Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C07C68C91811EF871B5554762E951A.roa
File: 05C07C68C91811EF871B5554762E951A.roa (raw, json)
Hash identifier: sqBKx9OwD7Cui26laT8/MSxGkTCveqN8F8XOoBM7byw=
Subject key identifier: 9C:F2:1A:A7:A0:08:B5:B1:F9:74:DD:2D:19:2F:A3:C2:7F:02:15:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C07C68C91811EF871B5554762E951A.roa
Signing time: Thu 02 Jan 2025 14:44:08 +0000
ROA not before: Thu 02 Jan 2025 14:44:05 +0000
ROA not after: Mon 13 Dec 2027 14:44:05 +0000
asID: 17561
IP address blocks: 154.221.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78561 (0x132e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:44:05 2025 GMT
Not After : Dec 13 14:44:05 2027 GMT
Subject: CN=6776a638-6ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:87:e9:96:42:6a:81:c5:67:69:a4:38:6a:
60:7e:25:79:51:2d:a4:99:fc:91:67:43:7b:90:f5:
e9:26:d9:cd:9a:0e:ef:3b:74:fb:c9:86:f2:b1:06:
43:09:fc:9f:38:e6:a9:01:f7:58:fe:cb:a8:d1:10:
d1:c7:e2:f8:b0:1d:19:0e:74:6a:14:32:70:61:12:
aa:29:29:52:5a:07:0a:44:d9:14:9f:3a:58:53:f7:
36:09:96:c6:59:08:22:0a:ed:4d:4f:d1:4a:6e:38:
ae:83:2d:0b:42:1c:e4:d4:99:af:10:6e:e9:56:7f:
69:09:bd:62:e1:5a:72:ad:69:61:f5:82:31:88:1e:
08:a7:5c:be:e6:a4:7a:57:d8:38:1f:e4:ba:9c:7e:
d8:48:09:a5:bc:9c:bd:b4:1b:80:19:77:c8:36:ac:
55:52:2b:e5:9b:36:fe:b1:c0:6c:fb:d8:cd:6f:93:
10:da:15:37:2b:20:c9:13:95:0a:3f:02:d6:1c:2b:
6b:25:8b:46:7f:9e:35:b5:67:90:ee:7d:d8:40:e6:
64:97:9a:6b:d1:b9:e0:42:87:0a:d2:aa:f0:b2:31:
ca:96:d0:5c:5a:e8:b6:9f:59:cc:bd:9b:96:10:6a:
9f:1b:74:ee:ef:43:7a:c8:7e:84:ce:31:9a:b8:59:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F2:1A:A7:A0:08:B5:B1:F9:74:DD:2D:19:2F:A3:C2:7F:02:15:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C07C68C91811EF871B5554762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.253.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f2:68:d2:e7:46:a6:b9:bc:b7:22:8b:d0:e2:11:9f:62:7e:
0c:c6:64:4e:d3:6a:3b:9f:6f:80:f4:b5:6c:3e:33:9c:40:df:
fa:b9:31:d0:c8:01:23:c2:7a:8d:17:64:8a:18:6f:ff:72:df:
f0:9e:ec:78:88:6c:7d:1c:f4:75:0e:ef:b6:05:a7:e9:3c:18:
d2:92:44:90:2b:47:2c:90:b8:44:d8:37:42:3c:3a:68:c2:3f:
d3:0f:5a:31:b1:24:ce:bf:2f:8f:52:67:4c:2a:1c:1b:cb:45:
48:ba:7a:51:1e:06:6a:41:52:fa:1c:8d:b0:0c:6d:b0:1d:3a:
f1:2b:b3:16:cc:ea:dc:04:d2:ac:6f:84:96:ea:93:a3:19:3f:
bb:37:8b:06:e3:01:74:a0:22:55:15:96:a6:01:5c:70:e9:d9:
28:2d:8d:f0:55:02:91:42:44:c2:ef:38:12:3f:e3:c7:17:18:
82:f4:fc:5b:a7:b8:fc:10:bb:28:50:6f:8e:4d:6e:f3:5b:7b:
6e:e7:cb:8b:da:88:3f:47:08:5c:08:3a:53:67:e9:b4:01:06:
c4:14:66:a8:d4:d2:61:e6:03:d4:13:e0:46:de:04:0b:5a:85:
1a:38:73:75:4f:d0:45:21:6e:c0:81:0d:37:99:ec:a9:d2:9a:
6e:89:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:28 2025 by rpki-client