Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57095A92E31011EF8D2E3354762E951A.roa
File: 57095A92E31011EF8D2E3354762E951A.roa (raw, json)
Hash identifier: c4bEZdSGVFlznEyy6SZcLH7VKjFY+slcIIyz9+zLjU4=
Subject key identifier: 98:F5:24:CA:AF:41:7B:30:CE:0D:09:FE:B0:CE:F2:25:17:17:51:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57095A92E31011EF8D2E3354762E951A.roa
Signing time: Tue 04 Feb 2025 15:54:39 +0000
ROA not before: Tue 04 Feb 2025 15:54:35 +0000
ROA not after: Wed 30 Apr 2025 15:54:35 +0000
asID: 18229
IP address blocks: 154.210.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86271 (0x150ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 15:54:35 2025 GMT
Not After : Apr 30 15:54:35 2025 GMT
Subject: CN=67a2383f-478f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:43:c9:11:67:9b:1b:bb:09:2f:dd:51:60:75:
cc:7c:fc:0c:93:ef:81:c8:64:49:fa:ef:de:ee:c2:
8a:f9:5b:aa:4c:8b:75:a8:9f:3d:d8:83:5b:4c:89:
c0:31:34:1a:89:09:87:3e:32:6f:fb:0c:dd:e2:63:
2b:f4:9f:fb:01:c3:6f:37:59:82:52:70:c6:21:39:
96:2f:ae:f8:26:0f:55:5d:2e:46:ad:41:40:73:96:
e8:83:86:c3:83:02:e7:7f:c5:ec:d8:3e:46:f5:b0:
3a:ff:65:aa:4a:c0:c1:88:70:7c:92:09:ef:7e:32:
e0:ca:47:d2:c8:38:bd:ad:bc:38:cc:5c:49:93:a7:
12:0b:1a:2f:9b:08:ff:50:83:4f:8b:41:5f:c6:27:
1e:26:ca:49:74:45:3c:68:f5:be:83:fd:7e:e8:2a:
f2:e7:9b:59:53:52:c1:52:c9:c0:40:40:55:36:b2:
0d:7b:a0:5b:62:71:c9:68:94:a7:21:f1:1d:d9:0d:
39:89:de:13:39:f3:9d:8e:66:94:cc:85:bf:e5:db:
9d:b9:cc:d5:7f:6d:d2:3a:e2:c8:13:ba:66:cd:0a:
9f:45:ac:6c:9f:6d:6c:c6:6d:36:c0:5e:1b:96:8f:
0d:be:52:14:3e:93:a9:b7:4c:55:38:0d:16:61:78:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F5:24:CA:AF:41:7B:30:CE:0D:09:FE:B0:CE:F2:25:17:17:51:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57095A92E31011EF8D2E3354762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:96:34:4c:a3:89:b9:12:ee:07:cc:71:ee:de:a4:51:66:9e:
7c:d6:b9:fc:58:99:7b:d9:29:16:ef:d5:01:6b:d2:0a:fa:92:
ae:27:89:a3:25:c1:bd:06:db:c7:20:40:a4:74:aa:72:10:ae:
a8:73:12:d4:ca:79:39:70:5e:e2:0c:bd:92:78:11:ff:e4:9c:
90:45:22:f3:6b:d2:58:f0:31:07:c4:6e:84:19:a4:ca:79:20:
90:6a:e5:cd:07:2e:06:8b:92:5d:3c:4f:c5:ae:b0:99:f7:71:
2d:d0:d3:2d:c0:36:04:57:f6:92:d9:dd:0c:f5:c0:ab:67:cd:
1a:6e:81:d0:37:50:75:8c:b0:c2:98:22:82:e0:77:5d:c3:0c:
37:e4:01:79:99:79:cb:74:a5:52:14:af:cc:82:fd:e4:c9:2d:
44:c2:a0:10:43:1e:db:63:37:e6:89:cd:b2:f2:83:36:be:ef:
2d:18:43:19:72:3c:cc:72:64:6f:d2:ca:d4:a1:c8:7b:18:38:
2e:34:65:29:7d:6a:24:93:aa:6c:9e:6a:0a:78:bf:6e:a2:63:
ba:5d:55:84:01:a6:34:0f:21:95:1e:0a:55:91:cc:b5:c9:d9:
8f:d4:96:91:04:aa:93:af:0d:ce:ae:08:5f:97:92:c6:dd:c8:
15:39:bc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:43 2025 by rpki-client