Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6244E450E66011EFA8913071762E951A.roa
File: 6244E450E66011EFA8913071762E951A.roa (raw, json)
Hash identifier: DOVBXLrlJMgQ3eLIcAydpQibdI3SaxeaJWGz1BMct/I=
Subject key identifier: BE:2B:88:BA:CD:3C:49:B5:E0:96:E6:D7:E3:A7:A3:BA:65:DB:4A:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0154B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6244E450E66011EFA8913071762E951A.roa
Signing time: Sat 08 Feb 2025 21:05:11 +0000
ROA not before: Sat 08 Feb 2025 21:05:08 +0000
ROA not after: Thu 04 Sep 2025 21:05:08 +0000
asID: 204770
IP address blocks: 154.196.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87216 (0x154b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 8 21:05:08 2025 GMT
Not After : Sep 4 21:05:08 2025 GMT
Subject: CN=67a7c707-7520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:64:47:fb:58:02:04:4f:f8:1d:0e:b3:e6:
fa:5d:35:a7:f5:2a:8f:73:02:d2:58:23:aa:59:16:
f2:5c:46:99:c6:ff:0e:d0:32:4d:72:74:f4:1c:e0:
ac:e8:09:76:1a:e8:00:8e:fa:40:ef:2b:88:fa:48:
f1:b1:bf:60:47:41:94:1d:ac:a0:52:c6:b0:40:57:
67:47:28:c3:ad:f1:a0:68:7f:53:3f:bf:a8:93:4e:
27:90:b5:85:8b:c6:c7:2a:f9:ed:6a:d0:eb:44:17:
40:55:95:16:02:27:84:87:2c:10:89:8e:c7:77:8d:
58:05:0a:6e:61:20:b1:d4:db:0c:6d:5c:96:a4:54:
42:24:74:60:24:0e:a3:d1:6c:a6:8f:85:d2:fe:8b:
1b:bc:d8:78:ce:c3:f4:4c:e5:1b:83:5c:d0:e9:bb:
52:63:eb:a4:16:30:ad:d3:fe:24:4c:d0:8c:c3:bb:
f2:ad:34:85:58:7f:4b:bb:18:21:43:d0:a8:e3:20:
2a:96:f1:94:02:a6:4a:b2:98:5e:2a:df:db:5a:76:
37:13:49:50:31:95:55:55:84:3c:5a:6d:40:60:4d:
b2:f4:47:73:24:fb:93:e5:01:cd:32:58:a9:1e:22:
0b:d7:c9:da:5c:d1:2c:5e:58:8a:8e:32:cb:98:97:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:88:BA:CD:3C:49:B5:E0:96:E6:D7:E3:A7:A3:BA:65:DB:4A:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6244E450E66011EFA8913071762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9d:93:12:10:d3:d1:9f:a2:ef:84:e6:26:ab:fc:46:5e:ea:
c6:13:13:fb:83:d4:c4:46:61:b7:d4:6c:b5:90:71:9e:bf:9e:
3f:af:8f:70:20:02:57:57:1d:47:48:2e:2c:7c:fc:5b:dc:95:
a8:3b:39:33:3a:d2:aa:b8:c3:ce:49:58:82:85:dd:14:6d:93:
bf:79:03:a9:b1:02:17:95:6c:b7:48:37:d4:36:ce:48:c9:ac:
06:8e:ea:19:10:c6:f4:76:a0:dd:34:b5:77:02:c6:45:77:29:
5b:2e:1b:2d:d6:12:07:11:cc:44:07:f9:3c:dd:71:7c:f4:52:
a0:f7:63:da:ba:6c:f8:69:f1:7b:39:a8:d7:e0:9f:3b:8d:30:
e0:10:c1:74:8c:8c:26:7d:75:27:c9:13:5e:74:c6:5b:3f:d3:
67:6e:8d:af:86:71:8d:ac:57:eb:5b:0e:8e:55:32:4a:87:ca:
20:f3:a8:23:08:07:3e:4c:32:26:9e:e3:2c:3a:0b:14:96:2f:
cc:aa:34:ff:32:54:31:79:b8:6d:7d:a4:6a:61:bb:bc:69:4c:
11:a7:9c:98:bc:c7:0f:3a:a0:ad:b0:10:56:c0:51:bb:95:c5:
ec:64:24:3c:21:e7:9d:7c:98:09:48:a0:30:ae:4b:ce:21:df:
21:cb:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:07 2025 by rpki-client