Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F4D3376E31211EFA546C661762E951A.roa
File: 4F4D3376E31211EFA546C661762E951A.roa (raw, json)
Hash identifier: yVjiftY4ehVrt+YNUpTQnmbi5wVuKUCBV5AmDXWOLxo=
Subject key identifier: D6:31:3F:CE:A2:B2:66:7B:CA:2B:4E:A7:69:9F:D1:C9:D5:29:F8:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01510F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F4D3376E31211EFA546C661762E951A.roa
Signing time: Tue 04 Feb 2025 16:08:45 +0000
ROA not before: Tue 04 Feb 2025 16:08:41 +0000
ROA not after: Wed 30 Apr 2025 16:08:41 +0000
asID: 18229
IP address blocks: 154.210.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86287 (0x1510f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:08:41 2025 GMT
Not After : Apr 30 16:08:41 2025 GMT
Subject: CN=67a23b8d-0d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:ff:f0:fa:22:c3:3b:af:b2:75:a8:50:17:
d7:b9:59:6d:cb:5e:12:8c:fb:8e:8a:30:c2:a5:09:
ec:d9:e2:a7:7d:99:41:a5:41:57:e2:9b:f1:c3:ee:
f9:a1:e5:c5:08:c1:34:10:e1:14:1c:6a:fc:7c:6b:
cd:1f:38:69:b0:0b:4d:95:51:5e:6e:18:a8:00:f6:
d5:d5:30:b5:b5:58:73:ca:3c:32:e2:60:43:cb:b2:
aa:80:74:7f:6e:e7:51:ca:2c:37:8e:d9:e3:4c:e2:
a0:ae:98:10:48:0d:01:ba:0f:de:ca:ea:de:84:fd:
1b:a5:60:c9:5a:27:42:4b:c8:c9:72:5a:fa:3f:63:
ff:1d:5f:d2:6f:cc:dc:e9:d6:c9:ba:47:61:f5:ee:
d6:b7:59:62:bf:14:84:0c:45:31:d5:77:cc:2e:09:
4f:63:89:74:c4:7c:7f:09:1e:2d:2c:e1:02:c2:1a:
47:5c:69:31:aa:66:d8:cd:f5:dc:b3:ae:05:60:4d:
b8:a9:42:de:c5:31:9d:a1:14:e7:6c:b5:87:b5:fb:
c7:5c:59:a1:e3:89:8e:8e:33:e2:c0:f6:d2:b6:fe:
99:57:4f:02:6b:3f:0a:9a:94:e8:b5:57:92:3d:b3:
5b:df:ee:48:95:09:78:0a:97:74:2f:0f:3a:3e:da:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:3F:CE:A2:B2:66:7B:CA:2B:4E:A7:69:9F:D1:C9:D5:29:F8:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F4D3376E31211EFA546C661762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.158.0/24
Signature Algorithm: sha256WithRSAEncryption
66:4a:ce:b1:e9:47:f7:19:08:a6:41:ae:80:11:b2:24:09:62:
8f:dc:b5:4f:dd:fa:71:b0:ea:ed:74:40:39:6a:01:76:5f:69:
f2:4e:8d:45:17:be:21:b1:f8:ab:75:17:bb:64:f6:fe:f7:22:
d5:a2:7a:4e:03:dc:ea:17:e9:f2:ac:cf:ae:6b:be:61:80:a6:
c2:61:dd:9e:88:14:c7:e6:b5:4b:78:28:bb:1a:3c:e3:3f:b3:
6f:e8:ca:64:40:f9:28:c8:ff:ae:29:b8:fc:8c:78:57:72:64:
23:2e:5e:cd:ba:e1:ff:1c:4d:34:3b:51:fb:5c:e0:ef:6c:c1:
01:02:1b:89:18:ef:6f:ad:27:62:59:95:9e:fc:43:77:45:a5:
bc:ab:df:be:a6:f0:f6:01:3c:8f:bd:93:1f:04:e7:51:5a:1a:
ac:3f:c4:ff:4e:4f:98:c2:f4:55:0b:08:b6:73:e1:7e:87:9f:
dd:7d:51:88:ad:59:98:a5:d4:8f:9c:f8:89:46:02:22:fa:50:
2b:18:82:af:5e:ec:0d:fd:35:62:c4:ff:76:2a:44:1d:6c:93:
4f:e8:f6:aa:06:c9:55:2a:19:3c:ae:09:73:b1:31:47:8c:1d:
13:b1:17:80:cf:a9:f9:7a:9a:3d:8a:9e:15:8a:7a:fa:a5:61:
74:fe:ed:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:02 2025 by rpki-client