Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242D0130F44C11EF9808BD9A762E951A.roa
File: 242D0130F44C11EF9808BD9A762E951A.roa (raw, json)
Hash identifier: spHgoeNyiM7CH38haAnEXzdnwBPOg4j9pe6W4jAG+Jk=
Subject key identifier: 83:2F:8B:09:D8:C6:63:B0:5A:73:2E:F1:DE:1F:1D:71:9C:69:F9:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01642F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242D0130F44C11EF9808BD9A762E951A.roa
Signing time: Wed 26 Feb 2025 14:15:33 +0000
ROA not before: Wed 26 Feb 2025 14:15:29 +0000
ROA not after: Sat 19 Feb 2028 14:15:29 +0000
asID: 17561
IP address blocks: 154.82.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91183 (0x1642f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:15:29 2025 GMT
Not After : Feb 19 14:15:29 2028 GMT
Subject: CN=67bf2205-0dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:54:9b:2e:02:15:1e:c4:ff:61:5a:4c:65:
3b:85:3c:5d:b3:5f:1c:8c:28:9e:df:4a:c0:f7:53:
8f:1a:ff:d5:b3:35:86:07:6c:f4:b2:f2:0c:6b:cf:
3a:0a:b6:45:17:6e:ff:7c:7d:86:96:2c:a3:f1:44:
a5:9b:c6:ac:96:16:83:a8:c9:71:84:9a:27:92:d7:
d4:d2:b1:29:65:c6:17:45:72:e4:5a:08:8f:19:86:
89:80:77:0c:71:f6:82:67:8b:57:cb:13:e0:0b:5c:
87:c8:f3:08:17:a3:a5:e6:3b:cc:2d:e3:e1:3f:f2:
77:18:6f:d9:06:60:f2:f2:9f:f9:de:0e:1b:d4:8c:
3b:29:07:74:2c:24:f8:71:ad:23:51:cf:d6:79:39:
73:7c:29:8f:71:c5:f5:cc:9e:b4:7e:b7:70:db:1a:
db:98:29:0f:4c:92:c7:b2:fe:67:4e:2f:a2:76:31:
00:38:89:f1:86:a7:b0:47:70:51:23:78:af:f4:66:
e5:a9:bb:c4:a8:e2:b3:aa:8a:bd:f5:d6:f1:55:8b:
d4:6f:4c:61:d6:6c:d3:a1:f7:b0:8e:54:24:ee:89:
96:c7:f0:02:2f:b5:73:da:03:cd:c3:b7:5a:2a:ad:
35:d5:ad:20:18:6b:a9:03:b5:15:bf:46:f7:88:5b:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2F:8B:09:D8:C6:63:B0:5A:73:2E:F1:DE:1F:1D:71:9C:69:F9:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/242D0130F44C11EF9808BD9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.204.0/24
Signature Algorithm: sha256WithRSAEncryption
90:da:1c:33:cf:73:73:d3:b6:9b:7b:1b:aa:30:74:cc:e5:a8:
d7:00:5d:f8:f9:4d:93:41:38:4f:ff:ff:d0:7a:38:d8:ae:60:
3b:23:f0:83:e0:cc:c4:bb:ad:1c:9a:05:95:fa:ee:6a:be:b3:
ae:45:e5:c7:0c:c5:e4:42:07:cc:bb:61:65:e7:26:be:e3:77:
d5:c7:f0:d2:ea:ab:9b:d1:2d:d3:9a:f2:94:38:cf:ba:91:1e:
44:b5:6e:3e:31:1f:51:0f:a5:b0:f9:5e:c5:0a:e0:02:f9:d5:
26:63:de:bf:a5:98:14:36:79:90:41:68:e0:28:de:40:5b:e6:
37:10:cf:d7:ab:80:a2:e7:8d:62:ca:49:ba:76:42:8a:b4:11:
02:de:91:48:5a:21:dd:cc:37:f4:e4:00:6d:cd:cf:0c:92:0b:
8b:e8:80:0b:de:bc:2a:a9:11:88:a2:26:b7:e1:cf:bf:7d:22:
0d:e0:08:bb:8a:59:96:c0:c3:03:bf:22:be:eb:d5:86:8a:e5:
fd:03:76:71:23:34:62:38:a8:b3:f8:0e:a8:95:d7:2a:63:bd:
d6:5d:17:15:46:43:a2:eb:d9:84:68:25:80:54:05:5f:a0:fa:
95:80:d1:4f:eb:ad:d6:03:92:19:37:ca:ff:26:4c:78:ce:56:
9e:20:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:14 2025 by rpki-client