Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D01C8C92E11EFB6B7C262762E951A.roa
File: C34D01C8C92E11EFB6B7C262762E951A.roa (raw, json)
Hash identifier: lJGpAOP8x532tI/2zaZFYGO4dHPQ+qIBtXabz0xtjdU=
Subject key identifier: E5:0E:38:5D:02:DE:3E:F0:E1:6F:CB:27:4E:66:71:E7:54:F1:7A:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013399
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D01C8C92E11EFB6B7C262762E951A.roa
Signing time: Thu 02 Jan 2025 17:26:55 +0000
ROA not before: Thu 02 Jan 2025 17:26:52 +0000
ROA not after: Mon 13 Dec 2027 17:26:52 +0000
asID: 17561
IP address blocks: 154.222.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78745 (0x13399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:26:52 2025 GMT
Not After : Dec 13 17:26:52 2027 GMT
Subject: CN=6776cc5f-27dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b0:4c:12:31:be:20:08:59:e2:b2:3e:ff:9c:
84:75:fa:98:09:ed:be:0c:0e:3a:bc:da:f3:53:2d:
47:9b:8f:b9:bc:d2:a9:92:7f:46:8b:6d:d2:ba:ea:
43:70:a2:bc:31:e0:ef:b0:d4:83:23:c1:af:16:25:
23:1b:c8:d2:2e:4f:27:95:7b:c1:04:3c:59:10:cb:
af:45:57:31:ed:bd:b5:5e:0a:ad:9f:d0:cd:52:12:
20:43:6d:9d:46:9b:83:d2:1e:d6:33:10:ea:c7:e9:
fe:77:bd:21:a2:a0:53:61:e7:90:22:ce:6f:d8:0b:
84:2e:33:af:40:6d:4a:37:53:23:7c:bf:38:50:a7:
03:dc:e8:f9:09:b1:b3:1c:f0:19:d2:9a:3c:90:f4:
09:ec:07:69:6c:da:f1:d2:bd:0e:4f:46:4e:cb:42:
d9:82:fa:27:84:e7:c6:1b:28:12:8d:0a:f3:10:8e:
83:05:fb:62:ac:40:90:8f:c5:8f:49:0b:a0:b2:bd:
2d:d6:4e:3d:32:c3:69:c0:56:fd:af:a0:01:ea:d1:
36:ef:ba:a8:bf:80:5a:89:d8:80:20:5b:96:e5:9c:
35:d9:de:a7:52:7d:d4:a6:f0:7a:b5:26:6e:8c:d8:
07:4a:2f:1b:7e:60:fd:06:c6:df:43:43:37:a3:61:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0E:38:5D:02:DE:3E:F0:E1:6F:CB:27:4E:66:71:E7:54:F1:7A:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C34D01C8C92E11EFB6B7C262762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.153.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d9:51:57:31:49:d0:57:93:df:26:c1:d2:64:6b:e3:7a:cf:
f1:1c:b5:c5:a5:de:4f:e0:e9:ce:1a:31:9a:e3:2b:66:9e:be:
f0:59:1d:d4:40:16:82:79:dd:70:cc:2c:97:16:82:62:11:2d:
b8:31:33:07:9a:59:d0:37:ff:39:fc:13:97:1a:bb:c0:ef:b6:
28:0d:03:fb:15:2d:a7:2e:76:1b:0f:a1:14:8f:38:92:ed:4d:
63:31:85:c8:6e:6c:33:c9:63:55:6b:46:8d:ab:3d:27:b0:b6:
8f:fb:4a:96:07:fe:e9:52:b1:d1:00:78:a0:6c:bc:d0:58:4b:
cf:81:cb:cf:86:b1:99:14:cf:79:de:b5:82:6b:1f:62:27:67:
e7:98:8e:93:9e:7a:cb:9f:e1:d7:02:7a:67:ce:3d:1f:d1:67:
bb:91:f2:77:7a:f0:bf:1f:bb:50:6b:01:71:fc:07:df:79:bf:
c7:cc:e1:de:fc:d3:a7:5d:7c:fe:47:51:6e:0e:1c:17:6e:ba:
08:ed:b5:07:5a:a2:55:8c:22:56:b7:06:28:46:ae:0c:18:47:
2f:bd:f0:05:e9:90:e7:e5:d2:ab:28:f1:ed:75:5f:39:bc:cc:
dd:91:f0:a5:05:7e:64:62:5f:e3:c6:c1:61:68:63:21:63:fb:
3e:bf:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:08 2025 by rpki-client