Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71759022E2CE11EFA2FBD4A0762E951A.roa
File: 71759022E2CE11EFA2FBD4A0762E951A.roa (raw, json)
Hash identifier: LnoHZpQDjO3+/Fg8PeCtlzzMP7r8IxVEZwNHJC1Nq64=
Subject key identifier: E1:71:55:08:0E:A9:5B:86:82:49:0A:94:5E:18:84:E4:7B:57:AE:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015092
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71759022E2CE11EFA2FBD4A0762E951A.roa
Signing time: Tue 04 Feb 2025 08:02:57 +0000
ROA not before: Tue 04 Feb 2025 08:02:53 +0000
ROA not after: Wed 30 Apr 2025 08:02:53 +0000
asID: 18229
IP address blocks: 154.210.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86162 (0x15092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:02:53 2025 GMT
Not After : Apr 30 08:02:53 2025 GMT
Subject: CN=67a1c9b1-0c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:58:63:e1:03:b8:78:d5:1b:c9:5e:b5:93:
b2:94:54:fc:81:18:0f:ab:6d:d1:d2:c1:af:a5:56:
b7:b7:fb:ff:7a:b2:f9:2a:09:bd:00:36:80:a0:43:
db:9e:78:c6:ac:55:2f:d7:fa:ba:ce:63:19:9f:71:
65:f3:be:10:c4:c0:0a:74:7c:f7:d7:0f:ce:32:5c:
23:f4:f5:5b:4a:65:26:08:f5:45:e0:39:60:d5:eb:
ff:66:13:8f:dc:81:52:e6:0d:29:7b:d7:79:55:59:
a3:2c:75:c3:15:d7:50:4e:01:ce:76:fa:62:06:fc:
27:02:17:8b:5b:da:87:ab:8a:d4:5e:c4:1c:c4:26:
69:06:45:22:69:94:64:2d:f8:61:08:5b:52:b7:36:
d1:9e:f4:61:46:a7:8b:81:e0:3f:43:b4:0f:75:ec:
32:4b:69:c1:9c:e8:11:98:17:8e:7e:2e:f9:d0:1f:
8c:91:44:f8:c7:ab:92:7a:34:b3:32:df:d4:57:10:
e1:39:84:48:f9:f7:17:ff:83:a6:f8:88:a9:15:07:
c8:b5:16:d6:4c:ba:6d:a6:7d:9d:9c:1d:fc:20:d4:
9f:c0:d8:a3:ec:05:5a:41:02:c3:14:e0:4b:7d:ef:
b3:7a:94:79:2a:27:69:b0:87:86:70:d5:e6:82:7d:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:71:55:08:0E:A9:5B:86:82:49:0A:94:5E:18:84:E4:7B:57:AE:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71759022E2CE11EFA2FBD4A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.173.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:53:cb:12:3c:5e:11:98:0b:ee:20:79:f3:84:a9:85:ba:36:
af:0d:fd:27:4d:7e:6b:8c:2c:bb:56:5e:0e:c6:9e:aa:94:ed:
1a:f6:dd:62:27:e9:0c:ac:71:ff:6b:84:05:b3:f1:56:24:e4:
d3:8e:94:27:41:eb:fb:7d:11:bd:e9:45:0e:6a:97:21:41:08:
04:e4:66:03:c6:1a:7a:1b:20:03:e8:e0:8e:0f:c0:c8:ae:1a:
8d:7e:b8:88:94:bc:e5:4f:62:ca:b6:a7:38:52:9c:e9:68:59:
99:36:3c:9f:7c:5a:73:72:3a:47:92:17:91:1b:2a:91:61:5d:
e4:40:7f:cb:b1:5f:17:16:24:4c:8c:be:33:97:40:1b:da:e6:
e2:c8:ca:1b:71:57:6f:62:da:69:4e:64:e8:ea:21:20:30:83:
b0:ea:5a:34:78:93:4e:96:b9:21:35:8f:33:84:aa:4a:7d:3b:
d4:cc:77:71:90:1f:90:46:e4:ec:d9:a7:32:37:75:6b:3b:4e:
22:ae:b6:0a:a4:87:0c:74:67:18:f8:a5:d4:d8:2e:ec:cc:d6:
b6:1e:63:22:d8:2f:8d:a7:ad:8b:bf:b5:5b:06:bb:19:92:f2:
93:c6:db:c9:55:88:8a:27:b2:9c:bd:2b:23:d4:bc:c4:81:8a:
44:68:b8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:44 2025 by rpki-client