Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC61740CE23B11EF911AA4BD762E951A.roa
File: DC61740CE23B11EF911AA4BD762E951A.roa (raw, json)
Hash identifier: G9iYmKB2vn37ecDdH2d01Iim87WFK2B+5Giaqxd47gU=
Subject key identifier: 55:B2:6F:0C:06:46:03:E0:36:B1:A4:04:BB:83:91:46:83:28:8D:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01500C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC61740CE23B11EF911AA4BD762E951A.roa
Signing time: Mon 03 Feb 2025 14:33:40 +0000
ROA not before: Mon 03 Feb 2025 14:33:36 +0000
ROA not after: Wed 30 Apr 2025 14:33:36 +0000
asID: 18229
IP address blocks: 154.210.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86028 (0x1500c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:33:36 2025 GMT
Not After : Apr 30 14:33:36 2025 GMT
Subject: CN=67a0d3c4-164f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:5e:fe:98:71:aa:55:36:56:26:40:55:11:
c5:85:5d:18:0e:85:f3:8b:0e:31:4f:19:4a:fe:7b:
82:ae:4f:a7:af:d2:d1:88:92:ab:9d:0f:46:ee:9f:
48:54:3d:e8:b5:b4:15:f8:f7:c2:bb:e0:02:f2:87:
93:03:63:b7:e4:0d:ff:94:6a:3c:65:34:97:40:dc:
71:86:24:52:5c:80:8d:73:39:a5:41:ae:a7:92:bf:
3e:75:64:47:45:04:e4:a1:55:57:10:d3:d3:92:59:
78:6f:47:88:1c:0d:b9:4c:26:f6:64:83:1d:01:7d:
23:24:4f:bf:7b:1e:36:f4:aa:e2:04:ea:24:c1:b0:
ea:25:a2:e1:cd:20:ee:e8:1a:ed:58:b5:34:87:96:
03:e0:0d:93:7a:36:2b:89:a1:95:5b:1d:67:22:45:
1c:7a:b1:29:36:10:d2:a9:ff:52:46:28:af:ad:97:
d8:ec:82:e5:71:05:d7:6d:7a:1a:c1:ef:81:94:b6:
ae:6f:77:10:3a:28:46:28:e2:44:b7:76:cd:09:dc:
a8:08:2c:9a:7e:a7:b8:40:98:51:ae:87:a7:28:df:
f5:64:7e:9a:3d:6e:7b:1b:e5:ee:a7:ea:26:67:19:
39:19:d1:3e:6c:8b:7e:e1:69:2e:99:78:4c:a5:ca:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:6F:0C:06:46:03:E0:36:B1:A4:04:BB:83:91:46:83:28:8D:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC61740CE23B11EF911AA4BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.188.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d8:e2:3e:60:bf:4c:b7:49:46:1e:bc:0a:e4:ff:3a:dd:9f:
0c:f8:2f:a5:07:e7:48:f2:c3:fc:49:4d:79:35:41:1b:38:d7:
43:3e:77:e1:ff:36:d0:4b:58:28:b7:bc:2a:0d:2d:96:f4:3f:
ac:90:64:cb:84:10:fd:3d:d1:b5:d0:eb:b5:25:83:59:e1:e1:
da:d5:a2:d9:cb:ec:8e:bd:e3:58:63:91:3e:89:0a:70:cc:0b:
c4:28:e2:38:d0:84:23:ff:28:b7:23:cb:73:26:2a:13:c4:ce:
1a:cc:47:8b:97:6a:7b:cc:64:79:6b:d3:38:45:a6:db:26:77:
bc:4f:9f:99:7d:65:4d:26:78:65:e7:69:1b:40:10:dc:22:08:
7a:99:af:3f:03:ac:72:48:26:fd:ac:8f:5b:7e:0c:64:11:e0:
2f:b7:8d:62:f0:7a:02:76:c4:74:aa:86:67:e7:d3:43:70:04:
51:f8:5f:ea:0f:9f:2b:19:11:cf:4d:ad:b6:c6:1b:6d:df:c5:
c6:07:28:26:e7:69:99:74:1d:6a:3c:a6:79:00:18:a1:58:14:
71:e6:95:89:f2:a8:2a:4a:d0:68:e1:8b:7a:04:0c:52:ff:37:
10:13:a8:79:8b:5d:06:57:c6:e8:ac:f2:0b:cf:cd:6c:9e:b9:
1a:7d:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:18 2025 by rpki-client