Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B428EA0F88011EF817B8D53762E951A.roa
File: 0B428EA0F88011EF817B8D53762E951A.roa (raw, json)
Hash identifier: +3Yt4CpPTuXArcJch6K0SU/0mtppc5uFb5EBCeij1ow=
Subject key identifier: EA:97:9E:FA:30:43:02:36:D1:CE:0C:A4:71:95:36:5D:85:28:D7:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017151
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B428EA0F88011EF817B8D53762E951A.roa
Signing time: Mon 03 Mar 2025 22:37:10 +0000
ROA not before: Mon 03 Mar 2025 22:37:06 +0000
ROA not after: Wed 09 Apr 2025 22:37:06 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94545 (0x17151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 22:37:06 2025 GMT
Not After : Apr 9 22:37:06 2025 GMT
Subject: CN=67c62f16-48e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:93:72:20:12:8a:70:e0:64:52:02:d4:f8:
4f:fa:92:52:ba:d8:7b:a9:5c:45:30:ed:1d:8d:6b:
11:62:52:1d:2c:a8:e2:ec:23:52:5d:65:66:ea:dc:
6d:8e:86:30:5c:c2:c0:b9:ff:14:d9:5c:e5:4d:7f:
cc:f2:1c:14:e6:04:bb:09:91:b6:d8:4a:17:3d:3e:
bc:21:b3:55:3f:cc:44:9d:8f:6f:d7:6e:05:91:cb:
0b:60:48:1f:d0:c7:db:75:16:19:54:26:b4:f5:ba:
e5:cb:98:63:5c:66:63:dd:93:54:e0:64:62:4d:55:
13:74:4e:cc:49:79:f4:11:18:5b:3c:d4:dd:c4:9c:
da:fd:86:da:6b:ca:7f:42:28:09:01:45:78:1d:72:
9d:d3:ce:00:5b:c6:05:cf:eb:fa:c4:88:b8:4c:0b:
ec:bc:0a:fe:5f:ae:53:63:7a:b2:da:87:b1:74:25:
81:3a:56:bd:fa:70:0e:0d:df:00:00:f9:fd:38:74:
75:21:b2:5c:2d:69:f7:fd:35:4a:4a:56:c4:b9:b4:
98:4b:ff:66:c3:da:10:75:8d:d0:03:27:5d:3c:f9:
f5:90:7b:f1:45:f0:10:d1:e6:bf:8c:7b:65:5c:43:
eb:52:09:ff:1c:94:95:6d:b9:d4:77:c8:8d:8a:cc:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:97:9E:FA:30:43:02:36:D1:CE:0C:A4:71:95:36:5D:85:28:D7:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B428EA0F88011EF817B8D53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:d2:a7:39:63:20:f4:68:9f:6b:b9:17:22:0a:1f:c6:a7:a0:
a2:f8:be:62:2b:b8:be:ee:da:78:df:27:b8:ab:eb:f4:6c:88:
cd:29:b4:7e:d7:cc:6b:66:95:b0:12:bb:1c:3a:d3:7d:e0:91:
a4:9e:0e:34:61:1f:76:30:6c:87:7c:1f:e3:8e:4b:ea:e6:14:
b5:38:96:b5:0b:8e:48:81:79:d9:0b:55:0c:1f:d6:f1:b2:6b:
70:4e:a7:ee:cb:a3:7e:0f:c9:b1:49:ab:dc:43:cd:49:47:8a:
b5:68:48:4e:c1:9e:30:ab:ee:2e:cd:af:47:52:21:46:63:c6:
21:6e:e4:ef:dc:94:d1:dc:69:af:3d:6d:90:cd:02:21:ff:b3:
08:5d:2d:88:70:5b:cc:9d:65:d6:aa:33:56:aa:09:14:9f:d0:
44:c6:b1:94:d9:e4:59:4c:99:2b:ab:d1:68:69:41:c0:6c:26:
3b:14:0e:ad:c0:11:3d:1b:17:a0:cd:3e:e4:68:77:30:10:28:
eb:db:b3:08:05:04:26:cf:8b:88:67:b6:15:06:04:40:47:13:
b0:5f:7e:67:65:58:fb:7e:28:43:db:95:98:75:a3:41:99:8e:
4b:d1:eb:71:cb:1f:22:98:3a:b8:95:e2:bc:41:7d:ae:f0:ea:
0a:63:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:10:21 2025 by rpki-client