Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA334B2E2D611EFA95EAD54762E951A.roa
File: 1BA334B2E2D611EFA95EAD54762E951A.roa (raw, json)
Hash identifier: t3mJyFyGSqhPzy8H8d4DowxQ3ILlXa1HCioUayu8I2Q=
Subject key identifier: B2:3A:09:DD:77:9A:F4:59:56:E3:4C:68:EE:DC:C5:16:E0:69:7C:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA334B2E2D611EFA95EAD54762E951A.roa
Signing time: Tue 04 Feb 2025 08:57:49 +0000
ROA not before: Tue 04 Feb 2025 08:57:45 +0000
ROA not after: Wed 30 Apr 2025 08:57:45 +0000
asID: 18229
IP address blocks: 154.210.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86206 (0x150be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:57:45 2025 GMT
Not After : Apr 30 08:57:45 2025 GMT
Subject: CN=67a1d68c-f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:c8:fc:02:a3:6a:72:94:e8:eb:eb:a0:93:
1c:48:4b:39:71:ff:fa:1b:bc:c9:82:99:f2:78:79:
a2:2d:ce:73:ff:e3:d5:13:e6:e0:3a:1b:c0:94:12:
c2:40:34:78:c7:56:3a:3a:1f:ea:01:1c:e6:ad:3d:
fc:a2:69:12:20:74:6e:af:e5:18:56:18:61:54:e1:
c8:6c:24:8e:c6:b2:9d:02:30:fa:37:d3:54:8e:ce:
65:d8:e9:6a:53:7a:e1:ca:76:a5:c1:64:29:35:6b:
3a:9b:4d:db:df:00:d8:10:29:ef:a9:06:0f:d0:ed:
d9:56:59:6b:14:2a:0c:cf:27:a1:75:5f:71:c2:f5:
76:b8:d8:89:32:9b:f9:a2:84:79:fd:10:5b:2b:13:
9c:32:69:eb:1b:5c:1d:15:fe:6a:d4:c4:80:24:0c:
03:f2:84:9f:8e:40:c0:59:24:43:4c:f4:4b:65:eb:
ab:e4:f8:d4:2f:85:47:72:9c:c8:f6:0c:52:6e:5f:
ce:aa:58:71:ac:3c:c7:b2:df:87:11:72:8f:3c:69:
7c:b9:f5:bb:b1:e2:23:cd:09:96:c0:5c:a8:a3:9f:
72:9e:2c:d8:89:3a:c3:ec:f7:6b:62:f2:4d:6f:83:
a0:5d:71:14:c1:d1:ba:ae:6b:c5:28:15:d4:ee:66:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:09:DD:77:9A:F4:59:56:E3:4C:68:EE:DC:C5:16:E0:69:7C:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA334B2E2D611EFA95EAD54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:2e:55:e2:fb:92:4b:82:ac:16:88:9f:0e:b6:44:59:9e:8c:
2a:d3:45:62:8d:4a:6d:f5:9e:b2:38:ee:3d:8f:15:0c:f6:7f:
36:e2:c5:d7:17:3e:09:a5:68:51:77:33:f4:5a:c7:0c:5b:0f:
f3:88:5a:ed:be:b0:26:dc:c9:e0:c4:10:a2:31:e6:50:4d:3a:
24:b0:d7:0f:55:83:80:8c:5a:c3:84:2f:9e:41:70:df:c1:92:
65:e1:28:bf:21:fb:47:67:78:f7:88:a5:af:7e:4d:c6:d8:04:
0c:cf:e9:80:18:f8:a4:af:32:df:ee:d9:d6:17:8f:e6:bd:17:
98:b8:91:05:d8:64:a4:8f:42:59:29:a1:15:12:e9:57:71:f0:
f0:1f:70:bd:4b:bf:ea:b7:e8:46:5a:7b:c2:f1:d9:c5:66:5a:
5c:93:29:74:5a:be:f7:ba:1f:34:34:1e:15:82:99:6d:11:cd:
a5:bb:70:7d:28:ab:2a:8b:08:b4:03:33:c9:dd:78:a9:b1:40:
e5:18:6a:6f:57:7f:6a:d4:a2:ac:89:85:5f:ba:62:53:60:b0:
fa:45:25:ba:fa:c2:fe:5f:15:5d:99:fb:34:09:80:97:71:14:
61:61:90:24:4d:6f:39:bb:19:32:31:84:b7:07:e7:be:4a:33:
85:00:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:57 2025 by rpki-client