Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA88D138DA4711EF9C671B9C762E951A.roa
File: FA88D138DA4711EF9C671B9C762E951A.roa (raw, json)
Hash identifier: v7OHBbE6fNDGYh3It7urwlcTO68AaA4N8E4s/M5OQ6c=
Subject key identifier: 5A:85:CA:A4:1A:E5:5C:8A:6C:72:19:67:D9:1C:E0:AB:C3:E1:40:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014630
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA88D138DA4711EF9C671B9C762E951A.roa
Signing time: Fri 24 Jan 2025 11:40:15 +0000
ROA not before: Fri 24 Jan 2025 11:40:12 +0000
ROA not after: Sat 08 Feb 2025 11:40:12 +0000
asID: 18229
IP address blocks: 154.210.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83504 (0x14630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:40:12 2025 GMT
Not After : Feb 8 11:40:12 2025 GMT
Subject: CN=67937c1f-f996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:8f:28:75:f6:18:3c:58:06:7d:11:ea:92:
b8:f1:f2:c1:51:9b:39:6a:8a:89:a3:bc:ce:11:9c:
5a:f2:3e:d9:29:3d:cb:bc:b2:bd:1a:f0:b8:e2:58:
a5:3e:aa:1b:8f:fc:4c:ab:40:34:4d:4d:25:35:78:
b7:09:22:f1:0f:9a:48:2a:33:5e:a2:ce:ad:c7:d1:
52:c0:a4:f5:1b:8d:65:1e:e8:1f:96:fc:b3:19:02:
b5:6e:5e:ba:28:c9:fa:5d:07:c5:0f:fb:ec:f0:5d:
13:4a:b4:d0:57:fd:2e:30:d2:a0:41:c6:db:70:1e:
2e:74:12:a9:40:3c:c8:f5:cd:e0:c7:7c:77:bf:de:
18:e3:a8:f2:bd:71:c3:29:a0:92:94:b2:e7:74:10:
e8:1f:84:d0:88:d7:4d:b6:14:8e:90:b1:08:4f:aa:
95:53:2a:5e:d0:33:5f:01:49:4f:5c:57:a6:f6:95:
36:ba:bd:c8:4a:4d:78:c6:65:31:5d:ff:0b:2c:41:
13:c8:02:4f:98:d9:01:f2:da:ca:8e:d8:a1:31:4c:
2a:b2:91:bf:11:8b:33:31:42:80:49:f2:3b:6c:c9:
43:4f:da:88:f1:63:71:bd:49:a1:b5:eb:5a:1c:34:
a4:59:20:91:24:59:82:ad:75:7b:eb:23:2d:88:2f:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:CA:A4:1A:E5:5C:8A:6C:72:19:67:D9:1C:E0:AB:C3:E1:40:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA88D138DA4711EF9C671B9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.175.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:70:10:4e:ec:1a:13:c4:ec:80:17:53:33:73:48:74:cb:cb:
95:98:88:4a:dd:08:63:26:71:94:22:48:02:c0:52:2f:39:62:
6e:19:1f:a1:31:0d:44:11:4e:a4:a6:14:4d:cf:cd:65:0b:f0:
ff:5c:c4:f1:86:b3:ce:02:57:2a:a7:59:60:49:a7:1f:03:cf:
de:36:dd:48:0e:97:7a:5b:97:d0:1c:94:48:7a:86:5b:f0:22:
f5:c4:e1:3e:b6:55:0a:bc:94:af:f3:21:98:35:56:06:17:ad:
93:ca:39:ae:67:ce:2b:e0:28:6a:bd:cc:5e:4b:04:0a:9e:cc:
ae:76:05:04:70:45:dd:90:fd:ad:ab:47:0d:a7:fb:ac:de:71:
fc:2d:26:0a:03:ce:cb:cc:c6:6b:38:4e:bb:1f:6e:01:76:20:
28:ef:b4:3c:fc:7f:3f:ec:74:83:a3:3f:4a:50:bb:db:de:8b:
a5:2e:b6:2e:15:ce:58:2c:0b:91:17:ef:93:0e:2f:ba:b5:5f:
a7:28:3a:f5:fa:7a:0e:ba:04:30:63:86:4e:57:10:61:5e:82:
f7:e0:01:7e:7d:68:83:60:2f:c9:e4:12:86:72:57:e1:a0:12:
f4:90:ab:29:6c:21:9d:3d:fc:b4:5d:32:c4:49:b0:80:a5:27:
48:d5:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:58 2025 by rpki-client