Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09215E0D8A911EFB492BBB4762E951A.roa
File: E09215E0D8A911EFB492BBB4762E951A.roa (raw, json)
Hash identifier: SR0PviBNApPTYzDDJs+D27kYRohL/sw0BoCFUg2aZsk=
Subject key identifier: 8B:96:9F:5E:5D:86:13:3D:B6:8D:6B:A7:7E:DA:C9:B1:43:29:CF:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09215E0D8A911EFB492BBB4762E951A.roa
Signing time: Wed 22 Jan 2025 10:16:00 +0000
ROA not before: Wed 22 Jan 2025 10:15:56 +0000
ROA not after: Sat 08 Feb 2025 10:15:56 +0000
asID: 18229
IP address blocks: 154.210.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81588 (0x13eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:15:56 2025 GMT
Not After : Feb 8 10:15:56 2025 GMT
Subject: CN=6790c560-699d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:11:93:0d:af:c3:49:16:d0:6f:d4:4e:f2:
2c:0b:90:04:98:94:41:82:55:41:e7:f6:cd:ac:97:
1f:db:25:18:40:54:12:bf:4f:a1:e3:22:68:b1:7a:
56:13:ff:f4:1d:8b:7a:57:af:9b:08:13:54:42:60:
1b:0e:06:ae:74:68:54:8b:5c:f0:44:b3:83:5f:b6:
e9:48:4a:1b:5a:5c:3b:d6:c8:f1:a2:8f:ae:72:6c:
0e:23:db:cf:10:c1:14:55:ac:5d:c8:fb:d2:a7:36:
da:25:72:1a:f1:a8:48:d5:d1:f7:19:4a:ee:1a:c6:
bc:ca:54:33:94:02:d3:4e:76:85:8d:5d:d4:76:da:
b5:5e:b2:c0:06:81:3d:d2:8b:6e:cc:1f:7f:f0:24:
cc:b4:7a:66:0b:3c:06:95:2a:4c:10:01:3a:76:ee:
8e:30:55:ab:20:d3:7c:4a:b7:9d:d8:7f:4e:38:c0:
3b:c5:0f:92:ac:59:7d:3e:85:18:63:0e:92:10:e8:
c1:5e:44:ca:24:13:14:fe:ba:33:e7:b1:c4:e2:5b:
d6:ea:f2:ad:4d:c6:46:b7:e3:f4:ea:af:1e:13:f9:
83:72:4c:b9:7a:d5:15:a1:09:f9:b4:28:13:a8:8a:
0a:dc:c4:ff:e7:5c:9e:d0:48:d2:24:4e:df:2d:c0:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:9F:5E:5D:86:13:3D:B6:8D:6B:A7:7E:DA:C9:B1:43:29:CF:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09215E0D8A911EFB492BBB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.227.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3b:2f:06:64:c1:a4:97:54:93:05:c1:2a:c0:a5:be:72:e2:
77:eb:be:2f:43:a8:a2:3d:5b:a4:60:ca:9d:1e:94:f7:bf:c5:
a1:7c:4b:46:a5:a5:43:e2:35:39:35:7a:24:81:37:81:9d:8d:
7c:94:ec:23:07:28:67:48:70:f0:26:d7:e7:a3:be:78:fa:20:
e7:53:9c:3d:5b:df:7f:75:9f:af:98:68:57:5b:2a:e1:e6:2c:
ff:ee:72:59:d6:1d:1c:6a:6a:a7:86:3e:5b:7c:be:fb:bc:d5:
12:f5:54:ce:a0:77:ae:73:a8:38:7d:b7:f3:ae:ae:0f:01:91:
eb:5b:f3:50:e1:20:c2:f6:14:6a:39:49:9a:e8:41:6b:53:80:
8d:6b:71:b2:0b:53:15:46:1d:e2:ef:91:7f:83:51:85:40:04:
fd:45:ca:7c:f3:5e:80:2a:4c:57:fb:cb:b5:ae:fc:28:d3:75:
ce:5d:9d:72:0e:41:63:a0:b1:85:6d:53:0a:f6:6a:eb:32:6d:
7e:49:53:07:06:b3:56:9f:0a:53:d8:66:98:d8:44:c2:e2:17:
a1:8c:bf:39:db:45:48:46:b5:c3:8b:63:4a:84:c8:53:4e:9b:
ae:32:b3:eb:02:e2:46:f8:c3:fc:f3:ed:ca:eb:e3:1f:34:04:
c0:34:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:38:06 2025 by rpki-client