Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C835A5E6E31911EF96CC8294762E951A.roa
File: C835A5E6E31911EF96CC8294762E951A.roa (raw, json)
Hash identifier: ldPQmMTxsBLFAzuTrLUC0KFOXjorw/pX6kDgbTceLBQ=
Subject key identifier: 93:F2:47:5D:1D:02:21:FC:65:B9:9F:D7:69:D0:A0:AC:EE:36:6B:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01513D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C835A5E6E31911EF96CC8294762E951A.roa
Signing time: Tue 04 Feb 2025 17:02:14 +0000
ROA not before: Tue 04 Feb 2025 17:02:10 +0000
ROA not after: Wed 30 Apr 2025 17:02:10 +0000
asID: 18229
IP address blocks: 154.210.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86333 (0x1513d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 17:02:10 2025 GMT
Not After : Apr 30 17:02:10 2025 GMT
Subject: CN=67a24816-85a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:28:86:4e:35:52:31:4e:eb:c6:51:b0:11:
4f:ac:a9:e1:5c:bf:39:77:d6:3a:5c:fd:57:1f:f7:
8c:3b:67:de:b7:13:52:99:74:52:8f:3a:00:be:ee:
d9:95:79:fa:4c:14:30:72:b5:4d:dc:cf:b4:7e:0d:
b0:2a:fe:ea:d3:4d:f8:9c:80:e6:c6:f6:29:ec:36:
38:7a:f8:d2:66:58:a5:91:ba:81:14:9f:af:be:54:
51:88:71:e1:68:69:e6:2b:ac:01:5d:0b:2d:37:1c:
f0:62:1d:22:21:02:7b:1d:5f:5a:7e:7d:7b:94:4a:
2f:a9:43:70:bb:7f:da:83:2c:b8:c2:5e:d8:de:96:
12:cf:42:cb:f8:8c:23:44:1b:9c:9c:3b:85:70:5f:
8c:ba:cb:2d:35:82:d2:ef:10:14:19:5a:a2:c0:e7:
c0:d3:fa:60:1b:00:b7:b3:aa:31:6e:eb:44:64:6b:
fa:ae:ef:98:60:c0:ca:1a:7b:3f:bb:8e:3c:56:ef:
bc:89:28:79:7d:da:04:58:7c:c8:5f:0b:fd:18:83:
df:8c:c6:44:cb:fb:c6:b1:7b:10:24:ce:91:b9:a4:
d1:54:3d:bf:c5:00:8c:55:86:0f:0e:4a:98:b6:08:
81:99:d6:d1:a5:d8:aa:de:3e:4e:d7:98:bd:5a:e2:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:47:5D:1D:02:21:FC:65:B9:9F:D7:69:D0:A0:AC:EE:36:6B:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C835A5E6E31911EF96CC8294762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:bf:cb:63:65:99:fa:e8:4e:0d:b2:49:b8:29:58:33:01:09:
05:ed:d4:62:53:26:e9:10:f8:b5:63:b8:28:e4:3b:8d:71:5b:
93:af:01:f3:d6:40:e3:c1:ed:7a:cd:d7:4b:8f:c4:c2:dd:58:
35:26:cd:4e:36:1a:40:bf:7c:eb:39:7c:49:6d:41:b3:9d:10:
ce:aa:8f:09:a5:e6:c9:a7:34:5c:11:8f:0b:21:7f:b7:86:e5:
a2:68:c1:19:7c:33:ca:f0:f1:96:3c:8e:28:ae:ae:7e:6f:31:
9c:e5:4e:2f:05:5e:ed:47:4a:84:cd:c6:8e:c0:e3:fe:ba:fc:
7c:09:8e:30:6b:c8:ec:a8:72:c1:1b:1e:f3:f9:5a:9b:b4:41:
08:0a:4c:6f:df:64:09:f9:38:53:92:13:0d:ae:37:e9:21:b3:
eb:69:d4:6c:f7:03:bc:7a:92:c8:2e:22:cc:36:7d:26:d0:0e:
fa:3f:ce:8d:8f:09:d2:73:eb:0f:99:ad:71:0a:c9:a2:6b:2e:
b4:8f:6f:1f:3b:54:88:0b:a7:11:db:c6:ef:d5:90:27:a1:6e:
84:65:39:98:9c:81:27:a4:45:c2:a9:9e:f9:42:de:e0:c1:4f:
f0:c4:c2:d2:28:cb:71:ea:48:0d:92:37:42:84:39:d1:77:9c:
a6:0a:1a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:34 2025 by rpki-client