Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/355E10F2CE4F11EFA1204F91762E951A.roa
File: 355E10F2CE4F11EFA1204F91762E951A.roa (raw, json)
Hash identifier: Pmz8SSiv4gZVNn3ovdk9aSLmfZMBZKErc0ckhjUG1cE=
Subject key identifier: 68:79:15:DA:76:A6:4B:E7:D4:62:29:93:BF:7F:72:EF:84:FB:4B:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013838
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/355E10F2CE4F11EFA1204F91762E951A.roa
Signing time: Thu 09 Jan 2025 06:01:47 +0000
ROA not before: Thu 09 Jan 2025 06:01:42 +0000
ROA not after: Fri 09 Jan 2026 06:01:42 +0000
asID: 17561
IP address blocks: 154.220.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79928 (0x13838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 9 06:01:42 2025 GMT
Not After : Jan 9 06:01:42 2026 GMT
Subject: CN=677f664a-d03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:2b:09:60:58:7f:fb:f4:a6:be:a0:36:d3:
03:96:c7:bf:4c:9b:51:db:26:8e:24:d5:09:ee:ed:
e4:86:3a:61:d1:1c:79:ea:a6:54:d7:9d:8d:60:ea:
fc:02:a4:10:bd:c9:b4:43:b3:a0:a2:d5:f3:1a:c7:
bd:0c:d6:aa:4d:65:3f:4f:99:4b:ab:84:f0:c8:47:
49:69:0c:45:03:c3:22:8a:0d:14:74:96:c0:d3:af:
0d:45:f3:c5:06:9f:9a:3d:78:87:c5:2b:e3:b6:dd:
7b:b2:ba:9e:b8:5d:be:d6:5d:31:9f:49:38:55:63:
93:0e:5c:f6:8f:fb:05:f3:d9:7b:db:80:2c:7a:d2:
e6:9b:0c:08:ce:c8:2a:e2:86:e6:47:ee:28:88:f6:
60:7d:e3:29:71:b8:01:bb:cd:11:be:b4:a8:76:48:
8d:46:f1:77:f9:9e:de:d7:2a:b2:e4:03:b9:19:07:
f6:ef:d2:39:bd:bc:48:4c:84:20:f5:0c:36:fa:2c:
d1:ed:fd:21:9a:97:38:c4:8f:2d:fa:1f:52:31:d0:
02:95:3e:de:ad:20:a2:8e:4d:2e:ec:06:8c:27:fc:
8a:08:98:c3:c8:eb:75:3a:9b:40:ed:8c:ad:a7:06:
de:1a:db:ca:0d:a2:3d:c1:05:91:dc:9a:00:48:f2:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:15:DA:76:A6:4B:E7:D4:62:29:93:BF:7F:72:EF:84:FB:4B:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/355E10F2CE4F11EFA1204F91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.224.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:9d:79:54:6e:62:82:84:ef:d2:d5:62:d1:4b:30:a8:0c:7c:
e4:85:fb:77:5e:0a:cf:9b:aa:1b:d0:2c:18:28:11:a8:ef:db:
7a:2e:62:37:fc:9e:9b:05:ac:16:2f:10:23:83:e1:40:5f:76:
d9:61:a9:40:c1:38:dc:af:ce:fe:f5:69:59:76:69:27:1a:45:
55:53:5f:64:c3:cd:af:e5:e5:7a:e8:56:94:6c:6a:df:0b:d2:
83:2a:6e:a5:38:9a:c7:cf:f8:6d:72:ac:a7:2c:20:bd:d4:5e:
74:09:5c:c9:c0:65:9a:b4:90:87:e8:f1:47:f0:69:63:e1:e6:
31:04:ac:6b:0f:51:48:23:3b:90:d1:6b:7b:91:ee:e3:95:ce:
a5:da:bb:92:1f:40:08:6f:5a:97:10:d6:74:35:9e:56:44:46:
07:2c:8f:7e:ff:72:29:92:5f:db:a3:1e:e0:cd:7d:d2:a2:51:
d5:c0:6b:c3:db:7c:5a:c9:b2:89:8a:c2:e2:1c:32:37:62:c7:
1a:86:6b:98:cb:2c:47:7c:39:1b:3f:50:8e:99:e8:bc:78:03:
ec:4d:80:8a:f9:cd:18:cf:2a:c6:37:f3:64:1e:c6:71:cf:89:
1f:f6:ae:8d:d5:54:7f:b3:d7:2f:83:af:47:d6:07:16:b3:ac:
08:d7:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:02 2025 by rpki-client