Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BA3801AC8A911EF9BBF3990762E951A.roa
File: 8BA3801AC8A911EF9BBF3990762E951A.roa (raw, json)
Hash identifier: X0lNcpMHUvfoKkHDzd9CXWBW79pH2Hbym5cMNPgQHvQ=
Subject key identifier: B5:09:7C:75:33:1F:C2:AF:24:2E:A4:5D:79:59:41:B2:DC:AF:39:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013168
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BA3801AC8A911EF9BBF3990762E951A.roa
Signing time: Thu 02 Jan 2025 01:33:19 +0000
ROA not before: Thu 02 Jan 2025 01:33:15 +0000
ROA not after: Sun 12 Dec 2027 01:33:15 +0000
asID: 17561
IP address blocks: 154.220.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78184 (0x13168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:33:15 2025 GMT
Not After : Dec 12 01:33:15 2027 GMT
Subject: CN=6775ecdf-70e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:90:5c:76:54:a7:4d:5c:94:57:e0:d6:ac:
b9:ee:90:bf:da:bf:34:83:74:1a:ae:72:27:0a:06:
ba:73:30:a3:18:e9:fd:35:52:e5:70:b6:c7:67:42:
49:3b:6d:f8:7f:75:3d:7e:b2:f4:93:0c:21:89:0e:
57:bb:f0:6c:52:b1:bd:8b:c8:e2:f6:17:8c:7f:b3:
56:33:0b:cd:41:74:8b:c5:c5:0a:5f:5b:21:46:98:
e5:c1:ef:6e:83:a5:fc:7a:0f:ca:5b:6c:b3:3e:dd:
3c:d5:27:57:e5:65:6f:97:db:cf:3e:6a:05:46:81:
b8:e5:d5:a2:35:d4:08:bd:99:69:45:3a:69:5f:77:
0d:46:9f:4a:33:01:b6:74:e8:72:cd:45:d9:34:8e:
bf:f3:d8:94:73:80:9e:ef:a8:fc:aa:99:ea:bd:77:
66:ed:9f:6c:6c:72:72:73:a1:85:e8:ab:11:9e:ff:
d3:83:14:17:55:0f:95:fd:fc:65:cd:f4:cc:24:6a:
e4:13:3b:4d:a5:4c:ea:d9:a3:c2:9d:7a:a4:6d:ed:
a6:df:73:a5:ba:fd:92:de:1b:7a:f2:87:70:97:b9:
4a:8e:f5:08:18:6e:3d:49:56:b7:c4:3a:50:84:08:
20:07:cb:2b:8f:41:0a:ea:44:f8:e1:b3:a2:bc:f2:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:09:7C:75:33:1F:C2:AF:24:2E:A4:5D:79:59:41:B2:DC:AF:39:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BA3801AC8A911EF9BBF3990762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.143.0/24
Signature Algorithm: sha256WithRSAEncryption
af:87:ff:0a:86:6e:e6:50:b2:23:2f:dc:b3:5a:61:6e:9a:33:
82:e3:13:75:c6:ee:39:11:6f:9f:35:0d:8f:bc:43:69:2d:30:
b4:6d:0c:30:29:75:b1:7c:84:44:a8:e4:fe:43:82:ba:03:a9:
59:da:b1:e8:ff:26:36:36:e5:ad:15:58:a6:59:ea:8f:c5:02:
24:b6:38:52:fe:69:72:23:3d:2d:62:62:34:77:0c:c2:a5:71:
0f:b5:e1:bf:13:14:1b:a3:8a:00:53:98:d2:e1:c0:89:b0:25:
32:e5:21:26:a8:15:cf:f1:7a:9b:7b:d6:79:b1:d5:b9:b8:65:
d5:91:31:2d:04:d5:38:22:3a:fb:80:b8:54:e7:f1:c3:79:83:
5a:c5:e4:05:f0:6b:02:d9:d2:79:58:fc:2f:18:1c:53:05:5e:
dc:79:9a:ce:dc:65:1c:65:22:4f:41:e3:77:42:3c:8e:10:80:
e9:14:5a:1d:01:d3:37:09:a8:47:84:16:a1:54:89:fb:fa:b5:
d9:92:51:db:3d:c1:e7:29:8b:59:e6:32:50:27:64:72:13:49:
8e:b8:5f:05:51:b9:d9:24:42:7b:6a:d4:22:eb:9e:1c:5b:89:
cd:13:01:00:37:18:b5:28:16:67:5d:b2:ad:ca:bd:29:4d:ad:
9e:2c:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:49:30 2025 by rpki-client