Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/632F9C5AF45911EFB0273977762E951A.roa
File: 632F9C5AF45911EFB0273977762E951A.roa (raw, json)
Hash identifier: Mg0Z198qRcLGUzSMhfq4d6AHZiJr342SEaEqjBqdWCk=
Subject key identifier: 15:E4:3A:24:59:6B:72:BC:8B:95:2C:66:7A:8F:19:B8:34:23:A6:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/632F9C5AF45911EFB0273977762E951A.roa
Signing time: Wed 26 Feb 2025 15:50:23 +0000
ROA not before: Wed 26 Feb 2025 15:50:18 +0000
ROA not after: Sat 19 Feb 2028 15:50:18 +0000
asID: 17561
IP address blocks: 154.82.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91380 (0x164f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:50:18 2025 GMT
Not After : Feb 19 15:50:18 2028 GMT
Subject: CN=67bf383f-05ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:de:bb:34:3b:e1:3a:9d:7f:aa:ac:fa:d8:
76:7d:93:bf:e7:5b:93:08:43:7a:04:8e:bc:c1:86:
06:01:36:53:3f:5c:26:b6:44:11:b7:ed:eb:11:5b:
c9:21:d8:86:be:a3:28:1a:23:8d:9b:93:1d:7d:05:
a5:0f:12:32:30:c4:30:6a:ff:b6:be:be:7d:33:57:
65:22:8f:e4:6d:bb:63:33:54:93:36:c6:1a:d0:70:
66:e3:c8:60:e4:82:b2:10:fa:46:2e:c5:d0:4e:51:
8c:94:e4:95:4f:65:58:cf:b1:97:b3:fd:f2:9c:16:
46:3a:8e:bb:52:55:46:c6:d6:45:41:c9:dc:48:66:
d6:2f:17:c4:1e:77:1b:15:b6:7a:65:05:c6:2b:61:
45:90:28:7b:b5:44:ad:05:2b:6a:7b:24:5d:51:d2:
78:80:0e:ef:aa:4e:04:4f:b0:cb:48:3d:f0:ae:8f:
82:a7:ab:15:ba:2a:2f:d0:e6:c2:3b:f6:d0:e3:c5:
70:80:a2:6d:06:97:35:da:b9:cc:85:eb:ed:b8:94:
f2:22:e8:4a:c8:28:ab:36:87:c5:f1:87:6f:86:e9:
a9:29:c6:62:77:f4:94:53:f0:e7:7d:72:de:d3:91:
03:21:cb:44:45:58:58:70:38:a2:20:f5:0a:f7:fe:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:3A:24:59:6B:72:BC:8B:95:2C:66:7A:8F:19:B8:34:23:A6:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/632F9C5AF45911EFB0273977762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8d:ae:13:9d:73:4e:74:fd:c2:dc:5d:a5:be:ef:32:11:bf:
15:e3:22:c5:c6:8c:ef:e3:28:f9:2f:a1:09:9f:9e:86:ab:48:
d4:b5:f7:d3:b1:55:b7:65:3f:2d:b5:3e:73:49:24:ef:6a:96:
90:f9:26:a0:3e:5a:3c:af:1e:95:b8:0c:ca:7c:06:d7:69:39:
62:77:31:4a:55:1f:f3:42:a4:7b:c4:14:3f:b3:ae:bc:06:4f:
33:08:7b:9c:e8:a7:4b:a9:35:13:52:f3:31:5f:14:8b:51:c2:
d0:8a:c4:fe:ae:56:69:0e:8d:48:33:28:9c:86:5c:b9:d6:63:
93:8f:db:de:a7:33:b0:f8:74:06:66:e0:d6:c3:29:d0:2d:35:
ba:a6:80:ea:0e:6c:9e:ee:49:ea:83:b0:1e:5e:bf:db:7b:8f:
50:21:ab:48:f2:39:37:c2:ef:8f:db:c0:b8:15:b4:83:07:29:
a5:81:20:f5:31:4c:d5:36:36:a4:8a:3f:bc:d6:76:98:c8:df:
67:c9:4e:5d:59:d3:8c:52:a8:47:38:ec:b3:19:e2:b0:e6:2d:
21:83:5c:30:4c:80:fa:1e:6b:b9:44:ed:01:9b:5b:9e:86:44:
c7:aa:9d:7e:85:ab:a8:06:7d:66:5d:9c:2a:27:3b:92:6f:cd:
10:36:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:27:16 2025 by rpki-client