Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/453B7750F35A11EFB9E6CF9F762E951A.roa
File: 453B7750F35A11EFB9E6CF9F762E951A.roa (raw, json)
Hash identifier: TIWA967i28pXxn45wuWJsSl6ONhl2EDjOBHm8c4b/Rs=
Subject key identifier: 4A:02:14:F4:80:A6:3E:FE:CF:73:DF:6C:09:F2:DB:89:FE:C9:63:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/453B7750F35A11EFB9E6CF9F762E951A.roa
Signing time: Tue 25 Feb 2025 09:24:11 +0000
ROA not before: Tue 25 Feb 2025 09:24:07 +0000
ROA not after: Mon 07 Apr 2025 09:24:07 +0000
asID: 63139
IP address blocks: 154.223.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89598 (0x15dfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:24:07 2025 GMT
Not After : Apr 7 09:24:07 2025 GMT
Subject: CN=67bd8c3a-b517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:37:9e:d3:dd:02:49:f0:4c:ff:d6:f6:83:
cb:9c:8f:06:24:43:0f:1f:f0:4f:f7:d5:e5:90:29:
bc:b7:b3:b2:26:37:0b:d5:a6:e6:3a:33:17:6b:01:
63:79:a0:1e:a0:06:e0:d6:91:9e:26:25:28:85:ca:
dd:b2:d8:a6:88:01:87:ff:9b:62:40:fe:13:07:0f:
78:b2:73:59:5c:42:40:c5:ad:2b:c8:2f:c1:6f:0d:
4d:94:7e:61:72:08:e2:8e:b0:74:80:7c:04:91:a9:
e6:e3:26:3b:a2:26:1d:c5:6b:4a:3d:bb:2a:7e:61:
c6:0c:a7:0b:26:58:9d:3b:bb:52:b3:81:47:28:30:
29:a3:a2:1e:c6:13:46:66:96:54:2a:c2:3d:31:2f:
de:d9:e1:0b:1a:c6:84:f3:a8:c4:a4:4d:fc:de:ac:
bf:40:90:0b:e7:2a:d5:c7:88:54:69:4b:b8:66:05:
34:7f:8f:c7:09:29:06:10:56:70:28:a1:ec:58:9a:
c5:04:0a:9d:28:dc:07:62:f6:c4:19:4f:8e:5a:5d:
77:19:45:cc:58:e3:c3:a3:57:d1:19:cd:e3:fa:16:
84:b2:70:54:9a:13:ff:4f:67:e5:5e:64:de:48:4d:
2b:53:7f:d8:33:19:af:73:54:d0:f2:f1:39:61:b5:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:02:14:F4:80:A6:3E:FE:CF:73:DF:6C:09:F2:DB:89:FE:C9:63:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/453B7750F35A11EFB9E6CF9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:02:5a:54:9f:3e:c7:7f:f7:e0:e9:e1:4f:6f:55:da:79:87:
76:0f:e1:74:71:86:10:5e:92:1d:d7:14:84:87:d4:10:8b:37:
b3:39:a5:f0:55:71:85:af:1f:fe:45:50:d9:70:ac:01:30:71:
10:30:c5:c1:ca:89:5e:1a:1f:9f:34:39:16:ef:a5:7a:0b:4b:
c7:21:8b:e8:2a:38:d2:38:0b:48:21:03:cc:e8:0f:d2:cf:d7:
06:3e:b4:c7:16:a4:94:90:3b:9e:00:12:91:69:56:1d:ae:76:
47:94:a8:4f:e5:10:c4:a8:23:51:06:d0:8f:76:07:2e:fa:ef:
38:b7:44:b8:ff:8a:98:0e:fa:20:40:0a:de:b5:5f:71:f7:b5:
da:b4:45:44:f1:5f:23:0d:16:24:f2:90:2b:c4:b8:ff:9d:3f:
8c:ed:03:b4:82:8e:d4:ba:a0:95:ec:4e:1d:1a:06:00:95:1e:
e3:aa:05:42:45:a8:3c:ac:e1:ca:25:57:91:6c:00:4a:f0:a5:
d6:49:a9:ed:36:56:bb:2c:c1:8e:1b:22:75:24:6d:12:81:e5:
13:e4:0f:1f:c8:72:f3:72:cd:4b:57:45:49:b5:61:fb:ed:63:
cd:1c:2d:9e:c7:0b:b4:70:ca:5b:9a:ed:2e:b6:d5:b4:12:c5:
e0:06:bf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:05 2025 by rpki-client