Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14454A5EF67F11EF8BDBD940762E951A.roa
File: 14454A5EF67F11EF8BDBD940762E951A.roa (raw, json)
Hash identifier: 57qThVZ3b3I0dnakO/Tk6UJjhJjC/Jdvupa8W4gLVV8=
Subject key identifier: E0:B7:21:99:2A:01:40:69:D5:9A:00:7B:06:49:69:D2:32:9B:1C:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14454A5EF67F11EF8BDBD940762E951A.roa
Signing time: Sat 01 Mar 2025 09:25:13 +0000
ROA not before: Sat 01 Mar 2025 09:25:10 +0000
ROA not after: Mon 31 Mar 2025 09:25:10 +0000
asID: 48031
IP address blocks: 154.222.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93588 (0x16d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 09:25:10 2025 GMT
Not After : Mar 31 09:25:10 2025 GMT
Subject: CN=67c2d279-5cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:61:2a:50:8f:09:e5:22:fb:e9:fd:b3:29:
fe:71:60:39:43:c3:9d:74:ba:c1:39:66:9c:a0:29:
56:96:df:d1:9f:90:9b:72:5a:b8:57:e5:a8:83:2f:
a2:c5:eb:45:fe:76:b1:58:48:f2:dc:42:6b:3a:8c:
6c:18:da:19:8a:1f:22:3a:19:7b:22:a2:a3:49:bd:
f8:9b:3a:08:77:05:32:bd:f1:ca:1b:37:b5:7d:74:
86:a6:72:b0:9d:99:cc:7e:03:cf:7d:07:00:7f:86:
26:eb:34:02:c4:8d:b8:da:ac:4c:f2:43:2a:cc:8b:
9a:4e:04:59:da:8e:8e:fd:a2:3e:c5:f0:da:db:bf:
93:7a:3c:ba:8e:f0:12:b1:c5:e6:9d:08:ad:38:1b:
37:1e:4d:f8:27:d6:20:ac:06:08:05:85:bc:f1:62:
90:1b:8c:36:cd:74:15:9a:29:00:72:a2:86:16:02:
5e:8d:90:8b:e6:ab:6f:b0:3e:1c:c2:f2:8e:3c:de:
a1:69:a3:e2:b5:cd:c2:a3:57:2a:3d:36:dd:82:c4:
9d:d8:98:d1:63:50:0a:da:97:10:f8:75:2b:3b:f6:
43:a3:dd:01:c9:6f:e0:5b:98:98:d5:5a:c3:a6:00:
89:ae:14:48:ef:4a:8f:27:c6:19:ac:cf:4e:ce:81:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B7:21:99:2A:01:40:69:D5:9A:00:7B:06:49:69:D2:32:9B:1C:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14454A5EF67F11EF8BDBD940762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.242.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ad:4c:b9:16:19:28:7f:70:41:3f:30:d0:5e:0e:b4:72:9a:
2d:a2:44:3d:34:73:03:f0:ed:31:54:9b:40:2e:f9:70:bb:5b:
64:06:08:22:51:9a:80:c7:26:2c:a1:69:eb:dc:ab:41:27:74:
b3:bd:bb:dd:d7:f5:97:ac:aa:a5:b2:4a:5f:c5:b3:c7:48:c2:
7f:74:6f:2d:01:f2:ca:5b:1a:16:f0:f7:bc:a1:9a:ff:88:60:
98:b4:f8:bc:fc:f3:95:5f:3b:12:48:47:68:dc:22:34:d1:0f:
a2:07:54:fd:ec:f4:2a:a4:31:7c:b5:61:42:51:b2:62:cc:fa:
61:c5:2b:a5:de:40:ca:96:1b:d8:36:35:8b:41:a3:58:0b:06:
02:b2:ce:e6:b3:9f:a7:28:de:91:dc:74:b2:2a:3f:b4:90:29:
5e:38:09:44:0e:19:0d:62:0b:6a:3b:9a:e4:9f:33:9c:a3:03:
db:74:db:b3:20:f0:48:ec:cd:8d:1d:bd:71:d6:38:68:8f:83:
70:4d:ec:38:f3:e7:31:af:93:a5:ac:a4:0f:d9:56:59:bd:3e:
ed:1e:4f:2e:ec:7b:7e:d1:0d:82:10:80:9f:97:9b:25:d5:5e:
46:04:2d:c7:4d:eb:13:29:27:b0:04:df:c5:b4:48:f9:36:b9:
a7:4a:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:38:22 2025 by rpki-client