Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C94C62E2D411EFB581DA47762E951A.roa
File: 66C94C62E2D411EFB581DA47762E951A.roa (raw, json)
Hash identifier: Bbv2paubJvy/qXmUrIJnWa8GgVz/28QVJFeVVHKdIdo=
Subject key identifier: 73:F9:F8:4F:46:10:3D:7C:89:59:F5:25:4F:14:9B:CC:42:65:19:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C94C62E2D411EFB581DA47762E951A.roa
Signing time: Tue 04 Feb 2025 08:45:36 +0000
ROA not before: Tue 04 Feb 2025 08:45:32 +0000
ROA not after: Wed 30 Apr 2025 08:45:32 +0000
asID: 18229
IP address blocks: 154.210.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86196 (0x150b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:45:32 2025 GMT
Not After : Apr 30 08:45:32 2025 GMT
Subject: CN=67a1d3b0-eedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:83:d9:7d:a0:dc:8e:20:af:b6:1f:02:56:
a2:ee:f4:f9:d2:1b:3d:e3:91:f0:86:6e:2e:f7:8d:
d0:ad:91:d2:72:51:78:d8:9a:ca:7e:73:58:25:c4:
51:55:86:1b:80:3f:39:02:3b:03:6f:f7:ee:17:ae:
e3:6a:59:f7:2f:ad:f3:67:dd:62:83:54:d1:16:a7:
e2:ef:03:6f:21:3c:7e:46:a9:6d:ba:a4:02:5e:ff:
ab:9a:2c:d6:4b:fd:73:9c:10:70:90:eb:84:97:b9:
d2:e4:c1:7e:6f:07:e8:ab:31:cb:c0:b8:ef:c9:e9:
cc:99:9e:b1:cc:6f:d1:ac:99:f3:3b:60:dd:56:ac:
35:a5:b9:aa:c8:e5:22:b2:21:9d:5f:3e:30:dd:6f:
30:43:10:90:3c:8c:33:fa:dc:49:ee:c6:83:66:fb:
0a:a7:30:2d:e9:95:c4:e1:6d:12:52:00:a4:c4:8e:
23:4f:22:b5:e7:f8:dd:62:37:24:ac:f6:65:52:38:
5f:70:2d:8b:08:98:2f:a7:1c:d0:31:28:fa:cd:1a:
56:55:9f:ab:ea:37:57:e8:a9:f8:91:dc:3b:56:7b:
fb:b4:90:28:8b:c6:6e:c4:ea:bd:16:31:e2:80:cd:
d6:58:8b:3a:0f:04:a2:d2:b4:14:cd:c0:20:6c:4b:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:F8:4F:46:10:3D:7C:89:59:F5:25:4F:14:9B:CC:42:65:19:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66C94C62E2D411EFB581DA47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d2:73:64:9c:e6:24:86:1f:a9:52:2e:e6:69:5d:4d:17:94:
6c:ac:92:96:38:ab:ea:09:74:df:c9:6b:66:80:7e:e5:46:0e:
dc:6f:c0:df:f7:9e:85:90:60:b4:e6:dd:f4:b0:00:bf:a2:cd:
fc:f8:03:21:ae:2e:22:24:cb:41:5b:c1:d6:25:44:2b:26:b4:
89:6b:e3:9c:d0:ca:db:ee:1e:14:81:58:2e:e7:03:46:63:90:
04:91:62:d5:fe:4d:e5:5c:fd:e4:f3:00:81:1b:35:73:23:50:
f5:2e:b0:5c:c5:bc:f4:49:92:30:a8:d2:dd:b7:6e:e2:e5:aa:
71:8c:26:85:20:fa:be:f5:3b:1e:cc:a0:81:33:84:77:3b:7b:
ea:66:1b:cc:4a:d9:6e:28:7e:e7:97:f7:9d:df:07:e8:99:0f:
ba:08:03:1a:7f:75:19:18:02:0b:be:60:be:f1:84:86:63:2d:
2d:f1:34:de:c5:f8:25:54:fc:fd:a6:70:69:c6:fb:6a:85:16:
b3:33:b7:1f:c4:95:d0:17:52:65:f1:e2:df:24:52:bd:d0:c9:
d1:20:c9:ae:5c:5b:a3:86:73:92:b3:95:5b:d1:39:5c:9e:c8:
bb:32:81:e3:b4:c9:8d:28:94:99:e7:b9:a3:7b:be:93:3a:82:
4a:cf:97:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:20 2025 by rpki-client