Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E20BA6ECD95E11EFB5A26279762E951A.roa
File: E20BA6ECD95E11EFB5A26279762E951A.roa (raw, json)
Hash identifier: H3C21buPZE55pDT7a16sao05zioREr47LqYyFcoJG8o=
Subject key identifier: 2A:45:9C:02:84:07:75:F8:5F:31:0D:3C:14:61:BC:9B:1D:6C:F4:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014059
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E20BA6ECD95E11EFB5A26279762E951A.roa
Signing time: Thu 23 Jan 2025 07:51:41 +0000
ROA not before: Thu 23 Jan 2025 07:51:38 +0000
ROA not after: Sat 08 Feb 2025 07:51:38 +0000
asID: 18229
IP address blocks: 154.210.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82009 (0x14059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:51:38 2025 GMT
Not After : Feb 8 07:51:38 2025 GMT
Subject: CN=6791f50d-83b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:8a:3f:62:41:62:a9:c0:b7:29:56:c5:56:
9e:45:5f:11:c3:36:52:8b:7d:e2:3e:2d:1b:37:2e:
01:85:31:30:94:6f:9e:6f:bf:95:5e:f4:b7:69:36:
2c:c5:97:e0:7d:96:e3:e4:0f:b9:7f:3f:21:f2:a0:
98:ee:d9:bc:6a:d3:5b:01:fb:6a:63:ad:e1:c9:31:
84:2f:52:8b:37:58:c9:be:5e:3c:07:41:cf:97:66:
6d:3a:85:85:fd:93:b8:19:ab:db:34:66:d1:5c:49:
20:7c:d7:58:39:38:9a:5a:3c:a5:8f:b1:e7:a1:6e:
40:a6:69:ab:fd:4a:f4:87:ac:7e:bd:50:f8:aa:45:
41:20:77:0e:7e:69:55:ca:b0:57:58:56:d0:96:c5:
dd:85:75:f1:86:b2:b7:d6:17:cb:63:aa:d1:34:5c:
ff:4c:76:dd:11:4a:06:51:ab:9e:de:76:9f:c5:b1:
dd:30:d1:1d:49:ed:72:28:50:c2:7a:73:7f:f4:86:
50:62:43:2f:be:89:08:b7:d8:e1:35:d4:96:67:08:
08:b1:28:b1:28:70:b7:5d:c0:0a:ad:7a:5c:6f:77:
c2:a4:ba:a4:33:92:3e:f8:a5:44:8c:7c:e8:a5:d3:
e9:d9:bb:d7:6f:25:9b:52:f9:c1:01:75:ae:91:ce:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:45:9C:02:84:07:75:F8:5F:31:0D:3C:14:61:BC:9B:1D:6C:F4:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E20BA6ECD95E11EFB5A26279762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:29:f2:f3:e5:ed:04:98:12:83:87:bc:5d:35:f3:ce:e7:73:
9f:ee:92:e7:87:97:26:f8:f9:a2:14:a5:de:9f:32:42:c0:53:
19:ef:60:7b:3d:2a:ff:cf:87:32:d4:e7:e8:c1:4b:62:d1:f9:
38:0c:ee:d8:83:59:dd:1d:64:ac:fd:95:c7:ab:27:07:26:b3:
5a:7b:a8:a5:f8:5d:fc:8b:6a:2b:80:29:30:d2:8a:b8:03:c3:
36:10:c1:7c:39:a6:cf:78:c1:39:16:40:2b:80:97:89:55:89:
f3:86:83:52:df:83:25:56:cd:2a:e6:96:e6:75:c5:a8:c1:63:
3d:7f:86:6f:51:93:d6:66:49:04:cc:26:69:30:83:7f:42:c8:
a4:02:be:1b:8e:2e:d5:1a:7a:05:59:53:c1:af:4f:c2:8f:2f:
0a:aa:69:e0:59:46:a0:ac:84:f7:21:88:5c:d8:9b:79:f0:ed:
d4:66:33:cf:08:3e:76:82:9e:c0:20:d3:60:ac:26:8d:f9:90:
0e:1f:5f:56:05:c8:bb:e1:66:68:7b:29:e9:c6:35:ae:88:7c:
76:2d:f6:96:d0:4e:9c:df:1d:64:01:45:b8:18:37:6b:df:10:
03:bf:a9:22:65:d8:79:c7:89:d6:04:3e:b2:26:83:a1:b8:29:
16:73:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:37 2025 by rpki-client