Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C0A8B0EC8AC11EF827C7CA7762E951A.roa
File: 8C0A8B0EC8AC11EF827C7CA7762E951A.roa (raw, json)
Hash identifier: SCFzXbBF4jrnO6Q8Qrk78n8OPEIj2tSeUualufUZp7M=
Subject key identifier: 22:FF:25:9C:4F:D8:07:69:3F:5E:80:7B:9F:A0:B4:12:8A:25:ED:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013182
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C0A8B0EC8AC11EF827C7CA7762E951A.roa
Signing time: Thu 02 Jan 2025 01:54:48 +0000
ROA not before: Thu 02 Jan 2025 01:54:44 +0000
ROA not after: Mon 13 Dec 2027 01:54:44 +0000
asID: 17561
IP address blocks: 154.220.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78210 (0x13182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:54:44 2025 GMT
Not After : Dec 13 01:54:44 2027 GMT
Subject: CN=6775f1e8-4137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:e0:9e:ff:6b:5d:13:d7:a0:55:11:84:bb:
53:7c:29:5e:19:0b:9e:4f:e5:b0:f6:1b:92:30:21:
d5:a5:a2:97:74:0a:a3:13:cf:db:2c:af:00:9f:04:
f4:fb:16:8b:9b:a1:4c:9f:a9:4a:2c:57:98:27:b8:
ff:21:53:cc:20:a4:d1:4a:3f:ce:b3:86:74:f3:ba:
83:e6:8e:00:3d:01:04:fa:6d:02:24:8c:ac:b8:29:
b5:c4:f0:df:f3:4e:21:f0:6d:cd:1b:32:1e:20:e4:
26:3f:b2:94:dd:57:c6:84:90:d4:5e:d4:cf:76:75:
2b:73:b5:7a:3b:16:86:ae:ee:a0:11:bf:e5:40:ca:
34:d2:05:cf:91:2b:25:84:e9:80:65:6b:f7:38:04:
dc:95:ff:37:ef:0c:03:ca:e9:59:aa:bc:d5:5d:62:
69:04:ed:5b:77:67:a0:00:29:61:db:56:e0:d8:77:
93:e3:39:52:6b:3f:6e:a6:79:1d:e7:58:d4:b7:a5:
45:d4:d9:08:7b:d3:a8:2f:1b:82:dc:07:2f:1f:db:
41:ec:22:84:e2:8b:7c:80:cf:fd:c6:78:9f:c1:ec:
e0:7f:5a:dd:de:a7:e9:42:d8:a8:05:03:3b:b7:52:
41:bd:95:a1:4f:8b:36:93:1e:0e:85:6f:b3:02:06:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:25:9C:4F:D8:07:69:3F:5E:80:7B:9F:A0:B4:12:8A:25:ED:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C0A8B0EC8AC11EF827C7CA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.156.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0c:36:04:74:0a:6c:bd:cf:81:c6:29:1d:2a:41:9b:10:70:
4b:71:17:4e:a1:cd:0c:c3:d9:c4:34:ff:bd:78:59:76:f3:48:
de:5e:7e:d4:b1:92:46:bd:13:fe:99:58:d4:82:72:51:38:3e:
6e:2a:7d:41:e8:ff:47:08:8b:80:52:7d:2c:01:d9:36:b4:c5:
47:12:b0:ff:50:44:a5:9d:d6:02:7e:59:87:d4:a3:2d:52:00:
cb:80:6c:39:01:cc:a3:e5:f9:c3:40:98:1e:0e:37:77:81:9a:
93:e6:3c:b6:6b:2d:06:91:93:24:f3:11:f1:96:91:3c:f2:d0:
ee:4c:43:b1:c4:6b:fd:b5:d5:4e:dd:c2:0b:bb:55:09:d2:81:
8d:a7:23:aa:51:8b:c7:c8:c0:06:7b:cb:2c:62:8e:53:66:f2:
9c:b7:e1:e8:7f:1f:7e:1f:96:ed:c5:61:d9:60:db:b3:47:28:
f2:cc:c4:c8:f6:ea:98:59:57:ef:57:dc:03:ce:11:55:85:5b:
c6:6e:9e:50:4b:5d:21:52:fa:e0:53:12:a1:e9:0b:81:a1:b7:
c6:e9:86:35:ea:53:4c:ac:c6:62:7f:cc:cc:7a:a5:8c:d5:b3:
83:2c:6e:84:b8:ea:81:b0:17:72:75:5f:0a:61:99:a8:8a:55:
80:85:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:55:02 2025 by rpki-client