Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0147A8D0E31411EFAB83856B762E951A.roa
File: 0147A8D0E31411EFAB83856B762E951A.roa (raw, json)
Hash identifier: sJUb9fsxvBVMRxhOq6qjqjjCmGEO1H/RJZJ0lxkXRrM=
Subject key identifier: 66:F2:40:3C:E1:B6:6C:9B:6B:97:8A:F4:1E:34:95:89:10:7C:31:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015119
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0147A8D0E31411EFAB83856B762E951A.roa
Signing time: Tue 04 Feb 2025 16:20:53 +0000
ROA not before: Tue 04 Feb 2025 16:20:49 +0000
ROA not after: Wed 30 Apr 2025 16:20:49 +0000
asID: 18229
IP address blocks: 154.210.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86297 (0x15119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:20:49 2025 GMT
Not After : Apr 30 16:20:49 2025 GMT
Subject: CN=67a23e65-4ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:a8:54:ca:4d:ef:4e:34:14:57:9b:d7:51:
92:4f:a4:d7:58:24:3f:74:ba:df:d3:76:45:63:49:
5b:b6:8e:c7:b8:30:1c:2a:51:c1:c4:3d:5b:77:55:
2b:b3:ba:8f:cc:62:a6:5f:86:a5:ef:54:9d:c6:cd:
a5:0e:01:c1:4c:11:b6:4a:cb:9a:2e:fe:b8:d7:19:
88:06:6a:9f:81:d2:58:6b:47:5d:bd:38:de:c2:67:
38:40:13:f0:4d:fd:5c:af:1a:27:5f:c4:e2:c4:2e:
f7:b3:c2:db:a2:27:ac:c7:53:7b:6c:c7:ac:28:6c:
5b:1b:ec:32:9e:a8:69:c6:47:5c:06:5d:5f:ee:e1:
31:a7:5f:8a:69:07:a5:3d:16:ba:a9:78:e4:1e:1d:
ef:61:18:2c:35:eb:73:29:d9:a5:95:64:51:94:79:
2b:b6:5a:12:42:b4:d9:29:2e:6c:40:ad:37:7a:4f:
a5:e9:05:65:1b:5e:cb:af:7d:9a:c7:e9:2d:81:42:
48:88:38:0f:ad:89:50:d5:6d:b9:4f:84:7c:a0:22:
57:97:4d:62:68:fb:50:d2:1f:af:84:a0:f6:26:12:
7f:a3:e0:4f:3e:35:70:db:20:f5:93:42:43:2c:c9:
86:62:7e:58:b2:ce:cb:fb:23:c3:70:af:a9:50:24:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:40:3C:E1:B6:6C:9B:6B:97:8A:F4:1E:34:95:89:10:7C:31:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0147A8D0E31411EFAB83856B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.160.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:3f:fc:a7:32:ca:1b:56:60:b4:85:82:f1:a3:73:8d:2b:1a:
47:de:e1:2b:1b:77:00:e3:41:0d:24:06:8b:da:93:6f:61:a9:
0e:79:97:e4:30:34:b1:0f:2b:47:92:35:01:1a:87:cc:89:ed:
55:67:3b:40:03:af:66:98:78:07:ae:4d:46:81:ad:3c:2e:d4:
c5:75:f7:04:41:5e:8a:22:52:81:86:98:81:72:22:ee:f5:92:
c7:ea:41:10:63:e9:ac:26:4c:a5:38:07:ce:e0:de:fd:49:40:
33:9c:8e:40:69:eb:88:b3:e5:3a:0c:15:3c:41:47:11:58:75:
4c:df:ba:ed:44:d2:34:9e:a6:c6:84:ba:99:32:49:0a:21:7d:
52:e7:82:ae:7a:a6:61:f8:46:cf:f7:a4:7e:50:e6:41:93:1a:
de:d2:d8:da:b1:37:49:8b:7c:2f:9d:f5:c9:2d:0a:0a:7e:7f:
6f:9e:0a:07:8e:cc:c4:0f:23:b7:a7:47:8f:21:30:c0:3e:65:
cb:9e:3d:53:a7:9e:36:1f:08:30:31:6d:a6:4e:2c:e4:35:b4:
90:66:2d:a8:82:34:1b:3b:cc:b8:c5:fa:ec:93:58:bb:24:10:
47:0b:4b:a4:1d:7e:fc:e3:28:ab:f4:b7:50:12:9d:f3:1b:d9:
ff:14:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:47:41 2025 by rpki-client