Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021798ECC92E11EFBDEA735E762E951A.roa
File: 021798ECC92E11EFBDEA735E762E951A.roa (raw, json)
Hash identifier: y5ThMbgDR0+EFB8gbgYCtPacUgwui5xNKq1QhbpoR+A=
Subject key identifier: 69:7C:AA:93:39:51:8F:66:1E:E1:A0:D1:C5:5C:A3:13:06:AA:E3:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013393
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021798ECC92E11EFBDEA735E762E951A.roa
Signing time: Thu 02 Jan 2025 17:21:31 +0000
ROA not before: Thu 02 Jan 2025 17:21:27 +0000
ROA not after: Mon 13 Dec 2027 17:21:27 +0000
asID: 17561
IP address blocks: 154.222.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78739 (0x13393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:21:27 2025 GMT
Not After : Dec 13 17:21:27 2027 GMT
Subject: CN=6776cb1b-1d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:84:7f:75:96:0e:db:d8:7a:83:22:dd:0a:
d8:76:67:94:1d:bc:71:b4:aa:69:10:e4:1d:fd:9a:
54:76:5c:23:74:48:5a:81:d3:86:4b:f5:5e:78:2f:
16:0d:77:ff:df:bd:28:54:4d:8e:a5:0e:60:93:fa:
7c:c1:7a:c0:85:61:a7:8a:d2:b4:2a:b8:df:76:cf:
ae:cd:89:de:85:a8:61:91:7e:72:2e:ed:18:d3:9a:
26:c5:e5:13:8e:71:be:65:b9:fc:30:3c:b1:c4:0e:
14:ec:f2:bf:a0:5b:6e:7e:2f:24:92:34:cf:50:af:
ca:3e:b8:af:c3:9d:e7:e6:0c:72:9f:33:9a:0d:c9:
22:c0:24:a9:13:b3:e9:32:4a:22:e6:a4:1e:14:48:
8d:2c:15:f2:3b:d7:ed:43:1d:c7:1f:34:7f:0b:97:
f1:11:6a:b0:e4:fa:b6:42:35:8e:7e:d6:1b:b2:4e:
ed:5b:4a:49:cf:6a:5f:57:4c:cc:a8:bb:3f:43:12:
81:35:81:7a:d2:03:71:9c:cc:c6:39:7b:fb:a2:68:
28:ef:8a:4d:93:b2:76:1f:ce:bb:dd:45:a2:f4:90:
c4:a5:32:c3:fb:d9:45:8c:bc:ff:71:94:d7:23:9f:
86:31:55:50:d1:4a:40:bf:6c:2b:1f:bf:8a:8a:c5:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:AA:93:39:51:8F:66:1E:E1:A0:D1:C5:5C:A3:13:06:AA:E3:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021798ECC92E11EFBDEA735E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.150.0/24
Signature Algorithm: sha256WithRSAEncryption
86:60:8f:0e:37:3b:27:a4:00:72:f8:af:e4:d4:be:39:8b:50:
3a:8b:a6:1a:87:59:20:c0:9c:2b:c7:1c:37:0e:96:48:9f:a7:
d7:84:6b:cd:cb:0c:1f:a8:6e:a3:fa:0d:6e:b0:17:24:b3:d6:
4a:cc:4e:9c:2e:f7:a9:ba:22:c3:a1:94:eb:7b:9f:02:45:ce:
73:58:b9:a8:75:8e:b6:78:df:5c:2c:cf:6d:b7:21:65:fe:01:
bc:35:b0:a4:3c:df:0d:32:26:17:19:66:b8:d2:28:7e:ef:a1:
d1:9d:a6:cf:bb:ec:7a:61:a6:4c:24:f6:1a:92:1a:21:73:84:
83:a2:51:b1:be:51:b3:0b:a7:ba:9f:63:9d:eb:6f:39:27:f1:
96:e3:6c:8a:fd:d7:d1:7c:d4:1b:68:aa:5d:c0:b1:b0:14:24:
06:cc:cf:b4:59:e0:d1:fc:b1:c8:d7:f3:f2:b7:8b:ea:90:04:
ed:c2:d2:02:5e:21:cc:a2:29:19:a2:9f:97:e2:bf:17:f4:0d:
77:a6:4c:4c:50:7e:cc:7d:39:1c:72:d8:2e:85:e4:c4:b0:04:
fc:90:b4:35:32:9e:07:13:a8:de:af:e9:d2:f0:e7:9e:80:4f:
2a:fc:1e:ad:c6:12:bb:11:d7:36:68:c9:e3:a0:f0:12:bd:f9:
dd:c0:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:04 2025 by rpki-client