Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2243DEEEC91C11EF9D08136E762E951A.roa
File: 2243DEEEC91C11EF9D08136E762E951A.roa (raw, json)
Hash identifier: 8lnmYzb+pjU9Qh1zMZItCXdTUA8b1CnOkBFu4kFzbQM=
Subject key identifier: A0:AE:29:C3:3B:61:31:E7:D8:7A:EA:FD:0C:38:42:85:79:0E:F4:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013303
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2243DEEEC91C11EF9D08136E762E951A.roa
Signing time: Thu 02 Jan 2025 15:13:34 +0000
ROA not before: Thu 02 Jan 2025 15:13:31 +0000
ROA not after: Mon 13 Dec 2027 15:13:31 +0000
asID: 17561
IP address blocks: 154.222.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78595 (0x13303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:13:31 2025 GMT
Not After : Dec 13 15:13:31 2027 GMT
Subject: CN=6776ad1e-0787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:61:9e:3d:20:04:41:29:cd:e1:15:b4:97:
ec:b5:55:d8:6f:0a:2c:d2:96:84:c5:de:bc:ff:37:
55:6f:7a:a2:9c:0e:8c:b4:e5:62:cd:8f:96:71:7f:
08:59:6b:b0:d5:88:71:4a:a3:4b:64:36:33:40:81:
a3:0a:0d:92:02:5a:5f:89:f4:25:26:ef:77:a8:f7:
00:22:91:7f:34:ab:92:fc:26:07:57:9f:dc:5f:88:
ee:86:24:c1:3d:d3:d3:29:56:91:66:52:e1:38:c9:
cb:14:6a:ab:4f:53:d6:fb:6b:0b:ba:34:95:7a:fb:
ce:68:57:44:59:59:d0:8a:b7:5f:3e:b5:76:69:55:
13:57:4f:36:6f:b3:7a:41:c4:86:2c:ff:98:39:5e:
77:6b:a8:16:e0:13:c9:e6:a9:88:4a:58:cd:a7:10:
1c:de:92:e8:dc:87:fd:07:76:bf:5e:5b:f2:12:ae:
36:7a:90:c2:31:df:49:ff:53:6e:5e:f9:db:c4:2d:
0a:5e:44:6e:99:de:54:9b:f4:4d:ac:1f:53:df:da:
4a:cc:1b:34:c8:94:b6:c5:9b:a2:2f:eb:a2:17:2b:
db:a5:98:2d:20:02:3c:87:07:7a:3f:4c:82:4b:a2:
92:e7:b8:34:0b:1b:60:d7:aa:fa:b4:4e:a0:34:56:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:29:C3:3B:61:31:E7:D8:7A:EA:FD:0C:38:42:85:79:0E:F4:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2243DEEEC91C11EF9D08136E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:30:d9:6f:86:52:01:23:93:78:89:52:4d:86:a2:3d:3f:d9:
27:8f:23:31:e1:c1:4b:3e:ab:4e:ae:c3:f7:20:f3:ff:93:dd:
62:12:b9:b4:87:c6:a7:72:ce:ab:9e:23:11:18:a5:1c:1b:97:
c6:d8:b6:13:51:83:e4:bc:ee:5b:b4:f9:e4:bf:7e:86:93:b7:
eb:d9:92:4d:e0:ba:89:f5:40:bf:fa:80:3c:20:d5:7b:d4:a7:
6d:77:85:8d:4d:c9:33:91:05:b2:2d:cc:a0:00:b9:35:20:12:
4d:7b:55:da:1f:80:45:66:81:33:9b:50:27:b6:20:04:5b:0b:
92:78:36:10:f4:89:91:a1:79:02:d3:e7:f0:d7:e3:df:99:a9:
74:34:f4:d5:16:2e:0c:92:a1:fc:66:a0:68:1b:db:6c:08:d5:
58:ed:33:57:37:29:91:25:ef:40:38:48:11:5c:e5:6e:7e:8e:
42:09:2d:4a:da:45:e6:6b:0b:86:87:67:63:eb:e4:6c:9b:a6:
66:5f:80:a9:86:db:41:2e:da:67:76:b2:59:02:70:3d:86:10:
88:28:c5:50:f4:47:51:92:df:84:44:ea:bd:6a:08:87:93:48:
75:84:17:17:5f:0d:fb:a5:5b:af:39:58:04:67:6a:b3:97:82:
4a:e0:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:57 2025 by rpki-client