Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C644CEDA5011EFB36C035A762E951A.roa
File: E1C644CEDA5011EFB36C035A762E951A.roa (raw, json)
Hash identifier: 1n3aOhHzqAG/Sxr/OQB/JwRm1kbYMj8QreH1fRw9O64=
Subject key identifier: 2F:66:EE:33:CC:1C:7E:CC:F2:F5:69:15:00:0E:B4:66:E2:83:9D:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C644CEDA5011EFB36C035A762E951A.roa
Signing time: Fri 24 Jan 2025 12:43:59 +0000
ROA not before: Fri 24 Jan 2025 12:43:55 +0000
ROA not after: Sat 08 Feb 2025 12:43:55 +0000
asID: 18229
IP address blocks: 154.210.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83705 (0x146f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:43:55 2025 GMT
Not After : Feb 8 12:43:55 2025 GMT
Subject: CN=67938b0f-c896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:0f:8b:de:20:ac:fb:dd:df:6d:a3:ed:4e:
69:54:48:12:89:0e:a0:b0:f6:b6:39:c3:1e:da:8e:
5d:36:fa:99:15:d7:e0:5a:2b:4c:47:23:e7:86:75:
77:da:01:4d:ae:56:55:72:56:9f:ea:b1:44:3b:e6:
2f:af:16:4a:3b:29:03:18:67:a4:52:0e:c5:f4:89:
80:89:8d:63:47:33:ae:d2:cb:33:a8:5f:13:9e:1b:
34:fa:74:6b:f5:3c:dc:07:69:90:4d:7f:5d:4b:bb:
ea:02:7a:dc:0f:6f:c8:3a:82:04:a6:df:93:fb:27:
ea:a2:d2:3e:1e:a9:b7:4e:30:82:39:57:8b:68:e7:
c6:60:e6:8e:25:a3:3b:4b:a3:af:4f:48:92:6a:cd:
7d:af:91:5f:36:47:29:ae:85:72:1e:fe:10:f9:51:
05:55:99:fb:0a:3a:f9:13:12:e5:b3:32:10:06:c3:
19:7f:0a:51:fb:eb:72:20:62:80:2c:b2:74:be:e2:
b4:84:4c:79:4f:a6:35:8e:20:fb:53:3c:2f:15:db:
c9:f7:3c:4f:dd:75:2d:ce:7a:17:2f:c0:1b:c1:19:
bc:c9:a9:05:69:16:b4:50:c4:e0:6d:8c:99:79:4d:
94:1e:1f:1a:d1:51:27:4b:21:6e:9b:0f:17:07:49:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:EE:33:CC:1C:7E:CC:F2:F5:69:15:00:0E:B4:66:E2:83:9D:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1C644CEDA5011EFB36C035A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.166.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:84:4b:72:1b:f9:02:3a:86:f8:f2:c6:25:70:ca:d2:26:dd:
7f:3e:3b:5a:26:aa:eb:0d:2c:30:2f:a6:05:cf:6c:9f:b8:05:
96:e1:f2:8c:21:e6:4c:e7:80:af:ae:b8:fb:e0:05:f7:36:5e:
04:ab:94:74:bc:c6:90:52:a7:ed:02:3d:b5:d1:7b:b5:1f:78:
56:40:d4:d7:2e:f9:fe:9b:a1:30:a4:d8:d8:91:61:0a:bc:6f:
0a:23:68:06:02:82:78:af:83:e3:6b:26:aa:d3:bb:31:f4:b8:
5a:ce:82:5d:8e:f2:14:5e:97:31:ee:4f:e9:87:51:7b:0c:13:
3e:f1:19:88:c7:46:87:e8:34:f9:fb:80:0a:dd:f1:b8:d6:d4:
2a:f4:17:55:4f:d5:63:29:73:aa:d0:6e:ba:0c:36:2b:75:1d:
66:7e:ec:03:4c:da:14:3b:c6:86:33:5c:26:03:81:3a:24:cf:
5a:cc:07:f1:ed:81:3e:ef:08:43:e9:0d:21:26:ea:50:4c:db:
89:ba:04:6a:2a:97:ee:df:43:26:ed:4a:70:89:39:df:c9:30:
11:98:6b:c9:69:5b:6a:02:26:e3:d9:db:b1:2e:65:b0:3e:92:
b9:e2:b3:e6:4a:03:69:8b:49:ae:6c:98:30:86:0e:1a:a3:dd:
88:1d:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:47:42 2025 by rpki-client