Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55866BCE9E011EF8E116145762E951A.roa
File: A55866BCE9E011EF8E116145762E951A.roa (raw, json)
Hash identifier: TuSv4041FAD3p2Fr3BUbco2lhnwEUiKRWu4gx6tecE8=
Subject key identifier: 5B:86:CB:03:2F:FE:59:74:87:3A:E9:C1:C9:62:26:4C:93:52:47:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0156A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55866BCE9E011EF8E116145762E951A.roa
Signing time: Thu 13 Feb 2025 08:00:53 +0000
ROA not before: Thu 13 Feb 2025 08:00:49 +0000
ROA not after: Tue 17 Feb 2026 08:00:49 +0000
asID: 197730
IP address blocks: 154.201.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87720 (0x156a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 13 08:00:49 2025 GMT
Not After : Feb 17 08:00:49 2026 GMT
Subject: CN=67ada6b5-4a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:44:bd:fb:1f:13:3d:80:f9:33:40:d6:e1:
61:cf:ca:c3:1c:85:bc:8a:7b:f2:4a:b5:8e:77:3e:
9b:d7:a9:ab:ec:2b:62:42:bd:02:94:e6:8c:9c:70:
73:1d:b9:aa:c1:ed:0a:d3:f6:41:2d:a6:50:e2:b8:
a6:2a:9d:2b:95:cb:c5:1f:24:78:b9:bd:be:ec:32:
e9:d5:a7:08:a2:86:09:94:99:70:2d:4e:9c:ed:73:
2c:8b:5b:48:89:60:57:3e:f1:75:c4:72:34:10:c9:
58:57:7c:d9:25:8e:78:e3:73:de:8f:47:22:ea:5f:
69:9c:c3:94:5b:04:13:e9:c3:c3:0f:3f:d4:54:3b:
6c:f2:72:10:a0:c8:af:28:3e:a3:b5:8b:67:cc:6f:
ac:73:75:b0:96:1e:0d:8f:80:c3:ba:d9:8e:2e:0c:
e1:c4:85:f8:17:ed:76:65:48:5f:38:a3:0e:67:d2:
17:aa:56:24:9c:d1:ca:59:de:fb:a7:2e:2a:63:ed:
ea:fe:fb:d0:fc:61:72:8d:35:93:45:94:ac:ac:f3:
fd:5f:19:e9:fd:c2:b4:c5:d9:69:11:ad:8b:f4:df:
a2:7d:6a:fe:c3:f1:0f:e0:88:26:c1:c1:fc:f0:4e:
5a:a3:95:a0:99:f5:e7:06:db:23:77:41:18:1d:fc:
9d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:86:CB:03:2F:FE:59:74:87:3A:E9:C1:C9:62:26:4C:93:52:47:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A55866BCE9E011EF8E116145762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.120.0/22
Signature Algorithm: sha256WithRSAEncryption
34:e1:0c:f1:45:d7:90:f3:07:85:49:b4:41:6f:45:cf:80:29:
55:69:bf:76:60:c6:5c:4f:94:49:64:18:d9:2a:87:d7:95:85:
22:87:ec:20:7a:12:26:be:27:6a:d1:6a:38:a4:cf:53:fe:ad:
59:1b:a5:39:b8:cb:1f:fe:bd:d6:0e:d0:c5:fd:bd:6e:60:c4:
57:c0:1a:13:6a:23:4f:16:af:39:01:0d:f7:04:0a:51:9d:4f:
b1:91:ff:53:79:78:b2:31:76:3a:c5:f2:4e:71:ba:bc:29:40:
b5:8d:ed:6b:6a:3b:71:ab:1f:56:c6:39:9a:5e:03:7b:44:a2:
5a:99:bf:14:ad:8e:c8:e3:7a:2d:fe:2e:4f:a7:0a:46:e0:06:
3e:6c:d7:86:62:a5:f0:2b:bf:ff:2c:85:d8:4b:6c:23:81:29:
b4:03:7b:9b:41:c2:fc:62:00:ea:83:e9:61:08:ae:b1:9d:85:
bf:2d:4d:21:6a:2d:65:68:1b:8d:55:6c:30:91:5a:56:52:1b:
cc:e1:ab:00:99:3b:49:6e:65:1e:79:3c:21:de:56:6e:c4:4e:
5a:08:51:eb:de:e4:9b:ae:70:b3:25:67:74:01:89:82:3a:7f:
8d:6e:5b:79:35:c0:14:7b:af:aa:92:6f:f0:c6:c9:6c:00:44:
ee:0a:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:06 2025 by rpki-client