Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B49E2AC91711EFB34B0750762E951A.roa
File: 47B49E2AC91711EFB34B0750762E951A.roa (raw, json)
Hash identifier: 0IUteUrmc4xqr5cF6vBoBnW3tDi21o1ZwGSpRkgYaeA=
Subject key identifier: FA:02:80:17:67:7E:52:C9:11:86:D8:0B:2C:74:EE:A7:81:4A:0A:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B49E2AC91711EFB34B0750762E951A.roa
Signing time: Thu 02 Jan 2025 14:38:50 +0000
ROA not before: Thu 02 Jan 2025 14:38:46 +0000
ROA not after: Mon 13 Dec 2027 14:38:46 +0000
asID: 17561
IP address blocks: 154.221.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78555 (0x132db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:38:46 2025 GMT
Not After : Dec 13 14:38:46 2027 GMT
Subject: CN=6776a4f9-b8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:b8:ab:3a:00:1f:ef:a9:0b:80:96:52:da:
4f:ca:0b:ee:86:d9:c8:dd:dc:2b:5b:66:31:c5:51:
a2:0c:e4:11:db:c2:34:2b:ba:8d:56:34:08:5a:a8:
3d:3e:a5:3e:a4:8d:29:a4:ed:10:fb:47:c7:f3:81:
45:ff:06:0f:ce:22:51:07:02:fa:23:ac:d2:18:ee:
17:d3:95:24:09:b4:d2:67:b2:82:64:cd:c3:8b:dd:
b5:56:68:89:4e:ca:51:a4:66:73:61:0b:cf:97:52:
cf:27:9b:7d:c5:25:7e:6b:5a:25:9a:92:43:3b:87:
fc:0e:d5:dc:65:f2:ba:a2:8a:8e:46:aa:13:9f:1a:
8b:a3:b5:a2:26:2c:a5:1e:a9:d1:ac:75:1b:91:82:
70:06:6c:f6:ff:f2:05:d7:09:1b:7f:a9:4d:14:8c:
dd:2a:15:f7:fd:0c:83:79:90:c4:9f:37:df:95:40:
48:89:5b:62:71:92:db:da:ee:f3:90:25:f1:be:8d:
dd:3e:52:5a:18:c2:1f:6c:6d:54:e7:93:75:68:c3:
79:e4:57:c7:70:1a:48:73:8f:5c:06:c0:a3:cd:62:
24:89:4d:d6:07:5f:6f:b3:54:9a:f2:6b:2a:f7:16:
25:f2:7a:e9:eb:e9:79:37:63:33:43:4c:d8:c9:ba:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:80:17:67:7E:52:C9:11:86:D8:0B:2C:74:EE:A7:81:4A:0A:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B49E2AC91711EFB34B0750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:46:59:6a:ea:e6:80:b9:a1:3d:a5:81:dd:35:d9:a4:44:10:
99:36:cc:e2:c9:47:81:fb:90:cc:b2:11:62:4b:58:e8:f3:1b:
16:9a:62:1a:63:e2:ea:2a:83:f4:9a:f5:48:f1:8e:93:35:7c:
e7:f0:83:fb:47:af:da:7b:c4:8e:bf:8e:19:3f:8a:3e:c7:d0:
dd:37:1a:85:4b:6a:65:2f:46:47:d1:8e:b9:54:3a:e5:98:4d:
83:e0:b4:9f:f2:f9:0e:77:4f:5a:cf:23:19:76:ba:52:6a:50:
98:3c:f3:26:69:2d:2e:89:01:ad:92:e1:3f:48:c1:d8:f8:26:
64:29:e3:cb:2e:70:16:79:a9:86:93:7c:82:a0:4e:3b:d8:aa:
17:6d:67:ad:b7:0a:80:1f:e3:2d:da:0d:fc:48:10:6c:72:d6:
f3:95:9f:b5:65:8e:ff:93:54:fb:b5:18:8a:3f:5b:f8:5f:58:
3e:07:8a:40:a7:de:7e:66:c7:49:7c:de:15:b2:70:51:00:94:
db:bc:99:7d:54:07:a8:b6:09:99:1d:35:4b:7d:b0:d0:ad:c3:
b4:4d:38:7e:42:b4:ca:36:d4:62:7e:19:68:f8:82:01:22:aa:
43:bf:66:84:39:92:ce:c1:71:e6:5b:2c:98:1a:14:cb:03:3e:
58:36:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:01 2025 by rpki-client