Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015446CCF35311EFA9D63E6E762E951A.roa
File: 015446CCF35311EFA9D63E6E762E951A.roa (raw, json)
Hash identifier: gn624+wFeorkp6g8FjpCEVUxqwqf9gfyKTA8mUkKccU=
Subject key identifier: FD:60:43:26:1C:D7:F8:CF:22:71:1E:06:8F:1D:8C:11:CD:97:45:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015446CCF35311EFA9D63E6E762E951A.roa
Signing time: Tue 25 Feb 2025 08:32:10 +0000
ROA not before: Tue 25 Feb 2025 08:32:06 +0000
ROA not after: Mon 07 Apr 2025 08:32:06 +0000
asID: 138915
IP address blocks: 154.223.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89509 (0x15da5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 08:32:06 2025 GMT
Not After : Apr 7 08:32:06 2025 GMT
Subject: CN=67bd800a-33a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:6b:73:09:f1:4e:71:14:f9:80:b0:46:64:
dd:85:f9:35:f6:d5:90:07:71:d6:27:0e:52:47:da:
4a:73:f7:91:9d:59:48:6d:28:2b:dd:a6:ce:68:f9:
5f:bf:c9:3d:34:e9:ee:f2:1c:4e:f9:92:80:83:83:
00:fb:fd:4d:41:85:2b:59:67:28:40:d9:5c:45:08:
f4:9e:9c:50:72:9a:f6:f3:cd:f5:46:66:61:27:73:
a1:c8:6b:c1:4c:b8:7a:9e:21:5f:3b:42:d4:8a:eb:
a1:b5:89:b1:d2:f9:e3:79:5d:3c:45:97:49:b8:e5:
7a:c9:9c:e1:02:1b:78:f2:7d:6a:3d:f5:a6:eb:43:
fc:e2:91:91:8a:f7:62:29:98:de:f9:90:c1:82:e5:
79:b5:c4:d9:ce:ae:cd:86:1d:7c:e6:fa:d6:66:84:
f8:23:e3:26:9a:73:f7:d2:f8:a3:f6:e7:16:e3:ab:
52:d4:96:37:3d:cc:0f:4a:46:d2:2f:c5:3c:59:ee:
b3:7f:c3:7c:c7:1e:23:f2:ae:3f:de:76:88:a3:43:
8d:89:6d:b2:c9:c1:af:04:ba:54:43:8c:3b:a4:68:
3a:8c:db:e0:71:0d:98:8e:30:d3:36:1f:7c:11:f9:
96:04:a9:cf:85:64:8d:af:a0:18:31:30:42:87:60:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:43:26:1C:D7:F8:CF:22:71:1E:06:8F:1D:8C:11:CD:97:45:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015446CCF35311EFA9D63E6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.64.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4f:1d:84:98:82:0a:0a:af:65:66:42:4c:7d:d5:69:e6:c1:
29:b9:65:02:a7:99:ff:6e:a9:01:e4:37:23:44:68:20:d1:28:
ab:1e:e2:ef:88:5a:81:26:a8:39:72:46:59:a9:ae:99:43:6f:
87:ba:81:cc:56:20:44:26:c6:3b:31:0b:6b:c5:c6:39:a7:89:
a4:ed:b9:15:1b:b0:9b:02:c4:c3:c2:59:0f:30:e2:23:3f:b5:
6e:b2:1c:63:37:90:d7:04:e5:44:98:ca:c9:cd:de:d5:92:d4:
e4:86:12:8d:ee:f9:10:c7:8a:f6:40:b5:ac:c4:55:57:bf:80:
0a:41:f6:35:1e:17:bd:d7:43:71:08:46:ba:ef:e0:09:1f:e0:
2d:23:5f:96:3e:35:ed:02:7c:89:7d:61:96:cf:e5:ee:ea:b5:
a2:29:a5:a7:26:4c:6f:90:0b:1b:c4:70:d8:d0:37:c2:a0:ca:
f5:e2:ab:82:43:64:f6:2c:a0:24:69:17:45:24:65:f5:56:c9:
45:2a:08:9c:bf:b2:63:06:5d:e0:d4:f1:16:41:b3:66:d7:09:
ba:c6:76:9f:b4:e9:47:49:46:cb:8a:e9:dd:fc:ad:b2:8c:eb:
d3:01:46:52:ae:e1:a4:a5:bf:21:05:a3:39:18:d0:5c:c7:92:
d9:98:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:14 2025 by rpki-client