Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C50856AC8B211EF8735EF52762E951A.roa
File: 6C50856AC8B211EF8735EF52762E951A.roa (raw, json)
Hash identifier: JOuHAclOlGx3jFNWUXMzHbCqU+TAo3z4QOBDMYzOoSc=
Subject key identifier: C0:FB:3D:C7:32:BB:47:94:6A:EF:29:A7:C2:B3:4C:0C:40:55:94:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C50856AC8B211EF8735EF52762E951A.roa
Signing time: Thu 02 Jan 2025 02:36:52 +0000
ROA not before: Thu 02 Jan 2025 02:36:48 +0000
ROA not after: Sat 13 Dec 2025 02:36:48 +0000
asID: 984
IP address blocks: 154.220.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78260 (0x131b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:36:48 2025 GMT
Not After : Dec 13 02:36:48 2025 GMT
Subject: CN=6775fbc4-9f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:db:5e:0a:fe:dc:98:8d:8b:a0:af:93:15:
af:3f:06:90:73:f9:3b:36:2c:d4:3c:12:84:3a:5d:
c7:9a:b3:a0:b7:60:38:8a:c9:d6:bf:5c:1c:7f:80:
fb:7b:c3:e9:90:38:57:15:58:aa:2e:5a:5b:9e:75:
02:28:14:e7:8b:ca:06:a2:d7:fc:fc:a7:7e:e4:2d:
aa:b6:f9:9b:2a:8c:94:1a:93:25:0d:e9:26:ea:32:
83:6d:25:4a:c6:bd:73:28:99:01:70:75:57:fd:9f:
e3:bd:a5:d6:4c:dd:d0:df:46:95:0e:a4:d9:17:af:
0e:ea:08:53:04:8a:8b:99:da:a1:32:bf:e8:9c:80:
1d:a8:80:34:ee:db:76:28:1c:02:72:44:a0:b3:79:
02:13:3c:86:11:4d:93:4d:c7:aa:ef:10:03:a8:dd:
c7:4b:53:fa:4e:ba:3e:d4:96:10:44:76:6b:dc:8c:
48:a5:1d:cc:5b:6d:ce:3a:8f:40:d1:6d:90:fd:2d:
a0:bc:71:9c:15:1a:ba:85:a9:17:6a:5f:88:23:75:
36:51:d5:4d:e1:93:ea:c4:52:39:72:19:9d:4d:b7:
cb:00:ec:ca:24:c9:e4:e5:af:71:73:11:3c:ee:05:
8b:b5:c6:d5:e8:c7:be:03:a6:e1:4e:8b:fc:6e:14:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FB:3D:C7:32:BB:47:94:6A:EF:29:A7:C2:B3:4C:0C:40:55:94:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C50856AC8B211EF8735EF52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.182.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d8:10:cf:f4:20:eb:2d:3c:57:c6:2d:86:d0:f4:ec:2d:bb:
39:a4:90:08:a7:ae:2a:85:20:90:ae:d2:bc:d8:e9:74:48:c6:
e7:87:3a:34:e7:b0:c6:fd:39:c0:b8:73:55:87:e5:ad:f0:25:
f0:a3:16:02:06:b4:82:ea:3a:40:05:58:41:66:e8:62:d9:92:
5a:66:7f:dc:04:c8:1b:f9:cc:52:c3:01:e4:1e:4d:9e:e7:73:
ac:cc:1b:fc:d0:0b:60:62:f4:11:aa:2b:2f:d0:14:42:bf:6b:
34:cf:57:56:7e:76:7e:93:85:da:7f:3e:ae:18:ad:92:36:de:
9c:2e:c1:bf:41:c4:9f:37:cb:cb:1f:e4:59:b0:0e:cc:45:1d:
31:cd:84:c7:d9:d4:d3:c4:b3:4d:c1:79:cf:50:bf:2d:9d:bd:
c6:99:75:a6:32:a5:ee:cd:0b:e8:7f:f0:27:35:f7:a1:f5:88:
94:c2:3c:ae:b0:3a:4c:5a:df:f7:10:32:ae:7d:d6:d7:9c:c4:
28:08:10:59:72:42:7f:66:d9:9c:87:63:7b:82:e0:ac:57:d3:
6e:e8:d4:03:50:39:f9:33:d5:65:c6:69:90:8e:43:d0:e9:01:
28:07:4a:21:bb:5e:c6:dd:ed:e8:1b:43:32:bd:2f:37:4a:cd:
a9:05:9f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:22 2025 by rpki-client