Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E9D5A0DA4811EFB217A3A2762E951A.roa
File: E0E9D5A0DA4811EFB217A3A2762E951A.roa (raw, json)
Hash identifier: OWBFsgnj3QZKvL4d6TGbkXHqpOmEx3/ZHPR4BYBOQmc=
Subject key identifier: 49:CA:A2:22:B6:61:B8:ED:FA:E4:22:CD:B3:5B:2D:05:47:7F:84:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014642
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E9D5A0DA4811EFB217A3A2762E951A.roa
Signing time: Fri 24 Jan 2025 11:46:42 +0000
ROA not before: Fri 24 Jan 2025 11:46:38 +0000
ROA not after: Sat 08 Feb 2025 11:46:38 +0000
asID: 18229
IP address blocks: 154.210.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83522 (0x14642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:46:38 2025 GMT
Not After : Feb 8 11:46:38 2025 GMT
Subject: CN=67937da2-53c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:1c:93:cd:35:98:97:e5:aa:27:cf:e1:02:
fa:d5:35:83:62:22:ef:92:57:ea:9e:de:a5:40:c1:
69:59:52:e2:b9:2c:50:5c:ff:8a:e5:3c:29:75:9e:
d6:1d:ba:98:39:31:6b:2f:26:af:1c:b0:82:9b:18:
53:d2:01:71:0c:7d:fa:97:01:bc:fb:90:df:8a:1a:
b8:16:cb:b4:de:a0:fe:d8:f1:32:2a:4b:38:c3:f0:
b7:57:4e:c4:e3:96:b7:f2:2e:f4:70:97:a8:cd:b6:
73:ac:35:12:51:dc:66:d9:d1:4a:ef:3e:02:1a:1e:
5b:4b:51:78:03:f2:71:36:ab:1a:7b:1c:48:db:5c:
33:db:79:fd:df:14:2b:4b:6e:6b:5a:0c:8e:5c:10:
49:22:a5:a2:c1:1f:d7:43:97:40:1f:0a:af:77:89:
5e:79:0c:2b:a8:f2:69:a9:ed:af:12:08:23:97:89:
75:69:18:9a:47:27:38:ba:4f:34:28:ba:11:2e:79:
8c:4a:24:3f:7d:de:00:df:29:14:5d:92:a8:1f:8c:
d8:4f:cb:92:cb:9d:51:51:00:c3:43:41:86:66:90:
1e:a1:e2:d6:81:27:e6:6e:8b:1f:0a:5e:9e:e2:96:
4c:b2:49:05:37:ba:c9:49:6c:03:52:4a:54:07:c0:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:A2:22:B6:61:B8:ED:FA:E4:22:CD:B3:5B:2D:05:47:7F:84:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0E9D5A0DA4811EFB217A3A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d7:d2:b8:36:35:82:a0:f7:52:fe:05:2d:b2:40:28:72:52:
54:62:fd:b1:88:53:9e:56:d2:fb:3e:60:7a:ff:72:2c:e8:7c:
7e:71:50:67:bf:87:2a:50:06:cc:0b:4b:5b:05:1b:67:e5:db:
b5:e5:78:6f:f8:46:f2:50:bf:fc:65:45:d2:c8:2a:be:70:50:
8f:df:ed:7f:8b:7c:a3:49:5c:30:69:78:01:ca:22:c9:26:89:
7e:60:e0:48:32:32:52:02:5c:45:7d:3a:b4:d2:bf:d3:cc:e1:
58:94:89:33:8b:4b:72:2e:ad:97:75:9e:71:3b:c2:9b:6e:27:
9e:7f:96:ee:71:17:52:e0:af:a4:89:33:05:a4:73:3c:30:17:
fe:5b:66:6c:c1:7f:f3:e3:00:1b:aa:0c:a2:8a:9d:77:6b:aa:
63:4e:dd:6d:ed:59:bd:6a:a6:95:4e:75:c2:5e:1d:c2:79:6c:
2c:e1:85:15:cc:ee:d8:96:b9:25:80:1e:9e:dc:88:fd:70:62:
9b:fd:d4:67:3d:87:3b:b0:5e:39:e7:d9:14:51:f2:af:3c:c2:
e9:ba:71:ca:d9:8c:07:37:d6:56:17:21:8c:59:07:79:37:93:
df:9c:09:41:74:e1:6a:78:c5:71:4e:15:b4:65:b6:a4:f7:fc:
7d:2e:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:22 2025 by rpki-client