Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7632CFFCE31A11EFAE594597762E951A.roa
File: 7632CFFCE31A11EFAE594597762E951A.roa (raw, json)
Hash identifier: 4Tlnx7rn/NMN5wA2G2XSutW7hmGaCWII3DFY9lwZTQk=
Subject key identifier: 5C:56:0E:86:08:E5:05:CB:E9:68:BF:09:70:DD:66:C9:AF:24:97:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015141
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7632CFFCE31A11EFAE594597762E951A.roa
Signing time: Tue 04 Feb 2025 17:07:06 +0000
ROA not before: Tue 04 Feb 2025 17:07:02 +0000
ROA not after: Wed 30 Apr 2025 17:07:02 +0000
asID: 18229
IP address blocks: 154.210.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86337 (0x15141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 17:07:02 2025 GMT
Not After : Apr 30 17:07:02 2025 GMT
Subject: CN=67a2493a-bd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:f6:ce:a3:ef:08:95:fc:5b:f3:fe:fa:47:
76:ae:1e:88:c5:62:0c:e2:3e:25:85:91:09:46:4d:
01:00:68:be:43:3f:4c:91:be:26:bb:53:36:7a:bf:
29:f1:84:6e:14:14:72:93:f3:e7:2d:35:1b:9d:30:
20:19:44:29:a0:a5:19:43:76:3a:28:dc:e8:41:b5:
77:d5:b0:98:60:f9:84:4a:78:8a:c6:0f:6e:46:49:
cd:9f:28:17:87:73:af:64:ea:4c:e3:d4:8d:33:73:
34:29:b9:d7:2a:94:58:17:ac:d0:8a:a0:94:fc:dd:
3f:47:0b:31:e6:84:40:60:6a:8a:db:5f:2f:11:1d:
bc:b2:6d:98:fe:65:01:c9:86:38:c4:ea:43:3c:b2:
18:d3:a0:dd:c8:69:75:bc:ed:22:ca:fd:01:7b:db:
be:f8:3d:03:f4:7e:33:14:80:67:06:ca:b8:e7:58:
2d:18:bc:da:2e:59:dc:af:d8:a1:cf:63:36:8e:b6:
2e:59:dc:c3:d4:50:37:ec:c2:7c:c9:f1:89:61:13:
a7:fa:5d:7c:cd:8b:07:b8:4b:6e:fd:86:5c:28:83:
90:31:70:85:e7:53:e7:b5:ba:4e:c4:07:30:79:3c:
0c:11:f4:69:e5:a8:5e:06:02:6d:12:88:16:33:15:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:56:0E:86:08:E5:05:CB:E9:68:BF:09:70:DD:66:C9:AF:24:97:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7632CFFCE31A11EFAE594597762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.169.0/24
Signature Algorithm: sha256WithRSAEncryption
be:0e:25:84:98:5c:61:e9:c4:85:6f:32:6b:e6:00:91:ad:40:
78:3d:2e:8a:94:30:a9:5d:1f:13:3f:c1:ae:d4:cf:63:1a:99:
15:94:51:39:4a:3c:06:0d:aa:71:5d:14:3f:47:cf:33:c8:2f:
d6:20:dc:18:8d:a8:46:de:c0:a7:90:9c:51:ec:2e:77:8c:bd:
6b:8f:5a:80:f3:01:75:23:86:05:c8:f5:d6:d4:4f:e6:d4:1c:
6b:08:a2:d4:4d:cf:06:90:64:ca:09:77:1b:6e:e0:ed:9c:12:
8f:d9:dc:88:97:95:12:1b:ed:01:7d:0f:b6:d2:35:03:c0:b4:
e2:85:51:85:4e:fe:5f:35:0a:a0:d2:07:a9:4a:4c:2b:65:04:
2e:27:e5:23:2f:8a:53:4f:d5:9f:b9:25:24:94:17:ec:47:60:
fd:91:32:8a:d1:d6:8e:31:09:48:bd:6d:6b:bc:7f:c2:8b:2d:
8a:ac:83:50:44:e2:38:63:c2:e8:c8:55:57:4e:51:1b:cd:77:
0e:b5:65:37:6c:56:85:0d:23:6b:01:2d:82:0d:dd:c9:40:f3:
ae:6c:11:ca:3e:88:bc:af:8e:d7:59:cc:6a:63:1c:e3:30:72:
7b:5f:35:75:b1:df:f9:01:7e:47:60:e6:d8:91:78:a9:96:57:
5f:ec:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:05 2025 by rpki-client