Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/102C6A10E24311EFA61FB06D762E951A.roa
File: 102C6A10E24311EFA61FB06D762E951A.roa (raw, json)
Hash identifier: 515QBqD8cm9mHhaVYYUBtUTDTala6hzlwug3tDoHcE4=
Subject key identifier: AE:D8:12:7D:44:92:14:12:FF:B3:02:5C:8F:E6:D8:F4:0E:24:7F:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01503B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/102C6A10E24311EFA61FB06D762E951A.roa
Signing time: Mon 03 Feb 2025 15:25:13 +0000
ROA not before: Mon 03 Feb 2025 15:25:10 +0000
ROA not after: Wed 30 Apr 2025 15:25:10 +0000
asID: 150008
IP address blocks: 154.210.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86075 (0x1503b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:25:10 2025 GMT
Not After : Apr 30 15:25:10 2025 GMT
Subject: CN=67a0dfd9-b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:b3:2f:b0:4f:d0:5c:c8:d2:4f:a6:73:91:
e9:e2:ce:44:c7:44:70:eb:ca:0b:3a:73:7e:ef:a2:
4e:67:2b:e9:19:ca:87:80:27:43:74:28:ea:80:d2:
bf:8c:21:0f:19:5c:e5:35:e2:28:c4:aa:30:07:ad:
b1:bb:7d:14:61:f7:ce:1b:dd:69:aa:54:83:8b:c6:
3b:73:f4:a1:e2:c8:74:fa:6b:ce:e5:f8:8d:08:2d:
e3:ad:e2:33:0a:e0:f8:b8:e9:57:57:16:50:86:37:
32:82:7d:78:aa:97:1b:3a:26:07:0a:f1:8a:a2:00:
c5:85:81:e2:94:a9:fe:b9:3d:71:e6:43:e2:05:1f:
97:e1:33:0b:88:81:a1:e9:1f:77:eb:04:4f:2f:b0:
3c:04:72:94:e9:75:c1:75:58:01:20:8c:29:69:1e:
db:e2:13:c9:72:16:32:a4:2a:4d:0d:9f:bf:6f:b0:
01:5a:e8:97:b7:74:31:18:d3:b6:14:55:da:55:92:
35:97:fc:d7:4e:d9:40:1e:94:0b:27:07:27:00:d1:
79:4b:93:f0:c2:19:24:03:2e:1b:fa:8f:3a:48:2f:
00:b2:98:42:a2:db:ff:39:25:28:a1:5c:00:1a:7b:
41:9e:56:27:65:94:02:7f:d4:8b:68:a7:f1:36:60:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:12:7D:44:92:14:12:FF:B3:02:5C:8F:E6:D8:F4:0E:24:7F:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/102C6A10E24311EFA61FB06D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.230.0/24
Signature Algorithm: sha256WithRSAEncryption
67:73:a5:24:d1:9c:a5:ff:96:94:0a:b9:67:7a:3c:da:d5:2c:
3f:5c:f4:63:b6:04:6b:15:a2:e6:d7:81:00:4a:41:96:43:59:
3f:73:7d:d5:ba:06:5b:88:63:55:7a:f8:8a:f6:f8:c3:c7:b0:
46:90:cb:4e:77:8f:69:29:0d:77:51:25:c1:85:2a:57:3e:f4:
7e:0c:bd:3e:b1:4b:bb:5e:75:2f:90:1a:25:44:ce:da:71:dd:
08:1f:ce:ed:a0:04:6b:3c:79:7c:5e:c0:1b:ab:b0:f5:b3:12:
58:8b:03:0a:c3:65:49:34:c7:d3:1b:1d:f2:7a:fe:8e:8e:58:
c2:98:c2:67:1d:da:ad:f6:5f:1d:7a:c1:ac:c3:98:18:31:ef:
97:bc:e6:d6:49:bb:1a:36:1e:42:69:6d:09:57:1f:cf:f4:66:
8c:92:96:12:2d:6d:c9:14:9e:96:95:33:80:7f:2b:d9:16:df:
59:37:11:4d:ff:9e:5b:26:bd:c5:f6:06:4b:c0:d0:00:1d:35:
a0:74:64:bf:22:96:51:5a:32:58:5f:d7:7c:99:93:16:df:9b:
74:6e:d9:10:8b:01:4b:8d:24:30:7e:d5:22:88:b6:9a:63:68:
1d:07:83:76:0d:26:74:fb:36:28:87:f8:5a:07:11:1d:33:4f:
70:9e:ee:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:43 2025 by rpki-client