Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D9456DAC92511EFBDB4CEA6762E951A.roa
File: 2D9456DAC92511EFBDB4CEA6762E951A.roa (raw, json)
Hash identifier: KmJx6JxazSzE7BcG8dvbBk+V1KT1LDsXwkB+KIefrrY=
Subject key identifier: 4A:D1:98:28:54:B0:28:18:80:B5:0C:A1:B3:E8:A4:AE:BB:97:DE:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01334D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D9456DAC92511EFBDB4CEA6762E951A.roa
Signing time: Thu 02 Jan 2025 16:18:19 +0000
ROA not before: Thu 02 Jan 2025 16:18:15 +0000
ROA not after: Mon 13 Dec 2027 16:18:15 +0000
asID: 17561
IP address blocks: 154.222.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78669 (0x1334d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:18:15 2025 GMT
Not After : Dec 13 16:18:15 2027 GMT
Subject: CN=6776bc4b-56e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:f5:e9:cb:33:ec:00:d9:19:06:f4:5f:ed:
99:8f:80:f2:01:7b:75:3e:ce:cd:14:75:1c:5e:06:
7a:64:61:4a:57:49:68:47:8f:7b:8f:1d:87:ff:1a:
e4:b4:31:85:07:d8:60:a9:1a:ea:e9:b3:fc:f2:d2:
13:d5:2e:b3:32:02:f1:7e:b6:9f:19:03:48:50:3d:
86:9e:63:a2:d9:4a:63:41:46:bd:69:ef:6a:c2:ee:
b8:9a:7f:cf:6a:0e:cc:3b:8b:2e:fe:7a:8f:68:77:
54:f1:42:94:5d:06:97:66:d7:83:f5:c1:e1:5e:9c:
ed:d3:f8:dd:df:65:9d:fb:05:a2:a8:38:84:2e:9a:
39:bb:ee:cb:7a:07:42:69:21:1b:5f:71:0b:bf:b8:
ba:14:f0:fd:ff:98:a2:4c:98:9f:f9:08:3a:2e:a4:
aa:ab:70:11:24:68:c6:96:54:e6:f8:d2:70:c5:a9:
8f:e6:3a:db:f5:d5:a6:ec:06:5b:61:3b:6b:21:b2:
46:cf:48:2d:5f:9b:9d:14:4a:87:1e:3d:59:82:21:
33:e4:e2:7b:39:92:28:9b:ea:ee:fa:f8:04:19:62:
20:ca:39:24:20:ff:d4:9f:6f:37:7a:4e:60:85:12:
71:8d:96:37:cc:50:12:82:52:6f:76:32:48:95:3b:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:98:28:54:B0:28:18:80:B5:0C:A1:B3:E8:A4:AE:BB:97:DE:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D9456DAC92511EFBDB4CEA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9e:f5:eb:92:00:fe:c8:75:e3:8c:27:3a:67:72:58:4d:cd:
64:e9:ba:e2:01:40:26:39:bf:c4:a9:85:c3:c5:d3:29:8c:95:
65:45:5e:03:59:6e:b1:02:4e:0d:7f:3b:ea:e8:87:a6:57:3a:
32:6b:e5:70:1c:9d:03:50:5e:79:0f:6c:52:45:11:15:f3:c3:
e7:8d:1e:b3:cf:f9:9d:ee:39:5e:d1:af:71:da:b5:32:08:c1:
4c:e7:5a:ff:fc:09:13:e7:db:bd:dc:02:82:1c:a5:5f:d7:4d:
0c:db:04:78:4a:7f:be:36:47:4e:dd:d2:5f:b9:1d:68:77:bb:
62:7c:7b:e8:2a:77:d0:e5:13:46:ca:df:1a:b7:4f:75:22:f8:
9d:7f:19:4d:82:86:d3:f6:bd:5b:40:9d:8b:7e:9e:3d:1b:ec:
a1:1e:a9:ac:3f:34:2a:4a:64:e0:49:59:9d:05:0e:6f:68:bb:
b8:c2:b5:c3:c2:b7:e2:34:9b:58:ad:03:70:b9:c2:f9:3c:ec:
2c:d7:a4:47:f0:17:d8:78:24:66:db:a6:ac:4a:d9:ff:dd:18:
2e:3e:bb:db:dc:0e:a9:25:ff:69:8b:9c:7c:f6:a6:66:c7:d9:
41:8e:f8:8c:2a:71:a3:1b:f3:e5:a1:21:b9:b7:5a:e1:6d:ad:
44:7b:4b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:50 2025 by rpki-client