Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D24D00F47711EF9228FC47762E951A.roa
File: 55D24D00F47711EF9228FC47762E951A.roa (raw, json)
Hash identifier: WaxtdnhEhBiEhldG+ml0lVokxPTyuWKZmA0TcZINZzA=
Subject key identifier: 33:5F:8B:A2:23:61:03:8C:00:07:64:AB:8E:BF:C5:8E:B1:94:7F:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01659B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D24D00F47711EF9228FC47762E951A.roa
Signing time: Wed 26 Feb 2025 19:24:45 +0000
ROA not before: Wed 26 Feb 2025 19:24:41 +0000
ROA not after: Sat 19 Feb 2028 19:24:41 +0000
asID: 17561
IP address blocks: 154.218.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91547 (0x1659b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:24:41 2025 GMT
Not After : Feb 19 19:24:41 2028 GMT
Subject: CN=67bf6a7d-f5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:c5:ac:55:75:58:a1:67:b8:33:f0:70:6c:
b4:c4:1c:87:3d:14:fb:0b:2f:1e:a9:6b:37:1b:c8:
f3:6a:ce:02:03:84:1c:6e:85:fc:52:05:ab:ca:ae:
ce:58:50:56:59:ec:c4:82:a6:d7:41:ae:e9:2d:1c:
da:ea:27:d8:ad:d7:88:35:ae:02:05:33:eb:9c:c0:
8f:88:16:58:1f:a1:1b:01:83:27:ec:d7:c8:44:dc:
45:34:36:56:b6:69:1d:80:79:5e:36:a0:90:86:ce:
26:bc:ae:2b:0e:83:d7:63:24:14:9a:0f:d6:54:aa:
a2:a0:c9:c8:5d:86:9a:b2:3a:24:1d:99:75:1f:42:
f7:31:d6:f7:5a:56:0f:5f:64:5f:e3:9e:79:b6:89:
0a:d9:23:92:ca:bf:e0:e9:52:fa:a4:87:6e:e0:18:
75:15:8c:b5:c6:3e:18:58:f6:59:cb:7d:64:c8:9a:
53:cf:a8:e3:73:84:4f:72:3a:c9:e6:86:6e:c9:59:
c3:b0:b4:25:60:09:e7:be:16:c1:f9:92:48:7e:89:
4f:9f:80:a2:a4:26:85:26:47:53:27:a3:12:df:ed:
d3:9a:2d:8b:e3:a6:71:23:74:38:53:51:f9:b1:5d:
6a:6b:ee:86:0f:3b:3c:1c:82:6f:ee:40:4f:2d:1a:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:8B:A2:23:61:03:8C:00:07:64:AB:8E:BF:C5:8E:B1:94:7F:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D24D00F47711EF9228FC47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.43.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c5:0b:d2:ee:9a:50:a5:f9:f6:26:c5:c4:09:85:a6:8e:8a:
d8:80:c2:65:2b:a8:23:d2:d3:5c:6e:76:ca:12:0f:d4:d2:54:
6a:e2:4e:90:1a:47:a9:5c:97:dd:b0:36:12:0f:c8:fe:e0:b5:
1e:72:d8:a1:58:4b:ee:60:05:ba:1d:50:90:3a:50:66:d7:cc:
ad:d5:c5:81:8c:25:18:d8:2c:bf:46:59:b8:57:09:b3:81:e0:
50:03:d3:24:03:3c:d8:0a:b0:7a:2a:d6:43:c1:e4:bc:62:3e:
d8:59:dd:e2:6b:3a:ca:04:06:21:44:ba:6e:ac:69:4e:cf:aa:
b9:36:07:f6:fd:94:01:12:38:a0:e1:fd:e1:d6:89:6a:c5:2a:
65:e9:de:82:9f:53:b8:50:9e:5f:94:40:eb:bb:b8:32:38:5a:
2f:6a:4c:1c:f5:3a:cb:c6:7f:fb:93:08:54:5a:50:d0:2d:db:
82:88:3d:29:35:f7:cf:8e:6e:e0:04:2a:9d:ae:8b:fe:5f:f8:
92:b6:75:e3:ca:26:03:9f:84:76:b5:2e:39:1d:40:1f:31:1a:
3c:11:87:65:4c:33:75:12:90:ba:e3:01:d9:c8:e8:97:ea:04:
29:dd:2d:ae:cd:ca:be:09:dc:0c:53:3a:80:29:57:9f:49:fd:
db:3d:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:31:00 2025 by rpki-client