Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C7B48AC90A11EF84CB327E762E951A.roa
File: 52C7B48AC90A11EF84CB327E762E951A.roa (raw, json)
Hash identifier: xaJ5GGxfgDYYd/hfmgt4E+OlpIvxh+qPmhU7DYTy3js=
Subject key identifier: 46:16:F4:8D:D8:87:BE:C9:90:B7:E1:DE:44:D4:BC:A1:A4:FB:1B:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01328D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C7B48AC90A11EF84CB327E762E951A.roa
Signing time: Thu 02 Jan 2025 13:06:05 +0000
ROA not before: Thu 02 Jan 2025 13:06:01 +0000
ROA not after: Mon 13 Dec 2027 13:06:01 +0000
asID: 17561
IP address blocks: 154.221.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78477 (0x1328d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 13:06:01 2025 GMT
Not After : Dec 13 13:06:01 2027 GMT
Subject: CN=67768f3d-9ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:7c:0b:82:ce:8f:fa:1e:4e:df:00:d0:7d:
2e:19:ef:e1:57:80:73:bd:7a:5c:b5:25:16:d5:af:
57:0c:17:71:98:3d:9e:56:8b:4e:a1:3e:b4:16:01:
30:96:1d:2d:b4:4f:2d:57:16:da:c9:e6:29:c1:40:
f4:ea:e2:fb:09:86:48:e4:d3:76:c0:e7:ce:55:b2:
09:83:92:49:c2:2e:eb:5f:60:60:8b:84:95:a9:17:
25:ea:a3:73:aa:09:38:3f:6f:eb:1b:39:8e:37:9e:
4f:bf:cc:fb:2f:ad:86:b4:71:da:2a:2a:98:fd:17:
06:41:5c:86:88:12:8d:ef:0c:3c:cc:15:eb:4f:14:
ed:63:e4:a1:16:d6:24:3f:b2:67:66:61:1e:b4:6e:
15:e9:6e:89:d8:49:2d:2c:10:f0:84:6f:ad:57:61:
db:67:2e:9e:b1:b6:37:7e:49:0d:fe:33:db:ae:fc:
a5:d5:73:1c:b3:a0:6e:2c:16:f4:8e:3c:cb:ce:8a:
a2:84:93:13:3b:7a:e5:fd:3d:0a:12:e4:c4:a6:76:
03:03:50:63:f4:d4:dd:bf:e0:a1:04:3b:79:58:a0:
8b:59:5a:6a:0d:2c:93:d7:7c:d0:03:f4:97:63:35:
ce:cc:07:b8:85:7b:d2:c3:b7:8b:cc:d5:9d:3d:05:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:16:F4:8D:D8:87:BE:C9:90:B7:E1:DE:44:D4:BC:A1:A4:FB:1B:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C7B48AC90A11EF84CB327E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.211.0/24
Signature Algorithm: sha256WithRSAEncryption
09:68:19:80:3c:b4:bb:68:80:cb:3f:3a:77:20:a4:60:4a:d2:
56:2b:96:aa:d2:91:7b:1a:b1:ec:95:79:73:c0:68:51:c1:07:
51:dd:f9:99:aa:19:c5:97:21:60:79:4b:d8:c0:e0:42:de:f1:
db:15:bd:0c:19:00:8f:71:ff:56:fb:26:2b:91:09:76:60:24:
9e:82:ec:1e:6b:57:28:cc:f9:01:6b:d7:dd:38:1a:1f:3f:80:
17:15:7f:70:b0:7b:00:e1:9f:a2:c7:0c:b6:7c:b5:34:85:29:
00:89:75:d5:55:41:c4:70:83:c3:74:34:b0:5c:d1:23:96:8c:
97:c5:59:56:70:95:65:a7:16:a3:0a:92:bd:5d:7c:4e:ed:08:
d3:ca:14:3c:ee:06:09:39:12:89:80:4f:b7:a6:bf:6d:20:82:
2a:f0:0f:17:d4:22:bc:4c:a3:0e:56:9d:a6:5c:44:e7:07:e8:
b0:7d:25:45:cf:22:38:88:ef:78:cc:bd:ac:e4:5e:68:c9:b5:
c9:75:2b:9d:ec:27:33:78:75:17:f3:d9:65:c5:4a:11:23:b6:
04:b5:5b:f3:96:d0:46:30:d6:ff:3f:b8:b0:f1:ff:fa:3b:18:
36:a0:a2:b4:17:dc:b6:48:e9:61:c4:54:95:7a:10:67:f9:5e:
59:0c:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:30 2025 by rpki-client