Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224E5A3EE2D711EF838A2C5A762E951A.roa
File: 224E5A3EE2D711EF838A2C5A762E951A.roa (raw, json)
Hash identifier: 13rQEgsim/nMDc6Lzndj9xg6y1564nOE1mxXfAOBr1s=
Subject key identifier: DD:C4:35:43:1C:3C:FE:0C:9D:2C:3C:2E:B8:99:FC:C7:7D:3A:23:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224E5A3EE2D711EF838A2C5A762E951A.roa
Signing time: Tue 04 Feb 2025 09:05:09 +0000
ROA not before: Tue 04 Feb 2025 09:05:06 +0000
ROA not after: Wed 30 Apr 2025 09:05:06 +0000
asID: 18229
IP address blocks: 154.210.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86212 (0x150c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:05:06 2025 GMT
Not After : Apr 30 09:05:06 2025 GMT
Subject: CN=67a1d845-5dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:db:81:39:c1:43:c4:0c:1b:c2:16:84:02:
bf:be:1d:c1:9a:7c:43:4f:e9:b3:c0:9a:d9:32:d9:
8a:98:6b:85:92:06:e8:49:26:56:2a:de:3c:fa:2c:
84:78:e5:88:ec:d6:ed:c9:bc:9c:67:e1:32:ea:4c:
b9:55:38:81:c6:f9:75:a1:b7:6e:2d:35:9d:0c:07:
3f:d1:64:89:03:8e:37:90:bc:a5:79:25:17:e2:bf:
55:90:14:bc:f6:4d:bf:b8:72:34:75:cf:5e:96:37:
71:fb:bc:35:47:b6:19:3c:6c:c3:8a:02:ab:5a:79:
40:e8:66:77:c7:58:80:63:c1:c0:46:88:56:2e:0f:
74:66:ae:85:b2:f0:e2:61:0a:b0:84:0f:f1:d1:1b:
e2:c1:ef:c9:2d:01:e9:fb:a8:4c:3b:52:7f:90:8e:
f1:0c:f3:6b:0e:a2:dc:7c:87:37:c9:72:6a:64:45:
52:ec:06:a1:05:b5:bc:d8:2a:d9:e3:8e:56:40:34:
b2:c7:d9:26:ea:00:5e:56:d5:f2:ac:1e:e4:49:a5:
d9:76:ae:c4:5f:8d:70:49:17:84:3d:b5:63:41:4b:
16:c0:e4:4f:7c:98:82:0e:3b:55:e9:65:1e:af:2e:
5e:42:36:e6:f7:28:79:ee:ed:f6:82:f8:b1:ae:03:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:35:43:1C:3C:FE:0C:9D:2C:3C:2E:B8:99:FC:C7:7D:3A:23:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224E5A3EE2D711EF838A2C5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:34:ce:32:af:54:75:68:dc:a3:9e:bb:2e:a0:bb:37:5f:79:
53:0e:40:39:e6:fd:01:9c:3f:86:c5:19:af:a5:29:66:0a:9b:
e1:36:4b:fc:6c:3a:c5:41:61:30:23:b8:9b:bc:7e:fe:8f:0b:
23:11:b0:f9:9b:72:f0:43:a4:c1:c5:ec:04:f8:31:c6:cc:e6:
68:2c:ab:dd:ea:96:12:45:e4:52:d1:d8:e7:66:6b:3b:90:4e:
fd:91:95:25:38:1f:a3:b8:e1:c0:fd:d3:ab:66:db:59:8d:72:
db:71:43:7e:f0:47:e6:b5:6d:72:8a:b5:6a:dc:be:4a:f6:5d:
e9:9c:23:a4:2a:93:81:4f:93:37:43:1a:48:f5:93:09:58:95:
2a:94:1c:a1:02:78:1b:88:26:b4:6e:0d:23:d7:92:75:12:0e:
10:f1:bb:b3:fe:64:c2:29:8d:73:0c:f0:39:77:6c:07:8e:6a:
ec:31:d0:a2:25:5b:ee:b6:9c:02:79:3c:09:7b:de:7f:cf:22:
80:78:f1:23:ad:4b:37:35:2b:5e:c2:84:de:0c:dd:15:39:4f:
e8:9f:1f:e3:8b:27:e9:8d:13:64:8f:70:04:c3:b2:eb:74:ff:
5c:af:73:d8:a1:47:4d:c1:cf:03:ee:b6:21:cd:12:1d:5f:72:
76:ba:cf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:39 2025 by rpki-client