Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A80561EE31B11EF8CCDF29D762E951A.roa
File: 7A80561EE31B11EF8CCDF29D762E951A.roa (raw, json)
Hash identifier: elkcFHSTt9csF8Tdv8oDKO44Fu2ZfJyFscBAD/5Vm4A=
Subject key identifier: CD:F1:64:80:FF:9D:C7:58:FA:3D:10:20:4B:09:B9:8E:71:69:C2:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015147
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A80561EE31B11EF8CCDF29D762E951A.roa
Signing time: Tue 04 Feb 2025 17:14:23 +0000
ROA not before: Tue 04 Feb 2025 17:14:19 +0000
ROA not after: Wed 30 Apr 2025 17:14:19 +0000
asID: 18229
IP address blocks: 154.210.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86343 (0x15147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 17:14:19 2025 GMT
Not After : Apr 30 17:14:19 2025 GMT
Subject: CN=67a24aef-b073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:4d:74:4a:e8:11:b0:c0:d8:e5:d2:1b:63:
c3:cf:cb:a9:8b:65:61:69:42:cd:fd:4d:cb:7c:7e:
1e:6a:1c:a1:c5:ff:75:c6:80:d5:e6:86:cc:18:d2:
ac:76:8b:87:18:3c:53:b5:c7:b1:e2:2f:05:87:5a:
5d:2f:01:f1:48:be:b9:f7:7a:7c:6e:06:ce:11:84:
35:c7:8a:f6:31:89:ee:bd:e2:97:bb:ba:9c:ac:be:
83:cf:d0:7e:7c:2d:4b:fb:0e:93:bb:9f:4f:0c:84:
18:c7:77:85:1e:9c:6c:77:f4:0d:76:40:74:5e:e5:
e8:83:78:eb:6b:05:70:b7:81:3e:5f:c0:91:14:04:
a4:44:60:ee:ab:1e:f0:7d:75:5f:b2:62:60:0e:cd:
4e:75:aa:df:6e:8b:70:0b:49:53:86:7e:94:d1:e4:
0c:50:82:df:29:67:44:7e:6e:a2:b5:24:26:03:54:
59:2f:5f:0c:1a:b4:ff:51:08:08:0a:89:b9:c1:5e:
3a:4d:48:45:b2:91:0e:e8:9a:85:77:72:a4:5b:41:
0b:9b:a5:83:16:ef:cf:c2:65:8f:32:5f:41:24:0f:
43:e5:56:1c:c1:ee:ed:84:b2:83:c9:05:80:aa:ce:
5e:90:ea:69:9b:3a:df:59:1f:a2:fd:78:9e:fd:cb:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:64:80:FF:9D:C7:58:FA:3D:10:20:4B:09:B9:8E:71:69:C2:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A80561EE31B11EF8CCDF29D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.147.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fb:28:c8:b2:4a:3e:25:d8:c4:d0:71:96:97:7e:8e:a0:4b:
7f:84:81:29:63:a8:94:13:31:3c:0b:43:3d:54:b4:63:5c:08:
ca:c9:e6:b2:95:f7:14:93:b5:3e:89:5d:3a:77:71:b2:ff:cf:
39:a1:e3:44:d6:cf:b2:d3:2c:6f:a5:3e:24:a8:fd:fa:1c:8f:
f1:09:5d:94:60:9b:77:95:2e:fd:67:cc:2d:33:4a:b2:7a:92:
3a:27:07:55:2d:f8:30:32:7e:3c:81:c2:d2:4d:2c:b3:0e:2f:
45:6e:d0:ee:ea:f8:0a:94:de:32:d8:a0:2d:a9:ce:c0:72:09:
4f:c3:3b:ec:15:69:ae:d4:45:ed:f1:dc:b4:90:ae:6a:95:ff:
95:ba:c7:d7:07:71:fd:1d:23:dd:90:c3:e8:c0:83:48:58:ba:
0a:1b:4b:d8:55:2c:4f:0b:79:dd:6d:48:f3:38:85:08:bc:3e:
17:fc:f8:cc:c0:a4:1a:6c:0d:b2:0c:6e:51:53:93:92:85:0a:
3a:b6:7b:8e:8c:7f:5a:6b:ba:7d:c8:8b:65:dc:2d:f4:ff:46:
e9:f3:24:26:d3:1d:29:1d:a7:f2:b6:d3:aa:75:0a:01:8a:21:
3e:c4:73:54:28:92:b0:a1:84:2f:27:87:14:74:09:7e:2f:cb:
ad:f7:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:26:45 2025 by rpki-client