Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/149CA31AC62011EFAF11106E762E951A.roa
File: 149CA31AC62011EFAF11106E762E951A.roa (raw, json)
Hash identifier: Xe36hflzwj4KaS8GKjqZcwXc6waiQAr/BgAL46tPUZg=
Subject key identifier: 89:47:9F:8B:CA:E0:DD:A2:D7:83:B1:BD:D7:10:74:71:05:17:24:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/149CA31AC62011EFAF11106E762E951A.roa
Signing time: Sun 29 Dec 2024 20:04:16 +0000
ROA not before: Sun 29 Dec 2024 20:04:12 +0000
ROA not after: Sun 12 Dec 2027 20:04:12 +0000
asID: 17561
IP address blocks: 154.217.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77668 (0x12f64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:04:12 2024 GMT
Not After : Dec 12 20:04:12 2027 GMT
Subject: CN=6771ab40-9a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:32:f8:10:50:c4:b4:9c:67:19:94:b9:af:
af:f9:6b:ac:a9:c2:99:65:83:1b:eb:3e:0f:ec:5c:
03:85:c9:86:55:c2:87:a2:b5:87:3e:5e:78:50:31:
e2:a1:46:0d:21:1f:ff:1f:61:7e:69:43:25:33:b0:
41:d1:09:47:0a:5c:2a:ac:05:76:12:88:21:c5:7c:
ba:7f:82:ee:fb:b0:77:ad:9e:c7:ab:a2:79:7b:ae:
32:49:a5:de:ff:31:6e:88:5b:da:15:85:49:a1:6a:
1e:7b:31:9b:f7:7b:d8:9d:a8:6f:f5:56:0b:3c:43:
6e:d7:36:a5:f9:03:c6:49:bc:19:7b:d4:ef:74:5a:
89:f9:ad:9b:22:69:91:d9:86:6d:a6:a6:1f:e3:20:
8e:6c:b3:b7:8f:4b:2c:86:dc:94:28:63:25:65:b8:
5e:2a:86:d3:e0:61:3b:47:e5:b0:26:32:d8:6d:15:
10:ee:0f:e5:35:74:0f:68:0c:b9:8c:e8:db:c4:55:
7d:55:11:5d:80:cc:46:26:b6:53:29:e2:9d:5a:51:
11:01:a9:dd:c7:d2:4e:60:81:82:39:b2:e7:05:e9:
de:6b:a8:5f:75:43:b1:4c:85:5a:74:59:76:b5:30:
d0:bd:d8:27:57:55:80:da:23:a5:bb:25:4f:15:11:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:47:9F:8B:CA:E0:DD:A2:D7:83:B1:BD:D7:10:74:71:05:17:24:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/149CA31AC62011EFAF11106E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.149.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2d:cd:41:72:c9:dd:6b:ea:68:89:d4:9f:70:f3:29:99:e8:
ee:cf:23:1f:27:c8:c6:bb:50:4b:f3:cf:ba:15:07:96:67:e0:
6e:19:5e:b1:4a:1f:78:d5:fc:f4:ff:35:41:16:2b:0f:2c:26:
c5:8d:4a:af:64:a5:49:63:2e:db:5b:c5:87:6e:b9:c6:5d:61:
db:e4:ea:1b:90:6e:e0:07:26:5b:7b:38:f0:6f:7b:89:ab:b6:
f8:2e:40:ab:86:7d:d0:c0:3b:74:59:6d:7b:c2:5e:7e:a9:88:
f9:b3:97:3c:77:1e:b8:52:a5:79:5c:df:13:5d:8a:6b:f5:86:
37:08:de:68:a4:f0:d4:c2:3f:40:fe:ce:bf:a5:ff:20:80:29:
e1:bd:f6:f5:e3:d7:74:5f:ef:c3:b0:a2:4e:8e:53:eb:aa:ee:
30:99:c9:4d:45:8f:4b:04:80:be:c1:af:ff:d7:4c:5c:58:c3:
39:67:4c:89:15:7c:d9:02:3c:fa:50:98:c1:c9:79:09:dd:d6:
25:1d:06:ac:85:a0:20:17:98:56:f4:f7:0e:c1:7c:1b:fd:05:
9a:d5:7c:7d:d5:ff:d1:2b:c2:c5:d4:f1:e1:3b:fd:5b:99:3e:
4c:dd:c7:f6:13:2b:c4:fb:9d:51:b3:14:e0:25:9f:f2:22:e2:
65:6d:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:36 2025 by rpki-client