Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3231176E24111EF97B99D64762E951A.roa
File: B3231176E24111EF97B99D64762E951A.roa (raw, json)
Hash identifier: qQFtQI6DDKP2xB95WEUZZUOjHvNR4qp8of1VN+p7sMs=
Subject key identifier: D4:2F:F6:C4:E4:E9:89:BF:27:01:D3:E7:A3:CE:51:9C:FC:16:6E:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015033
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3231176E24111EF97B99D64762E951A.roa
Signing time: Mon 03 Feb 2025 15:15:28 +0000
ROA not before: Mon 03 Feb 2025 15:15:24 +0000
ROA not after: Wed 30 Apr 2025 15:15:24 +0000
asID: 150008
IP address blocks: 154.210.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86067 (0x15033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:15:24 2025 GMT
Not After : Apr 30 15:15:24 2025 GMT
Subject: CN=67a0dd90-f96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:1d:08:bd:7f:95:56:f3:48:72:af:be:81:
04:b2:bf:c3:06:8c:b3:2b:83:24:2f:56:c0:90:d2:
52:53:58:bd:82:34:0f:e5:1f:9f:3d:10:17:15:df:
57:11:ac:5d:13:29:84:24:9e:12:2a:51:17:bc:b4:
98:50:9e:bc:d3:3c:d8:f1:c2:cf:70:4f:43:b4:48:
c6:f5:85:ad:b9:48:ef:5b:f2:3d:cf:c5:ae:f6:90:
24:8a:3d:80:f0:c0:bb:66:94:86:fe:00:6c:5b:02:
7d:54:45:53:31:56:f7:ab:2e:df:80:2b:36:d9:f2:
6c:e7:bc:37:f3:f7:05:c0:01:64:fe:0d:02:68:6c:
99:59:77:f9:d8:38:6a:a8:02:a9:ce:f0:c2:70:da:
29:5e:e0:a0:8d:c6:5a:3f:35:67:54:3b:ad:08:d8:
d7:dd:b5:6e:47:dd:11:7a:24:48:70:02:cb:67:c6:
e0:14:03:9d:bd:5c:78:e6:75:6d:91:be:e1:f1:20:
0d:54:6b:21:8c:64:ca:74:57:8b:a0:2a:69:a0:76:
3d:d7:4d:13:b3:9d:53:dc:bc:64:fa:80:4f:51:f7:
44:c0:c4:48:77:71:65:d8:05:6c:5c:4c:19:ee:c0:
c7:0f:3f:e3:ff:ab:a6:a6:b7:59:cc:5f:f6:44:a8:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:F6:C4:E4:E9:89:BF:27:01:D3:E7:A3:CE:51:9C:FC:16:6E:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3231176E24111EF97B99D64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8d:3d:57:48:51:ff:fb:37:c4:75:21:66:18:35:31:29:ec:
15:f0:ba:38:97:d5:62:0d:91:08:68:6f:98:fd:5d:3d:f5:6e:
ff:99:1b:15:65:a3:a4:ec:6e:d4:84:aa:24:21:19:df:66:a8:
b2:fa:64:38:0c:3d:df:2e:11:95:4e:54:19:eb:f4:cb:62:ac:
c1:bd:7a:51:b0:76:80:fe:57:bb:bb:a7:61:0e:c5:fb:a2:2a:
f7:3c:81:5f:b1:d7:59:c2:46:11:6b:3d:c8:75:12:ab:55:57:
f3:32:0a:ac:0f:0a:f5:0d:9f:fe:a6:4d:02:34:94:2c:b7:b8:
79:54:ca:e3:ef:c9:98:ee:12:e7:4b:f1:d4:e1:3e:cf:fd:1b:
a2:9c:92:53:82:e9:b5:ec:bf:b8:51:b6:d3:09:8a:35:cc:c0:
1b:01:78:bd:c2:06:4d:1c:6d:2b:37:8e:52:5f:c2:1e:e9:1a:
0f:74:8f:43:83:d9:42:e0:f3:1c:89:71:d9:fd:49:fc:17:d6:
7f:37:3c:a7:2c:2a:94:9f:1f:94:84:17:3e:3a:83:a7:1d:9f:
1d:7e:83:c7:90:24:46:29:7f:a7:bf:bc:24:d5:22:d2:38:cc:
42:d0:51:a1:5c:c7:68:f2:72:6c:b9:a3:ae:ad:c5:6f:a9:42:
09:f4:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:29:34 2025 by rpki-client