Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E2A6AB8C8B011EFB86BB945762E951A.roa
File: 8E2A6AB8C8B011EFB86BB945762E951A.roa (raw, json)
Hash identifier: 6PWZ9mwB1ysQYqaGOEcgT+C94xLWWKfQvzLb/AIbYnE=
Subject key identifier: 98:4D:5F:D4:64:34:81:19:58:CB:C2:F2:00:4B:3B:97:03:C5:B3:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E2A6AB8C8B011EFB86BB945762E951A.roa
Signing time: Thu 02 Jan 2025 02:23:30 +0000
ROA not before: Thu 02 Jan 2025 02:23:26 +0000
ROA not after: Mon 13 Dec 2027 02:23:26 +0000
asID: 17561
IP address blocks: 154.220.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78244 (0x131a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:23:26 2025 GMT
Not After : Dec 13 02:23:26 2027 GMT
Subject: CN=6775f8a2-5b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:25:45:f9:6a:50:d9:4d:fc:50:42:fe:06:
24:ff:4a:a9:d1:b7:5c:67:51:05:2a:60:1e:bc:e0:
12:32:00:b9:b0:cb:4b:0c:1e:27:22:e2:1d:b5:03:
11:4d:4c:25:b6:39:cf:a0:23:af:0d:39:42:e7:27:
21:da:2c:f0:ef:dc:a3:95:fa:93:33:28:3a:76:3f:
01:32:fe:14:c9:bc:57:f4:ba:aa:0f:e0:21:7a:5b:
05:a0:65:88:b9:be:e7:0a:f0:1d:bc:74:af:fa:9b:
7d:50:54:3e:79:06:06:72:14:ca:a6:1f:47:9f:84:
37:a8:75:70:f6:c6:b7:b2:23:f2:ae:c9:21:59:6c:
ac:8e:5a:5f:72:da:7e:7e:f1:ee:9e:21:2d:6b:cd:
95:dc:82:3c:7a:dc:14:0e:55:bd:11:2c:9b:db:be:
36:5b:17:f4:68:20:2b:6e:64:90:14:2a:67:d3:eb:
5d:cb:dc:55:05:78:65:2e:2e:7b:af:21:ad:ae:c5:
b0:33:92:96:fa:01:c1:e3:37:cd:bd:e6:37:b6:37:
95:da:4f:c3:69:e0:9d:9f:97:b0:da:85:87:da:03:
83:75:d7:d9:5c:8b:ce:7c:96:5f:31:d4:29:7d:24:
7a:20:a3:58:37:44:ee:9c:3c:93:84:94:b9:d4:ed:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:5F:D4:64:34:81:19:58:CB:C2:F2:00:4B:3B:97:03:C5:B3:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E2A6AB8C8B011EFB86BB945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.174.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:50:f0:b3:88:07:8b:fe:68:c6:5c:49:6f:16:34:0b:cc:2e:
bf:cd:77:12:3e:d6:c8:c5:33:01:55:6f:41:60:14:c6:d4:07:
22:4c:87:e2:cb:95:68:20:43:ad:ad:23:a7:4a:8b:0c:7a:ce:
d2:3f:88:c0:8c:52:3d:8d:f2:5e:ae:a9:9a:a6:db:75:ee:92:
1c:7d:ff:be:8b:1c:b8:15:42:8c:69:b9:c5:20:73:ff:e0:03:
33:bb:69:2d:12:ef:ed:b7:56:75:0b:93:1a:57:e9:29:55:69:
fa:2a:6f:92:6f:7f:0a:47:bb:52:d2:93:ba:19:cf:26:ac:36:
77:8d:f8:88:eb:0e:88:f0:93:67:1f:47:f4:31:9b:ea:ff:71:
be:27:67:e5:44:f8:9f:13:45:52:8e:d8:7e:d5:6b:66:06:11:
37:c6:17:24:01:64:0b:64:32:74:80:3d:45:f2:2f:9c:91:ad:
a7:46:e9:e2:84:35:a4:50:25:4e:1e:4d:4e:bb:4f:29:95:ae:
1c:c4:b7:9a:0a:30:bd:cb:1b:cf:fe:5c:c4:23:6d:95:45:c7:
c1:e3:b7:20:02:5c:1c:6f:14:ef:ca:bc:d4:b3:76:6b:10:f0:
6f:e1:f1:48:ed:bb:d8:ea:4d:98:1e:e6:92:72:b6:12:e2:76:
9d:26:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:57:20 2025 by rpki-client