Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368F1F7AC90E11EFB78B5E95762E951A.roa
File: 368F1F7AC90E11EFB78B5E95762E951A.roa (raw, json)
Hash identifier: Eg+FSKe5FUcrG/DXX/J8sTMad9K5cumVfA0FI4wW04o=
Subject key identifier: 3A:5B:B9:3B:4E:8B:CC:D7:31:51:98:F3:16:CF:36:18:1F:3E:15:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013291
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368F1F7AC90E11EFB78B5E95762E951A.roa
Signing time: Thu 02 Jan 2025 13:33:55 +0000
ROA not before: Thu 02 Jan 2025 13:33:52 +0000
ROA not after: Mon 13 Dec 2027 13:33:52 +0000
asID: 17561
IP address blocks: 154.221.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78481 (0x13291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 13:33:52 2025 GMT
Not After : Dec 13 13:33:52 2027 GMT
Subject: CN=677695c3-5309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:35:a4:b1:66:96:d8:05:9d:bf:b7:ca:f6:
54:b5:de:25:29:3b:3c:7c:20:5e:d8:65:a3:af:89:
64:cd:e1:04:9a:ad:68:f9:47:37:4c:cb:8d:de:fd:
67:a9:80:ed:8a:fd:9a:30:17:bd:9c:ac:b0:70:73:
86:0a:f5:4f:01:bb:93:bb:54:b2:ee:e8:b8:dc:a6:
ae:21:59:6b:c1:a8:c4:e9:a9:82:83:99:64:a7:2a:
ad:59:2d:30:39:75:4e:4b:7f:2a:96:4a:53:a3:b6:
48:c6:6c:e7:90:c0:e1:73:fe:ef:e1:f7:fb:5e:05:
dc:c1:c3:36:7d:02:7e:85:77:93:c6:d1:6d:76:83:
51:7a:91:53:78:2e:2a:f1:5c:1e:f5:ff:e8:bb:db:
6f:b8:c8:6a:ab:3c:20:15:3c:83:8b:90:ab:2a:c3:
d2:9d:04:ef:56:f1:67:09:00:7b:a9:38:6e:ae:7c:
2a:82:51:6b:3c:28:58:2e:dc:6f:1b:ac:06:ef:90:
f8:79:77:4a:69:f2:27:3a:61:d9:0f:d9:18:d5:62:
09:3c:2d:13:d0:7d:ca:d2:fd:3e:04:41:8d:3d:27:
a3:5d:41:20:55:2b:60:b8:d2:0b:01:f6:7b:5a:fa:
d0:4d:91:2b:55:55:58:4d:56:bb:0c:ee:33:ce:ff:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:B9:3B:4E:8B:CC:D7:31:51:98:F3:16:CF:36:18:1F:3E:15:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/368F1F7AC90E11EFB78B5E95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.213.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:d2:18:da:88:ef:ff:cc:0b:75:32:41:01:4c:d3:e8:65:b7:
c3:6f:82:4f:ac:0e:96:38:b7:cf:8f:54:dc:93:74:83:2d:2a:
f7:75:f9:ea:cb:2a:fd:c6:ca:ad:40:4b:ba:c5:dc:38:55:a5:
0e:3a:e8:54:bc:3e:d6:c3:aa:4e:e2:a0:7d:4d:b9:d0:10:57:
d9:0e:06:e6:a1:04:82:d7:8d:e9:9b:e9:65:56:08:25:71:35:
68:0f:f5:e7:ab:d2:b4:2e:d4:1a:06:d9:79:b1:09:71:ca:84:
4f:7a:bf:53:02:7c:0c:ee:3d:3c:83:55:9e:d7:f8:49:93:56:
a3:e8:5e:3c:f8:13:45:f8:0a:0c:77:c1:a6:ca:56:15:fe:6d:
39:be:75:65:2f:35:97:de:dc:7e:4a:c0:75:1f:32:d5:ca:61:
8f:d0:1e:06:2c:9e:77:cb:16:ba:ee:8d:0d:54:67:71:69:a6:
8d:e2:a8:d7:5c:61:82:49:3f:af:9c:bd:c8:b6:f6:d1:55:e5:
15:4b:4d:bc:97:cf:85:18:f1:d9:00:42:9c:14:c2:a1:e9:6e:
31:3b:f6:4a:e1:3c:57:11:93:25:03:3f:36:3f:85:02:fd:a0:
82:d0:c7:c1:c8:ff:5f:16:e9:0a:91:8d:63:46:78:6a:9d:3e:
a5:36:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:40:32 2025 by rpki-client