject key identifier: CA:5A:ED:BA:EA:CF:9A:F0:AB:39:09:6A:FB:EE:35:2E:B7:50:34:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE1C32F8D8BA11EF804F2AA7762E951A.roa
Signing time: Wed 22 Jan 2025 12:17:37 +0000
ROA not before: Wed 22 Jan 2025 12:17:34 +0000
ROA not after: Sat 08 Feb 2025 12:17:34 +0000
asID: 18229
IP address blocks: 154.210.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81714 (0x13f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:17:34 2025 GMT
Not After : Feb 8 12:17:34 2025 GMT
Subject: CN=6790e1e1-d8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:b7:cb:24:43:28:25:ae:ed:b8:2e:88:28:
77:17:15:4e:38:55:c0:b5:0e:58:98:ef:c4:ee:a3:
9c:64:05:57:03:e5:30:d6:0c:b9:e4:47:5e:ef:b6:
42:5d:b3:bb:2d:0d:45:f8:fd:56:59:a8:18:6d:27:
cd:ab:ab:7e:c3:11:de:d6:af:9a:89:90:e8:5b:f0:
e0:c1:73:9f:b4:d0:d3:da:bd:9d:d6:c5:7b:e0:ee:
b4:31:96:ea:f4:07:b8:8d:65:86:f7:f2:54:74:d0:
65:33:9e:97:3a:9f:01:30:a3:d2:b2:15:d2:3d:68:
7b:a5:0b:83:3e:a0:5b:87:d0:30:bf:d2:9c:65:28:
bb:5b:d0:11:a5:3a:cd:e4:94:8a:67:b4:65:bb:01:
15:de:b6:6e:60:b3:74:8e:03:35:6e:38:9f:72:8e:
8d:bf:92:62:33:a4:17:3a:4e:f4:d3:5a:55:46:0b:
06:0b:06:f5:45:16:15:b2:9f:ea:c1:d6:4e:5e:1e:
0d:97:93:ad:14:29:6b:c2:9f:b5:d9:4d:59:ab:1a:
e2:37:1b:1d:21:df:cf:e1:9f:d9:c5:fa:a4:29:e1:
68:93:68:d9:e3:28:5a:8f:8c:37:ec:6d:5b:08:f3:
0a:ff:fc:30:98:e2:3e:84:c6:31:41:f4:be:d6:80:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5A:ED:BA:EA:CF:9A:F0:AB:39:09:6A:FB:EE:35:2E:B7:50:34:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE1C32F8D8BA11EF804F2AA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2e:9f:c7:c5:26:37:a1:96:01:9a:28:bf:d8:6b:d6:82:a4:
19:ce:04:b2:99:46:02:07:40:e8:7b:04:1c:68:6b:e2:1d:71:
18:08:b6:4e:c8:8a:3c:6e:f8:09:06:54:de:5a:66:aa:93:63:
cc:ad:5e:d2:42:69:95:55:85:b0:de:cf:3c:ae:3c:c2:ef:9f:
b8:f7:b2:c4:9b:81:7e:c0:b3:1d:a7:90:f6:28:51:44:70:44:
36:30:b0:42:fe:8a:59:4c:64:01:bd:e0:88:d1:48:c7:42:c2:
af:c4:34:71:05:42:b1:af:9b:c2:df:c2:9a:5f:e1:12:cc:69:
2e:b8:e4:4f:89:7f:6d:b9:33:0b:cd:06:31:9e:d7:94:78:9f:
93:ea:42:c7:67:a5:99:fb:cd:14:70:bf:73:44:88:bb:6f:f3:
f6:bc:27:a9:a0:32:ae:90:60:89:ce:ee:68:30:bc:1b:fa:0b:
13:3f:93:bb:9e:e0:ea:bc:54:59:8d:a5:60:90:bc:06:4f:1f:
d4:29:fb:10:55:a4:05:39:af:96:7c:9f:be:b9:ea:94:5b:e0:
df:91:48:12:1b:b9:da:9e:6a:51:57:45:48:60:2c:7c:db:27:
14:f0:af:e2:ac:8f:e7:a7:e0:3f:81:0d:78:15:87:af:29:5f:
f4:fe:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:16 2025 by rpki-client