Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52E9223AE31511EF806C8F74762E951A.roa
File: 52E9223AE31511EF806C8F74762E951A.roa (raw, json)
Hash identifier: CLesHnxJ4HhjDTE5aZ5lRcgKxtn0fdNCWhh6ZJ8Si5k=
Subject key identifier: B6:47:83:70:23:EE:60:E6:26:53:F4:8E:6B:DA:ED:62:BB:FC:AD:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015121
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52E9223AE31511EF806C8F74762E951A.roa
Signing time: Tue 04 Feb 2025 16:30:20 +0000
ROA not before: Tue 04 Feb 2025 16:30:15 +0000
ROA not after: Wed 30 Apr 2025 16:30:15 +0000
asID: 18229
IP address blocks: 154.210.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86305 (0x15121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:30:15 2025 GMT
Not After : Apr 30 16:30:15 2025 GMT
Subject: CN=67a2409c-72db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:ed:4f:51:73:6d:e5:f0:40:8b:3c:14:32:
9d:cb:98:70:18:b4:0a:29:c8:70:28:eb:35:81:58:
e0:99:62:f5:4b:61:87:60:fb:c4:e0:c1:d6:71:e5:
23:eb:20:6a:1d:5c:fe:e0:2b:bd:4a:35:f2:5a:84:
8e:0e:fc:fe:e6:50:2f:d3:48:3f:41:b7:5c:22:1c:
e0:dd:d7:53:0c:d9:aa:02:af:e0:84:04:7e:79:09:
48:a6:1b:f1:b5:f4:56:a1:52:26:ed:88:61:50:c8:
74:f7:66:14:2b:6a:88:2c:43:8b:70:a5:c1:0b:58:
1a:cc:17:4a:b4:7b:a8:bf:a4:e6:2c:3a:f6:74:ff:
52:63:5e:41:1e:97:d1:3a:bc:09:fd:73:43:2f:c8:
f9:3a:be:fd:8a:a2:fd:8b:c3:df:1b:3c:8c:5a:14:
b2:c2:90:19:ef:22:6a:25:d9:60:f3:70:9c:0b:f8:
29:ea:c6:4c:cb:6b:d4:df:91:05:b7:d2:e9:0f:89:
7e:81:c3:c6:2a:ef:2e:2d:04:39:dd:88:c3:62:50:
cb:f6:fc:11:fe:ed:bd:08:00:c2:39:8b:e1:a2:3a:
6e:01:67:96:75:13:b7:8f:65:88:f5:39:06:48:25:
2e:15:f2:79:d3:53:65:ad:a8:ee:a1:64:cc:9c:ec:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:47:83:70:23:EE:60:E6:26:53:F4:8E:6B:DA:ED:62:BB:FC:AD:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52E9223AE31511EF806C8F74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:12:ea:5a:2a:3b:c2:7b:53:e8:30:ad:f8:73:b9:d9:15:19:
af:0f:fe:4e:ae:96:db:f1:6b:77:da:af:21:16:87:4f:90:3a:
28:aa:0a:0c:ca:8a:12:1a:ba:9b:5f:5d:a7:e6:60:b6:3a:53:
52:cd:31:55:eb:73:6d:fb:80:90:69:68:cd:5f:a9:48:d3:17:
9e:5a:d9:81:ee:3f:c9:43:76:1e:4c:48:96:ca:9d:5a:6d:70:
b3:fc:e8:22:27:08:00:82:0d:3a:5b:e5:14:48:5c:3b:2a:72:
a7:03:d9:34:7c:5f:6b:b7:bb:1a:55:68:7f:19:7c:e6:2b:46:
20:6d:cc:a2:ed:8f:51:6f:5c:e2:4e:ef:41:ed:98:61:d4:a0:
ec:65:27:98:55:53:f8:9b:db:15:7b:4e:44:64:61:9f:b4:48:
cf:8e:5f:dc:d5:4f:95:e1:c9:e1:66:c3:e5:37:db:3b:8e:06:
d7:3d:cd:9a:a4:e0:4f:56:43:28:43:78:ed:a1:96:f1:96:a2:
d1:7e:45:aa:9f:51:6f:58:e5:83:31:22:e9:ea:7e:0a:2d:5c:
a0:0f:d0:f0:54:fa:c9:ba:b0:be:81:b2:b1:10:31:0d:1d:53:
a9:97:e5:59:c9:1e:fb:b5:48:7b:eb:c4:81:b7:2c:bc:0e:0d:
50:b2:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:55:47 2025 by rpki-client