Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE21C22CF2711EF8312E46D762E951A.roa
File: 1AE21C22CF2711EF8312E46D762E951A.roa (raw, json)
Hash identifier: D2x+WXZdZX9QhZc5Un+2nHjw+coQwk7lFB+abHUkRqU=
Subject key identifier: B8:FD:8C:84:CC:BB:18:B8:9F:64:7C:92:4A:DE:DA:42:16:29:20:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE21C22CF2711EF8312E46D762E951A.roa
Signing time: Fri 10 Jan 2025 07:47:13 +0000
ROA not before: Fri 10 Jan 2025 07:47:10 +0000
ROA not after: Fri 16 Jan 2026 07:47:10 +0000
asID: 138965
IP address blocks: 154.222.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80305 (0x139b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 07:47:10 2025 GMT
Not After : Jan 16 07:47:10 2026 GMT
Subject: CN=6780d081-04bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:a1:f1:7b:c0:2b:e7:c1:a5:3a:55:50:44:
30:63:59:f3:89:1e:9f:17:70:7b:a4:ca:c3:49:1a:
fc:43:57:4c:d7:76:ce:be:db:d8:b3:c4:4b:b4:84:
2c:35:84:8a:64:2b:a9:5d:9a:e1:74:a2:fd:60:d7:
1d:eb:8f:1f:fe:9e:e2:f5:d5:d2:5b:13:b4:d6:8a:
a5:02:73:24:7b:7f:da:b8:7c:df:6d:f0:63:a7:89:
60:4b:56:5a:e2:a1:87:ce:52:ef:58:bc:34:d9:41:
7c:3d:fc:f0:97:68:62:47:c4:96:5a:ef:5e:a2:7e:
c6:69:ea:56:ab:eb:d8:42:e0:44:e8:72:0b:2f:a4:
f9:ff:a0:8c:66:1e:94:61:60:85:a1:d3:e9:7b:fd:
2d:5d:49:06:b3:7a:fe:ec:e6:45:1f:cb:0a:d6:1c:
25:58:1b:38:ac:da:8a:2b:ab:2f:5c:84:f9:70:80:
4c:b2:66:58:d8:53:7a:58:e7:ff:88:16:dd:2b:0d:
32:e8:f1:81:b7:f0:16:cc:c6:97:04:99:06:41:74:
71:da:e8:03:de:f5:da:2f:be:a8:8a:9d:7c:23:df:
c5:7d:ac:58:00:38:f0:18:74:26:91:c0:11:e5:82:
14:77:40:a8:41:bf:f6:6a:7c:c5:de:92:81:0e:c4:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:8C:84:CC:BB:18:B8:9F:64:7C:92:4A:DE:DA:42:16:29:20:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE21C22CF2711EF8312E46D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.55.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f4:00:85:69:57:16:e3:b4:a4:5b:fe:0e:0d:8a:32:52:31:
19:42:04:88:bc:b7:cd:3c:ea:f9:60:54:56:09:21:b6:25:b9:
3a:a5:a5:e1:95:50:34:be:07:57:2e:7f:5a:78:46:a4:86:91:
fc:5e:2d:01:aa:67:1d:0c:58:90:4b:7c:51:81:22:f4:cc:c8:
05:20:e8:15:8d:00:e8:87:53:b2:e7:6f:99:19:4f:14:fc:21:
00:3b:3b:41:19:f2:b3:71:8a:3d:db:c9:e3:4a:bc:dc:be:2c:
f5:9e:a3:ec:fc:23:b3:88:8d:95:6d:c3:7e:7b:08:82:49:21:
f4:90:31:3e:ab:6e:6f:be:0d:5a:6e:ea:1d:01:09:47:6d:11:
95:03:3e:bf:c0:2e:17:19:ac:6e:47:15:97:cc:9d:2d:cd:9d:
05:42:0f:0e:59:6e:07:75:68:09:e2:0b:73:b4:07:0f:0d:e2:
ad:ea:d4:3f:35:a7:50:e1:b6:95:bf:11:48:20:ca:cf:47:ef:
0e:17:60:6f:3f:66:0b:99:b6:0b:b6:fa:52:5e:ab:65:7d:ca:
5b:ab:37:ca:0a:9c:1e:70:60:ce:5a:b9:59:11:56:e4:67:3c:
55:b6:49:3b:79:16:65:e2:93:d6:27:be:de:c0:bb:3b:48:95:
4b:5f:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:46 2025 by rpki-client