Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CDEF95EC94011EFB6F1DF52762E951A.roa
File: 8CDEF95EC94011EFB6F1DF52762E951A.roa (raw, json)
Hash identifier: JfO/uzZskqH3+FKNSv+JP3pikBXjn9GTfMz6vDschi0=
Subject key identifier: 20:E0:0B:C4:FB:8F:3E:5C:82:CF:1D:DE:7F:64:38:95:B3:95:A5:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013425
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CDEF95EC94011EFB6F1DF52762E951A.roa
Signing time: Thu 02 Jan 2025 19:34:15 +0000
ROA not before: Thu 02 Jan 2025 19:34:11 +0000
ROA not after: Mon 13 Dec 2027 19:34:11 +0000
asID: 17561
IP address blocks: 154.223.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78885 (0x13425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:34:11 2025 GMT
Not After : Dec 13 19:34:11 2027 GMT
Subject: CN=6776ea37-231a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:20:33:04:76:95:e7:60:1c:90:19:3a:aa:
38:d4:02:50:5f:b0:d9:aa:ec:f9:4e:20:91:cf:68:
95:c2:80:07:0e:26:ef:ca:24:de:0b:42:d8:9f:7c:
63:06:36:14:20:e4:ef:ae:13:05:58:20:a8:b4:11:
8b:83:20:11:84:15:26:49:2e:1a:99:f2:50:bf:dc:
8b:7b:e2:8e:cd:28:ee:cc:b1:8b:d4:1b:96:98:70:
0d:77:48:9a:ed:0c:06:4d:fc:4a:76:4c:23:f4:f8:
18:c4:38:18:d1:be:70:db:65:3b:ba:b1:13:fe:78:
d1:09:5b:bf:28:46:53:55:02:78:ff:91:4c:bf:4b:
f1:dc:1b:8f:ae:3e:29:82:79:09:2e:7b:7b:e2:2f:
6c:d1:bc:3c:50:f5:9b:eb:dc:fc:41:5b:a2:03:d9:
5f:82:0d:c5:ec:38:ed:47:4c:fd:02:c8:c9:67:ed:
39:9f:99:c1:81:e6:e6:a1:e2:7e:6b:80:5c:83:f6:
40:a9:95:0d:c5:f4:29:e2:61:bc:5f:65:d5:e3:b8:
37:58:04:3a:4f:8c:d4:47:c5:ab:56:96:1d:c3:ae:
88:eb:e6:d3:b2:06:69:a9:06:89:0a:2b:ef:a1:49:
ea:a4:4c:bf:fe:52:da:3c:9b:23:20:54:b6:37:2d:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E0:0B:C4:FB:8F:3E:5C:82:CF:1D:DE:7F:64:38:95:B3:95:A5:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CDEF95EC94011EFB6F1DF52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.248.0/24
Signature Algorithm: sha256WithRSAEncryption
45:af:d4:78:3d:b2:8e:ca:5f:b2:61:e3:ac:a0:0c:82:4c:23:
c2:fb:cb:a9:64:90:ca:1a:1d:45:b2:4c:b4:17:6a:df:8f:70:
bb:cb:ec:eb:d7:41:99:a4:d0:91:88:10:4d:9e:f7:34:9c:0f:
d0:dc:90:34:3b:04:5b:36:63:3e:45:ae:40:71:ab:87:66:eb:
0f:ad:e0:85:1f:48:c2:29:1b:46:06:03:3a:39:68:97:78:c6:
a6:a3:19:a2:64:5a:09:69:6d:bf:56:c0:f1:1a:09:21:d7:20:
8d:e6:ee:15:f0:9d:86:3d:fd:c9:31:68:50:b1:fe:bd:08:88:
c6:bf:1c:ee:2c:b5:41:e6:a8:ec:86:c9:cb:d6:b4:cd:75:7d:
4b:7d:70:e1:9d:15:a9:66:02:a2:a1:63:01:ec:e0:da:3d:e3:
cc:32:77:67:8e:75:76:d1:6c:83:e6:22:e5:89:9f:42:7a:df:
b0:4b:4f:76:3d:4b:6a:82:8f:bf:86:9b:c0:47:84:ff:92:22:
40:11:ef:fd:5b:0c:1c:2a:8d:97:8f:73:8d:fd:d3:30:a9:dd:
6d:d1:1f:ac:83:b2:a1:6d:12:68:03:01:66:54:b0:10:56:ba:
4a:80:15:db:fa:0f:f8:fe:65:92:32:1a:91:bc:3b:b4:b6:53:
8f:f3:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:38 2025 by rpki-client