Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CC7326D8BD11EFB79B8DBB762E951A.roa
File: E9CC7326D8BD11EFB79B8DBB762E951A.roa (raw, json)
Hash identifier: XrpA/UrXAIza0JBItj0xEWJqEojoz87rWzjuHGH3I2g=
Subject key identifier: 44:CD:07:4E:00:6E:3F:FE:44:BF:34:AB:5C:95:50:40:49:ED:39:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CC7326D8BD11EFB79B8DBB762E951A.roa
Signing time: Wed 22 Jan 2025 12:39:25 +0000
ROA not before: Wed 22 Jan 2025 12:39:22 +0000
ROA not after: Sat 08 Feb 2025 12:39:22 +0000
asID: 18229
IP address blocks: 154.210.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81740 (0x13f4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:39:22 2025 GMT
Not After : Feb 8 12:39:22 2025 GMT
Subject: CN=6790e6fd-b82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:82:82:16:3d:57:a2:aa:7b:f9:f8:75:7b:
c8:a1:e9:76:cf:4f:e4:84:61:99:c9:11:7d:34:19:
d6:73:56:5a:c3:f4:d6:01:e0:5b:bc:8b:75:c5:f5:
15:10:aa:e1:35:ec:b8:d1:e9:47:25:e6:f2:e8:04:
43:ab:61:6c:ed:b2:cf:52:19:d3:47:75:4c:00:3b:
a0:5a:4e:66:6a:60:e8:4d:79:94:9a:e2:25:aa:ea:
58:24:18:c3:5e:fd:bc:7d:fc:34:17:50:1d:e7:aa:
1b:5c:73:b8:93:da:22:68:7d:b4:41:50:cc:53:64:
a2:82:ae:4f:78:d7:97:d9:3b:94:6a:5d:67:d1:cf:
73:b4:bb:2b:12:35:ba:eb:2a:4c:3f:16:73:8a:9d:
88:bb:64:7a:f7:bb:73:f9:ba:7d:92:f1:e3:07:0a:
69:dc:cd:3e:97:9c:42:51:56:61:cd:ea:43:a5:c9:
7f:37:7c:fb:58:88:be:b6:45:32:30:91:7c:d0:16:
88:18:6d:ca:76:3c:dc:e0:c3:47:66:63:3e:ef:ea:
c9:09:c3:b9:8f:8a:6a:50:81:4d:d4:16:36:fe:ae:
b6:6a:2a:40:5e:30:e8:c3:18:aa:39:27:0d:d8:df:
d6:3c:0a:4f:27:78:32:a0:d0:41:a5:c1:89:8a:d5:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:07:4E:00:6E:3F:FE:44:BF:34:AB:5C:95:50:40:49:ED:39:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CC7326D8BD11EFB79B8DBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.139.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:1b:b9:b1:80:e5:ec:e0:fa:10:86:aa:91:57:e1:da:a6:74:
b6:7f:68:a4:59:56:bb:4c:b3:63:47:ef:62:d1:4d:a6:48:d3:
c8:1f:13:33:ba:ec:24:8f:cb:97:5a:d5:66:89:4a:db:21:f6:
74:e8:33:aa:9c:3d:ca:20:a5:e5:e0:fd:05:7d:66:e9:76:81:
94:a7:93:68:fd:d6:c1:d5:c7:95:4a:b0:0f:b0:06:ec:d8:0f:
d0:6e:be:e3:65:ef:f3:96:ac:57:9b:36:e3:32:b7:35:d3:2e:
1c:6f:ed:3c:1b:ff:d2:5d:d8:d7:44:d4:cb:fb:dd:0d:b1:da:
94:f7:4e:d5:3a:39:2e:f1:58:1b:36:f4:fa:e5:a7:43:ce:ff:
00:f7:96:7c:6f:0e:18:9a:e3:75:ba:c3:a7:91:5b:92:24:ab:
cf:97:88:eb:8c:93:30:c7:ad:ed:bc:61:7a:09:4a:a0:c4:df:
be:14:bb:89:d5:3f:89:f0:44:32:70:f7:39:ec:5a:a0:65:de:
c7:23:34:ba:f4:5c:31:f9:77:8a:7b:f2:db:0c:c7:28:f7:f5:
e9:d4:d9:bb:90:8c:1e:3b:a3:e5:b8:61:fc:f1:ba:49:20:79:
4d:c4:e8:38:1b:70:b9:7d:e8:df:98:47:0b:3e:44:30:d2:5f:
02:ad:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:31 2025 by rpki-client