Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E19B822ED8BC11EFB7B3BFB4762E951A.roa
File: E19B822ED8BC11EFB7B3BFB4762E951A.roa (raw, json)
Hash identifier: 1/434iHhy4wtFs0P3AacZjnX+kzhHazdbRksa74HmRg=
Subject key identifier: D3:DA:C7:6E:81:C2:E4:3F:1E:D4:75:AF:50:85:B8:08:37:BE:C2:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E19B822ED8BC11EFB7B3BFB4762E951A.roa
Signing time: Wed 22 Jan 2025 12:32:02 +0000
ROA not before: Wed 22 Jan 2025 12:31:58 +0000
ROA not after: Sat 08 Feb 2025 12:31:58 +0000
asID: 18229
IP address blocks: 154.210.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81730 (0x13f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:31:58 2025 GMT
Not After : Feb 8 12:31:58 2025 GMT
Subject: CN=6790e542-ec05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:06:7d:6f:86:f3:70:80:7e:dc:b8:e7:b1:
0c:bf:7f:74:aa:24:83:a4:c5:44:78:85:f3:9d:43:
9d:8b:ae:f2:85:4d:27:93:b8:16:97:02:ed:b7:c8:
fd:a7:bb:ef:6f:46:e3:4d:41:87:a1:bc:4a:0f:0f:
80:2a:39:00:52:b1:ae:c9:b4:c1:20:f3:ab:87:ea:
8b:27:13:c2:22:fe:9d:b3:12:55:93:a4:b6:f3:e1:
e6:f0:f4:bc:3b:bf:97:0a:4b:c9:17:19:3c:b3:84:
82:eb:56:55:c5:48:74:a8:b0:04:21:98:6c:0c:4f:
fd:f0:1d:cd:90:88:20:b7:ed:90:fe:92:9a:73:65:
b6:d1:32:55:14:19:5b:3e:f4:1a:c2:8c:d5:7a:94:
97:c3:fa:fe:cd:f6:69:4b:0a:58:86:11:48:e8:25:
77:4b:58:45:84:10:54:2a:c0:fe:a4:37:6d:e0:28:
ba:a8:d9:3d:16:a4:8f:49:1c:86:69:c6:8b:f5:bf:
96:a5:bf:4c:d9:10:63:85:d3:1d:0c:f5:71:14:f6:
83:47:07:f7:54:fa:35:9f:e0:d7:a9:12:c3:36:6a:
73:5e:91:ad:86:04:0a:43:30:28:38:7d:95:0d:4f:
bc:cf:1e:1e:63:b4:8e:6b:c6:64:b6:03:37:28:72:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DA:C7:6E:81:C2:E4:3F:1E:D4:75:AF:50:85:B8:08:37:BE:C2:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E19B822ED8BC11EFB7B3BFB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.135.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:34:b5:40:89:84:46:56:b5:86:2d:38:bb:ce:60:b8:52:78:
76:60:b3:64:9a:ab:38:3d:96:71:81:a5:df:53:86:c6:55:a6:
f9:0c:49:dd:e8:a7:81:59:d9:21:42:1e:dd:61:0b:ba:c4:b2:
92:71:77:b4:89:2d:4e:19:b3:70:32:5b:18:46:c1:cc:59:a0:
63:1f:91:ee:5e:25:fa:15:4a:98:91:78:fc:10:64:6f:2b:2f:
b4:92:06:f6:1d:d7:b0:b7:63:c7:ac:e3:15:51:f5:f7:28:58:
83:f3:eb:41:36:d2:f0:ca:6d:33:4b:10:49:24:40:f4:85:e3:
f0:9d:4e:a3:6a:28:9a:ed:71:5c:be:f5:fb:d5:37:49:b5:43:
9e:76:be:b4:d4:90:86:3e:9f:94:e7:a6:3e:1c:10:43:d7:a6:
79:19:00:07:9d:ec:3e:a4:6e:65:1f:ec:31:38:4e:d1:9c:da:
0b:02:0d:a5:ea:9a:9a:30:65:ab:93:b7:1a:43:ab:17:18:47:
1c:47:3b:56:74:f9:7f:e9:44:90:57:79:43:d6:aa:8d:a5:eb:
2c:79:37:7e:af:1e:3b:a4:00:94:b7:57:dc:97:da:ea:05:8c:
23:ba:1c:b3:d7:be:f8:32:fe:04:ea:f3:ab:15:e8:59:ee:cc:
e3:3c:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:07 2025 by rpki-client