Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A601264F2E511EF8283747F762E951A.roa
File: 5A601264F2E511EF8283747F762E951A.roa (raw, json)
Hash identifier: KuQKTxFj4wJiWrrYOQK66MQZwlo7aYzCG6ynoMmRhrw=
Subject key identifier: 15:D3:DD:BB:CE:B6:56:A4:44:E3:94:34:54:38:11:ED:0E:F7:A8:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A601264F2E511EF8283747F762E951A.roa
Signing time: Mon 24 Feb 2025 19:27:15 +0000
ROA not before: Mon 24 Feb 2025 19:27:11 +0000
ROA not after: Mon 07 Apr 2025 19:27:11 +0000
asID: 138915
IP address blocks: 154.223.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89338 (0x15cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 19:27:11 2025 GMT
Not After : Apr 7 19:27:11 2025 GMT
Subject: CN=67bcc813-5ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:12:5b:9c:17:0e:2a:e8:65:f6:d3:1c:a1:
d2:34:74:01:aa:26:6f:38:5b:da:53:33:36:f2:26:
e8:0d:e7:7d:84:a9:e0:29:66:14:3a:bc:dc:16:5a:
78:e4:e1:30:88:da:c5:65:ad:1f:ba:bf:a6:d3:09:
0c:75:b8:c2:59:3a:ad:6c:a1:69:8d:79:0b:b8:8b:
bf:47:c4:55:09:36:97:f6:b8:e0:89:5e:e0:df:e4:
86:54:cd:fd:9d:b7:44:70:82:92:d3:a3:68:44:59:
cf:56:5a:a8:f4:ee:61:74:37:4d:3f:d7:62:6d:17:
c7:52:74:bf:20:60:e7:15:18:4d:c3:e5:f0:b1:72:
e7:62:0e:da:08:be:76:44:77:2c:3c:35:9e:e1:8a:
e3:b8:d0:3d:ad:bd:f0:70:37:b1:92:83:70:8c:d1:
e2:3f:15:0d:64:e4:c9:67:a7:a2:4f:01:5a:53:51:
31:9e:68:72:91:21:e5:42:d9:63:3a:5e:7c:0e:af:
a3:a7:ce:cc:78:91:2a:34:f1:a6:db:f4:e9:a8:21:
2a:c4:46:f0:68:df:d4:e7:72:3b:aa:c1:1a:f9:65:
29:55:c1:a5:5c:ea:ad:6b:79:a8:63:b2:ba:10:b4:
65:37:33:61:95:e9:90:ed:5a:27:8c:4a:64:8c:cb:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D3:DD:BB:CE:B6:56:A4:44:E3:94:34:54:38:11:ED:0E:F7:A8:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A601264F2E511EF8283747F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.48.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e8:eb:64:69:c2:df:13:0b:dc:be:40:43:14:43:5c:1d:7f:
93:49:22:c4:11:93:65:f0:a2:16:32:f7:9f:90:93:e5:a4:f8:
2b:85:d8:a0:b4:12:ee:2a:00:af:d9:e8:3d:29:d5:94:15:31:
29:8e:9b:00:90:d6:52:5d:78:8b:28:06:e0:b4:2e:39:95:a3:
4d:12:43:d6:9d:82:79:7c:1b:b0:fb:e3:2d:eb:f4:15:a0:79:
2c:f4:39:cf:ab:d7:7d:9a:6a:aa:b0:9c:7b:9c:31:7c:89:ab:
e9:1e:95:9c:f9:29:5f:b3:e1:54:35:8f:f3:77:38:38:ad:cb:
eb:59:b7:e0:4e:18:e1:b1:43:5f:92:e1:e0:d9:7a:8e:d2:b7:
37:64:89:dc:76:d3:47:6b:58:7a:59:e1:1a:de:75:3a:79:fb:
bc:d3:84:92:48:15:9d:aa:83:d6:e5:b8:5e:0f:27:b1:b0:a3:
98:1d:92:84:61:fd:26:35:e8:8c:02:e7:24:c5:11:e9:ad:89:
54:59:31:dc:77:f0:94:82:49:9d:df:57:d3:4d:46:21:bb:8d:
de:98:bc:a0:0e:21:6a:af:df:79:37:b1:66:15:01:f6:d4:05:
01:ab:8d:69:93:dd:41:9b:54:8e:1f:0e:e7:ad:8f:22:a9:75:
a8:3e:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:13 2025 by rpki-client