Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5CFA618E30F11EFA664FB4F762E951A.roa
File: B5CFA618E30F11EFA664FB4F762E951A.roa (raw, json)
Hash identifier: RMi7YRhHg0qTFEIII0/5LPXnYF32gB5XAGUkE5B4HWg=
Subject key identifier: 69:C9:63:55:57:F8:6D:27:33:98:24:FA:6E:57:BE:8B:CC:82:42:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5CFA618E30F11EFA664FB4F762E951A.roa
Signing time: Tue 04 Feb 2025 15:50:09 +0000
ROA not before: Tue 04 Feb 2025 15:50:04 +0000
ROA not after: Wed 30 Apr 2025 15:50:04 +0000
asID: 18229
IP address blocks: 154.210.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86263 (0x150f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 15:50:04 2025 GMT
Not After : Apr 30 15:50:04 2025 GMT
Subject: CN=67a23731-8ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:17:4c:6e:ed:43:15:a4:4c:fb:bc:a1:67:
66:73:10:e0:06:ec:2e:f2:a9:9a:6c:ed:d7:92:2f:
27:4f:c9:4f:47:ce:a1:29:b8:24:43:88:03:f8:93:
5a:6c:13:91:be:bb:02:f8:72:74:41:f8:88:f4:d4:
75:7d:1a:62:58:83:9f:0b:24:95:d2:e0:bf:c2:4b:
01:b4:7b:dd:3e:62:9a:b7:2a:f5:26:e5:ad:e2:28:
94:43:50:95:4b:5a:72:8b:29:75:52:9a:04:96:a3:
b1:1a:ac:bb:ae:9f:ce:2e:ca:62:30:c9:2d:b1:f8:
05:53:c0:ce:d8:17:dd:86:ba:11:48:94:38:78:02:
f7:82:0c:55:71:7e:e5:02:cc:ec:83:76:f5:66:b4:
85:83:52:77:1c:29:5c:90:a6:2f:03:1f:dd:aa:ee:
63:29:37:96:e0:58:31:28:f0:60:79:13:b6:f0:2a:
25:51:b6:da:31:93:85:9b:c1:74:90:f8:72:bf:b0:
bb:7e:a7:29:ec:9e:bb:1c:6a:ff:bf:5b:d2:0a:56:
6a:6a:34:f3:c1:23:39:77:2a:ce:72:e8:fb:f0:c9:
cb:01:a7:24:21:8d:6a:d9:73:d8:92:4c:ed:1e:4f:
f7:82:84:0b:9d:1c:19:99:59:75:86:87:4d:83:d1:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C9:63:55:57:F8:6D:27:33:98:24:FA:6E:57:BE:8B:CC:82:42:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5CFA618E30F11EFA664FB4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:15:e4:8e:a3:cc:2f:c6:3b:d6:09:de:1b:a6:71:a5:de:99:
81:84:31:62:be:c2:e6:4d:02:af:f2:29:e5:7f:36:a9:bd:c7:
53:86:30:24:2b:a5:8b:58:18:6a:76:96:d6:ff:31:ff:e9:71:
13:0c:6c:da:aa:c7:18:04:a1:9e:6a:63:02:de:aa:a9:dc:a2:
b0:ca:75:91:c4:92:e2:94:d6:e8:fd:d5:df:6c:52:de:ca:6e:
5e:dc:60:d5:c0:df:97:be:f6:33:2f:f0:8e:0c:ae:6a:c8:cf:
e0:db:39:07:95:f7:ca:d2:0e:ef:e6:25:2f:75:7f:16:f2:2e:
6a:e2:0d:4c:9b:09:ee:bc:6c:b6:2c:15:8c:e1:a8:39:02:41:
1a:e2:da:49:37:8c:a5:db:77:2d:48:90:28:49:f6:c3:2e:83:
03:bc:04:75:3f:e0:f5:ae:f1:b0:b9:67:0f:50:58:32:e6:30:
3e:f0:3f:af:0e:80:fa:2f:02:b2:14:40:45:43:7b:3d:4a:76:
d5:3f:6f:a8:e9:3f:e6:01:a7:5a:d5:e0:61:f6:e8:07:3c:77:
02:c7:47:67:9d:be:54:c8:a6:cb:4a:eb:ab:91:ad:49:42:1d:
40:dc:54:41:47:99:6d:8c:bc:2e:30:1b:fc:c1:88:26:58:87:
6b:35:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:11 2025 by rpki-client