Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8360C6E2F34C11EFB9EEB641762E951A.roa
File: 8360C6E2F34C11EFB9EEB641762E951A.roa (raw, json)
Hash identifier: WFaG0HOY/WZSjZ3ee3JD5rYTTzps5qstNNxYSxR+ktQ=
Subject key identifier: C5:8E:DD:01:71:91:35:D1:31:D1:83:E3:40:E6:57:3C:1B:8A:8D:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015D68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8360C6E2F34C11EFB9EEB641762E951A.roa
Signing time: Tue 25 Feb 2025 07:45:42 +0000
ROA not before: Tue 25 Feb 2025 07:45:38 +0000
ROA not after: Mon 07 Apr 2025 07:45:38 +0000
asID: 63139
IP address blocks: 154.223.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89448 (0x15d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 07:45:38 2025 GMT
Not After : Apr 7 07:45:38 2025 GMT
Subject: CN=67bd7526-1658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:a9:2f:55:03:33:0e:d2:a4:77:21:12:41:
cd:c7:da:64:f6:31:e4:08:8c:10:50:b3:fc:ce:fe:
e4:34:5a:5d:6e:92:61:fa:21:99:4e:07:8a:ac:95:
bc:89:de:33:72:05:72:89:81:c5:44:ce:79:65:81:
9e:19:25:a2:ef:85:a9:e9:fe:cf:b3:fc:7c:08:a0:
ec:31:b8:c1:7b:1c:a5:4f:3c:0b:b1:9d:a2:a4:38:
17:fc:5c:1a:1c:56:83:e2:01:be:4a:30:34:a6:66:
d5:dd:dd:42:b6:ec:bb:d5:3c:fb:c2:1d:82:a6:ab:
a7:51:31:c2:45:e5:5c:44:e3:8c:1c:46:e1:d6:ff:
1e:c1:85:12:1c:8d:20:58:bd:8d:d3:b8:49:8d:47:
d8:c4:cb:e6:c1:8a:46:f9:25:54:b4:c4:1d:1c:ff:
a4:ba:a5:e2:07:e4:19:c0:7a:73:7d:14:17:20:23:
78:2b:8f:ca:98:32:42:f7:95:1b:41:69:4d:62:46:
b6:e0:4b:23:3b:ff:ac:46:af:fe:4d:41:fc:d9:52:
8b:26:b0:07:07:48:1f:f0:64:10:80:74:a4:b7:23:
36:38:d3:71:50:dc:30:26:0c:22:68:2a:bb:ce:62:
f9:f1:d2:f1:e0:7e:4d:b4:25:c9:c0:65:6f:db:1b:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:DD:01:71:91:35:D1:31:D1:83:E3:40:E6:57:3C:1B:8A:8D:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8360C6E2F34C11EFB9EEB641762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:8f:7a:aa:ca:22:2b:04:eb:56:69:ca:80:7e:10:32:55:04:
16:04:ca:be:07:2a:28:7e:7a:be:2e:8d:65:49:e0:89:23:ef:
2d:8c:2e:ec:e4:3d:bc:e9:26:f0:d3:03:8f:55:94:fe:61:be:
6b:e8:11:fb:3e:f9:b7:94:1a:48:96:a0:ab:06:d1:e9:92:d1:
fe:ae:4b:d2:5b:0a:35:07:62:f3:1c:0f:15:7d:f3:aa:3a:a8:
4e:d8:c5:fb:b7:06:cc:f4:82:2c:b6:81:a9:38:9e:ff:e7:d1:
a8:29:31:27:f0:75:8a:f1:58:ff:b2:a9:8a:b7:e9:89:a5:0f:
63:21:04:9a:51:59:d2:8d:d7:84:9c:77:45:50:d1:17:f0:5b:
ce:85:bd:60:75:50:52:76:33:2d:eb:c7:40:11:d4:8d:f5:2a:
3f:e7:13:9d:2f:c7:ee:17:01:e6:14:a8:05:2b:4c:32:e0:54:
ad:d9:e8:62:34:23:8a:df:2e:f0:cf:6d:9f:b4:ca:9a:79:4f:
40:62:11:c2:2c:74:41:08:46:ac:81:48:f5:54:ae:11:3b:0f:
3e:aa:9e:fe:99:28:10:42:aa:10:cc:15:99:1f:51:b2:e4:a3:
84:eb:a3:17:72:a6:3b:d4:97:7a:42:d9:78:a5:f8:81:c6:ba:
8a:ec:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:13 2025 by rpki-client