Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F7B874C92711EFA1C9A2B3762E951A.roa
File: 30F7B874C92711EFA1C9A2B3762E951A.roa (raw, json)
Hash identifier: 10z8WoWEQpvkD7/iC1+WgGgqxAN9XUzs2x1gSIliGQM=
Subject key identifier: 61:A2:8D:E2:CC:97:29:BD:BD:9A:D1:B8:B6:E2:53:3A:A0:66:7B:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01335D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F7B874C92711EFA1C9A2B3762E951A.roa
Signing time: Thu 02 Jan 2025 16:32:43 +0000
ROA not before: Thu 02 Jan 2025 16:32:40 +0000
ROA not after: Mon 13 Dec 2027 16:32:40 +0000
asID: 17561
IP address blocks: 154.222.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78685 (0x1335d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:32:40 2025 GMT
Not After : Dec 13 16:32:40 2027 GMT
Subject: CN=6776bfab-fcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:a6:be:dc:31:e0:92:41:fb:c6:ac:26:5a:
b6:df:8c:42:1c:c0:76:88:00:8e:7c:f8:df:89:15:
8c:96:77:8d:77:0a:8c:cc:90:e4:79:82:94:23:b3:
e6:19:78:a8:a2:dc:53:3b:1b:97:ab:e5:7b:53:09:
57:2f:23:c7:bf:c3:60:a7:86:64:2d:59:6a:6b:b9:
d3:27:71:5a:4c:e1:b4:b1:e2:87:0c:aa:97:69:1f:
66:6d:f9:cc:e7:20:7e:e8:ff:a0:45:92:a4:62:6a:
d4:19:59:59:b6:be:54:8f:85:68:cc:4e:e4:b4:b4:
51:3f:ae:21:ba:59:db:91:28:1e:bf:f4:1e:2f:52:
32:ff:83:a9:41:db:79:d8:95:72:9a:bb:3c:bc:79:
c5:1f:31:da:d0:d8:11:ba:a8:b1:e9:a6:c9:fd:d5:
b1:3a:51:9c:e7:51:d4:52:57:27:42:fb:23:f5:04:
b9:95:90:b2:30:fa:13:12:a2:c5:3f:6c:b0:ba:be:
12:6c:74:27:4a:91:1b:ff:da:c9:13:1e:71:4c:7b:
98:f6:24:fe:32:2c:f4:be:66:e9:04:f2:9c:4a:f6:
89:04:4d:3f:28:76:f2:05:79:00:14:65:30:93:86:
ff:7b:cc:7f:3c:cd:e6:38:c8:b7:69:46:a4:a3:18:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A2:8D:E2:CC:97:29:BD:BD:9A:D1:B8:B6:E2:53:3A:A0:66:7B:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30F7B874C92711EFA1C9A2B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.121.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c6:f2:69:ba:08:c3:1c:6d:af:6d:53:b9:89:8c:b2:35:4e:
eb:4d:3b:57:1d:c1:10:7c:25:fd:df:bf:b2:9e:22:00:c9:a4:
cc:0e:bc:f1:cc:4f:5b:8a:04:ea:d5:a8:0b:bc:92:02:cb:71:
a9:a3:0c:4b:5d:10:6f:21:57:08:dd:d3:1e:c9:5e:6d:d4:48:
ae:96:47:66:3b:45:d1:c0:06:bd:6e:21:5d:6e:64:0d:53:9f:
39:b2:e2:73:ce:33:12:5d:3b:29:fd:1c:bb:36:6b:93:ca:61:
60:3d:7e:a8:20:8a:43:98:c6:cd:9d:de:7e:c9:35:61:d2:ba:
5f:e7:8a:e8:28:d9:eb:14:f4:70:fa:95:20:ca:36:4b:64:98:
5e:9f:bb:b4:87:33:b0:67:c3:67:b4:bb:a4:8e:b8:ed:4b:dd:
81:ce:61:20:09:a5:1e:e0:40:1d:3a:ef:79:1a:9e:19:d2:90:
46:99:71:43:eb:3d:73:62:d3:b1:91:ee:7c:99:60:39:14:e4:
fb:a7:c8:5a:7a:2c:e0:02:d2:27:ec:96:81:d0:d1:96:e1:5d:
91:3c:07:5c:1a:4f:46:95:94:86:6d:3b:9c:07:cd:eb:3f:6d:
54:85:00:0c:37:da:84:f3:50:b0:9c:0d:49:8a:9f:16:4e:1f:
8f:3f:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:40 2025 by rpki-client