Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E37563D4D8B311EF9EDB8F7B762E951A.roa
File: E37563D4D8B311EF9EDB8F7B762E951A.roa (raw, json)
Hash identifier: 2TtqgTb13ABtbrhuHFGcFrLQLDx0KqWgHoUGy9G3E7Y=
Subject key identifier: B3:D1:05:96:C3:49:11:F4:21:E5:B8:AC:2B:8C:AD:A6:44:27:48:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E37563D4D8B311EF9EDB8F7B762E951A.roa
Signing time: Wed 22 Jan 2025 11:27:40 +0000
ROA not before: Wed 22 Jan 2025 11:27:36 +0000
ROA not after: Sat 08 Feb 2025 11:27:36 +0000
asID: 18229
IP address blocks: 154.210.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81664 (0x13f00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:27:36 2025 GMT
Not After : Feb 8 11:27:36 2025 GMT
Subject: CN=6790d62c-2ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:9a:10:27:eb:d3:c7:09:69:55:7b:ab:3c:
fb:e5:63:88:c3:b8:9c:a2:ca:7c:21:c8:8c:11:f1:
0b:a8:b0:0a:a4:f8:96:3f:38:e8:56:72:cc:51:d0:
2c:5c:83:ea:fd:9c:4a:b4:ea:35:75:b7:53:be:6c:
ae:21:3b:fd:bb:0a:69:e2:bf:29:cf:06:97:fc:e2:
4e:87:2c:3f:d7:d4:45:39:35:58:88:a4:e5:f2:ff:
3c:a0:7b:cb:77:b0:89:4e:2f:7a:1c:0c:ef:5b:5f:
83:c0:a9:ab:3e:18:73:3e:01:cf:d7:92:a0:4f:49:
7c:5c:b7:4a:70:4e:6d:1c:5f:a6:16:8c:57:cf:ee:
7c:02:39:3e:c1:25:b1:b1:27:16:0c:49:e1:11:94:
eb:05:5b:f1:ae:82:87:fe:8e:49:9c:48:7d:53:4b:
1b:76:74:4c:d6:c4:25:9b:8d:d2:45:03:fe:93:e3:
23:ff:f9:5b:70:4a:fb:d7:09:a3:36:ee:4b:25:14:
f6:27:c2:c4:f5:ab:4a:ae:81:0c:20:25:ce:be:9f:
91:b5:39:49:79:4c:32:37:77:bc:96:e0:5c:9f:e5:
79:39:a4:12:0f:28:1a:23:3f:12:7d:54:ea:f6:33:
39:8a:23:1d:9f:69:b2:f7:1b:75:d3:d3:d6:94:27:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D1:05:96:C3:49:11:F4:21:E5:B8:AC:2B:8C:AD:A6:44:27:48:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E37563D4D8B311EF9EDB8F7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.195.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8c:0f:ee:9a:fd:29:ca:58:2e:9a:2c:c9:8a:2d:a8:e5:0b:
eb:9b:2b:10:7f:5a:c4:a5:4e:b1:e4:0e:4b:b9:fd:81:96:7d:
c7:70:6a:83:87:dc:8a:cc:2a:0d:a1:28:a9:44:2b:80:d3:cf:
9d:7f:85:d5:59:d6:eb:75:29:f6:02:97:39:c1:21:27:14:19:
61:a5:13:26:a0:83:c7:24:17:ad:cf:dc:11:4b:65:8f:c8:cf:
fe:19:d5:24:68:82:f9:23:a9:c0:56:ee:62:c9:fb:4d:dd:a6:
f8:7a:33:c6:c2:bc:a3:0b:e2:6c:66:c3:14:84:5b:6f:9f:1a:
1f:d3:f4:11:42:15:b9:8e:da:d4:be:42:a9:79:e2:60:56:a7:
99:61:61:04:1a:49:cf:fa:24:17:04:ed:dd:bd:f8:c2:9a:6e:
c9:a9:2a:5e:d4:c0:1c:cc:93:d7:39:18:27:81:83:64:71:4d:
a1:b3:2b:e5:fa:c2:8a:3b:53:4b:10:5a:c9:80:8a:ac:f8:91:
59:12:5d:ad:d1:3e:71:12:a3:f1:ee:98:ae:74:18:18:97:fe:
92:22:03:d2:bc:53:fd:5e:f5:31:5b:8b:a0:54:31:dd:21:16:
56:ee:86:b8:6b:2b:71:52:8e:2a:00:13:6e:df:6c:fb:c3:bd:
07:34:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:57 2025 by rpki-client