Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA2EEA8C8AB11EF8DAC4D9C762E951A.roa
File: 2EA2EEA8C8AB11EF8DAC4D9C762E951A.roa (raw, json)
Hash identifier: 2nLv00hnJB74boz3t4Qx1OqrIZxH8LOAu1nqPa1WGj8=
Subject key identifier: 10:3E:13:25:A8:FE:4A:F8:ED:0D:AC:5C:D2:05:48:96:5C:D5:CF:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013176
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA2EEA8C8AB11EF8DAC4D9C762E951A.roa
Signing time: Thu 02 Jan 2025 01:45:02 +0000
ROA not before: Thu 02 Jan 2025 01:44:58 +0000
ROA not after: Mon 13 Dec 2027 01:44:58 +0000
asID: 17561
IP address blocks: 154.220.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78198 (0x13176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:44:58 2025 GMT
Not After : Dec 13 01:44:58 2027 GMT
Subject: CN=6775ef9e-9cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:48:43:03:31:5c:a2:f8:18:2f:fd:69:41:
35:63:c0:5e:72:e9:46:9e:15:e3:31:17:79:e1:ac:
81:47:18:59:fb:6f:e8:a3:29:73:9d:fe:69:04:6b:
38:b8:8e:3e:c6:45:a6:98:9c:fe:12:15:22:d3:fa:
5c:06:f5:e8:8e:2c:0e:7e:59:35:5f:f6:6c:38:1b:
13:14:37:13:dc:b7:f8:10:a8:2d:ab:7f:2a:d8:62:
0c:0e:09:b4:70:1f:8d:37:1d:33:65:a6:84:7f:d2:
2e:bd:a7:f1:42:4c:93:72:07:4e:93:65:9e:1d:64:
4f:74:f1:98:6e:09:63:4e:c2:fd:6b:42:d0:f5:b2:
93:15:54:de:ca:69:04:8f:42:14:2a:49:a9:4d:8e:
5d:93:17:cd:97:5e:49:b3:72:49:42:7e:a1:a4:bb:
ea:f2:eb:bd:c9:c8:02:03:1f:c3:d4:9b:83:b8:73:
13:4a:16:46:99:e3:57:1b:d0:47:1b:34:df:8a:a9:
d1:aa:5a:20:44:ad:45:39:cc:52:e7:91:a1:46:2a:
5f:27:f0:35:14:ed:a6:b0:d6:f5:6a:14:b1:97:bc:
dd:49:4e:fc:cf:a9:f8:7f:0d:ac:da:15:55:38:54:
f4:e3:3f:6d:fb:5e:dd:40:1a:ea:2f:2c:26:f0:1d:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:13:25:A8:FE:4A:F8:ED:0D:AC:5C:D2:05:48:96:5C:D5:CF:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA2EEA8C8AB11EF8DAC4D9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8e:09:25:32:23:88:49:36:37:40:6a:8c:8a:22:fb:d0:51:
dc:e9:45:09:c7:42:88:5e:a1:c0:46:17:66:2d:67:f2:1e:0d:
42:95:84:2b:c2:38:ee:22:c5:90:5e:03:75:22:c5:2d:b0:c0:
4e:4e:67:74:b1:bc:13:51:ee:d0:d3:02:ac:10:d6:ab:c4:64:
00:b5:b3:0a:8c:aa:07:2c:26:77:80:cb:ac:93:86:c8:0f:6c:
33:6d:52:2d:8f:af:ad:df:e0:32:ff:f7:87:93:df:19:f5:da:
10:67:68:a0:60:6f:c8:ca:34:a3:ea:18:04:ac:38:04:1a:f8:
7e:ce:41:d5:5e:13:be:36:1c:2f:3c:31:ea:77:5c:62:c0:3c:
96:fc:40:ed:5a:1a:7b:00:b9:64:14:20:4f:27:3f:68:15:e3:
ac:38:43:c7:6f:fb:1a:95:ce:13:c0:65:1f:04:60:6e:9f:28:
bc:b1:bf:09:09:49:a3:8b:41:66:46:0d:c4:6f:73:7e:06:23:
b8:70:b4:a9:e2:7e:ec:5b:3d:a8:05:95:cd:e7:52:7f:cf:e0:
bd:55:91:bb:9d:11:4a:e6:02:23:54:a9:af:ca:31:0e:cc:bc:
a1:95:71:f0:67:1b:6f:68:ab:aa:0f:80:71:46:db:07:f6:2f:
7f:2f:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:50:34 2025 by rpki-client