Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B2FB4BAC41C11EF92E454B3762E951A.roa
File: 2B2FB4BAC41C11EF92E454B3762E951A.roa (raw, json)
Hash identifier: rJNzUHKnuW/17mIFEcldKXDZ7CwSq/H1rQKZ92v4cg4=
Subject key identifier: 38:30:45:A5:D4:3B:DD:E1:3B:B6:2A:52:5B:6A:C6:C8:21:C9:1C:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01298F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B2FB4BAC41C11EF92E454B3762E951A.roa
Signing time: Fri 27 Dec 2024 06:31:14 +0000
ROA not before: Fri 27 Dec 2024 06:31:10 +0000
ROA not after: Sun 12 Dec 2027 06:31:10 +0000
asID: 17561
IP address blocks: 154.201.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76175 (0x1298f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:31:10 2024 GMT
Not After : Dec 12 06:31:10 2027 GMT
Subject: CN=676e49b1-8c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:46:ab:9a:ef:34:ed:f7:40:3f:87:c5:83:
d4:d7:94:6d:fb:73:49:33:98:18:fd:6c:18:d6:58:
15:b7:0d:e9:d8:0f:40:87:62:b6:b5:04:24:b9:c3:
4b:ce:4c:31:c9:75:8d:55:2b:bd:e1:d7:0a:e1:fc:
fc:e0:db:27:ec:e3:f2:75:57:dd:f8:64:bc:12:fe:
8d:5b:b4:c0:0f:02:49:c3:28:93:9a:28:f2:1d:9b:
1a:e7:8a:07:c6:b0:f0:7b:5b:1e:ec:82:f1:92:e0:
f6:6e:06:2e:c0:ca:13:b3:eb:24:e7:bf:38:48:45:
31:62:ae:9c:64:99:fe:ea:48:99:8d:45:83:00:65:
b9:0d:11:41:6d:b2:4e:04:78:a6:17:dd:56:59:45:
93:cf:df:be:0a:d0:c1:67:fa:17:61:9f:d2:a3:e7:
4b:2a:55:68:f3:9e:22:ac:99:46:c1:ad:1d:4d:d3:
d5:08:82:52:55:68:93:1f:a0:58:44:02:53:49:1b:
75:29:bb:d9:e5:03:a5:29:be:fc:14:10:1b:4b:eb:
fc:15:4d:51:e9:7c:96:a4:39:8d:d0:86:e1:0e:29:
af:7c:6f:1d:23:23:eb:db:09:c1:88:c7:0c:e7:7a:
3f:3b:4e:76:17:6d:69:f5:19:c1:24:ab:46:00:c9:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:30:45:A5:D4:3B:DD:E1:3B:B6:2A:52:5B:6A:C6:C8:21:C9:1C:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B2FB4BAC41C11EF92E454B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.22.0/24
Signature Algorithm: sha256WithRSAEncryption
20:27:8f:41:a6:8a:f6:87:86:aa:75:08:b6:5d:5b:f0:6f:09:
8a:ef:83:33:2e:2e:5e:f8:32:f8:15:fb:81:c9:cb:c0:09:cb:
05:d2:13:1f:de:f7:45:6b:09:a6:ee:52:f9:77:88:46:40:18:
9e:78:b4:33:e8:47:42:c4:c7:57:3b:86:18:1f:21:e2:1c:39:
34:56:d3:7e:5e:26:25:f3:33:d3:cb:c3:1d:a7:c5:c9:88:ce:
1d:94:af:c2:40:c7:af:30:90:9a:f1:87:b4:03:02:4d:6b:8e:
2c:2f:1d:00:75:7f:fc:40:dd:e1:fa:88:a8:81:31:bd:91:cd:
4d:15:f0:a2:d6:34:c4:45:08:5f:07:5c:59:ba:b5:ae:ec:56:
f8:6c:19:b9:aa:7e:9a:66:5c:82:f6:29:81:c2:00:05:d9:8b:
3e:41:17:c7:d9:17:4b:d3:b9:f0:62:42:52:03:6c:2f:56:54:
78:18:12:00:fb:f4:d7:9a:89:e0:4c:8c:f9:aa:a6:78:70:45:
0e:cb:96:66:31:34:e6:2c:3b:ef:66:c5:fd:ac:30:a2:b1:ad:
a2:0b:b1:d6:01:81:53:69:b2:2f:38:e9:24:0b:57:1d:c0:56:
3c:ee:2f:24:45:d6:da:48:30:30:db:7d:c9:6c:0b:88:e9:ef:
e0:c2:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:40 2025 by rpki-client