Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF1680F4B20F11EF9B87D163762E951A.roa
File: DF1680F4B20F11EF9B87D163762E951A.roa (raw, json)
Hash identifier: uZQTGTwa8eTPQPuyOK2qC8UN56UBlvzI8BD5HZ2nEb8=
Subject key identifier: C1:95:5C:CA:D8:E4:78:88:71:2C:E5:9A:60:B5:F4:96:65:83:73:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF1680F4B20F11EF9B87D163762E951A.roa
Signing time: Wed 04 Dec 2024 07:17:51 +0000
ROA not before: Wed 04 Dec 2024 07:17:47 +0000
ROA not after: Sat 01 Feb 2025 07:17:47 +0000
asID: 150008
IP address blocks: 154.210.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71588 (0x117a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:17:47 2024 GMT
Not After : Feb 1 07:17:47 2025 GMT
Subject: CN=6750021f-d444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:70:7a:8c:2f:f4:34:b6:14:70:06:09:db:
f7:cb:e9:c8:6e:00:75:db:fc:25:ea:40:9a:66:2a:
81:91:fe:f0:43:88:96:37:f5:10:f0:19:d0:cf:67:
58:6b:a6:0e:9e:f9:78:51:1f:51:f7:11:28:7b:ca:
77:75:08:dd:4a:c9:4e:c6:10:76:ea:0f:e6:5c:ce:
19:e0:01:0e:0a:72:7b:82:82:cc:5b:a6:ff:07:ca:
9c:a2:b8:48:2a:06:cb:4a:68:47:db:7a:ed:0c:2a:
67:69:b1:13:68:a5:70:78:82:85:b7:f3:ed:41:95:
eb:67:2d:c1:51:11:31:6b:13:b5:1a:49:eb:ab:35:
42:8e:4b:f2:01:97:dd:db:a7:33:ca:14:16:2e:c0:
6f:8e:96:e2:b4:9a:68:61:f7:01:ef:2c:c9:5f:ca:
09:0e:49:dc:27:5b:c4:02:65:b5:a8:33:42:65:e9:
5c:b2:a6:a9:d4:61:2f:48:32:de:94:f9:59:4f:23:
f0:ae:93:00:2b:cc:5f:ce:d2:bc:95:c3:cc:af:56:
1f:78:c8:f2:9f:14:6b:92:39:25:f3:ba:d4:0f:ad:
87:e9:e0:80:fb:68:92:d7:5b:8e:4a:e1:e8:da:d6:
a3:02:b8:66:33:b8:21:63:da:73:f0:4d:c1:cb:22:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:95:5C:CA:D8:E4:78:88:71:2C:E5:9A:60:B5:F4:96:65:83:73:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF1680F4B20F11EF9B87D163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:dd:04:cf:e9:47:f9:56:24:44:cb:bd:90:80:cc:41:63:9b:
42:1b:08:1e:c0:88:6a:fd:c9:c6:f7:af:2d:b4:64:9c:71:98:
d6:7e:c9:b1:50:d8:58:1d:1f:3a:7d:4e:9d:8c:e8:7c:85:af:
63:9b:4b:a9:67:49:6d:90:f1:2a:86:f5:ee:af:53:2a:aa:c7:
00:94:af:db:6b:03:25:3c:89:8c:81:aa:b1:5e:ff:d2:50:99:
90:30:86:ca:24:f0:12:3c:fb:89:a2:35:36:1e:95:a5:a6:85:
5c:05:79:d0:66:44:cc:17:14:51:1b:60:d2:d5:5c:1b:05:80:
bb:db:30:96:93:eb:cd:d9:11:29:67:24:1b:93:b2:9f:1d:1d:
84:5c:7e:d1:1b:28:d0:ae:5e:d7:7e:4c:e4:8c:fb:8e:9b:26:
f7:c6:89:06:2f:32:3b:ed:38:69:cd:e5:a7:18:b5:33:5f:a0:
17:6e:0c:30:34:e7:2b:fc:80:06:17:4b:af:e2:04:e1:a7:84:
b4:78:76:b5:a0:8f:95:5b:28:d0:ee:00:44:cb:64:1f:68:fc:
52:3b:ca:5b:bd:2a:53:da:8b:9c:5a:52:2c:94:97:b6:e8:0c:
9a:a8:21:ad:d9:73:8a:7d:59:1a:38:36:d3:2a:da:99:5d:89:
2e:cd:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:27 2025 by rpki-client