Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB9D91C2E31D11EF87FC2DAC762E951A.roa
File: CB9D91C2E31D11EF87FC2DAC762E951A.roa (raw, json)
Hash identifier: VvX4QE00EQr/DQBLSWt7cVpuI+59lLyHstj6BNHrU4E=
Subject key identifier: 93:54:9A:68:8A:76:CF:FE:3A:48:B1:C4:13:46:DA:E4:FB:C4:93:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015155
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB9D91C2E31D11EF87FC2DAC762E951A.roa
Signing time: Tue 04 Feb 2025 17:30:58 +0000
ROA not before: Tue 04 Feb 2025 17:30:54 +0000
ROA not after: Wed 30 Apr 2025 17:30:54 +0000
asID: 138797
IP address blocks: 154.210.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86357 (0x15155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 17:30:54 2025 GMT
Not After : Apr 30 17:30:54 2025 GMT
Subject: CN=67a24ed2-41ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:7d:fb:49:a5:51:64:01:91:04:db:cc:4e:
2d:d6:17:07:8f:47:a8:de:86:f9:df:2f:70:53:98:
90:79:74:a2:17:de:77:ea:38:d3:18:3e:93:39:e0:
9c:00:d6:77:b6:78:d7:14:01:d7:b4:49:05:61:ed:
39:c3:3d:48:4c:4e:cb:3a:99:5c:52:13:a4:01:e3:
0b:15:6f:1b:8b:c0:6b:a0:b3:3a:40:9c:07:6e:b8:
21:dd:5d:ca:f2:69:81:00:03:60:56:89:e0:f7:c0:
a1:04:54:48:1e:56:23:32:32:1b:7c:0e:13:1c:84:
a9:ae:90:b0:c4:fd:73:91:5f:8e:91:76:08:43:87:
38:2a:1d:65:0e:f7:fd:c7:ad:04:ba:ef:83:93:f0:
40:45:c1:05:f9:34:c6:d4:26:52:20:9a:5b:67:c1:
f2:35:58:ac:12:ca:17:52:15:45:68:89:b6:84:0f:
e5:73:d9:f6:f4:e9:2b:4c:85:1f:68:6b:c0:d5:6a:
37:cd:14:b6:5a:53:ba:94:5f:ce:e1:34:7d:cf:5a:
58:e1:ff:1e:dc:68:0a:6c:44:87:db:7d:5a:b9:f3:
92:72:1b:1c:8c:a7:f7:d7:aa:9d:cf:7d:67:b9:e2:
09:cf:39:cb:90:72:d0:8b:37:81:79:1e:97:50:c6:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:9A:68:8A:76:CF:FE:3A:48:B1:C4:13:46:DA:E4:FB:C4:93:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB9D91C2E31D11EF87FC2DAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.227.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fa:61:00:c8:4d:e2:b4:fa:f4:d0:af:7c:f2:9e:ce:e5:d0:
4f:10:f3:87:a3:fe:04:f9:a2:62:60:39:27:3f:bc:50:6b:65:
17:1d:04:bb:68:09:37:bd:3d:0b:19:03:bd:c5:1e:ae:2d:52:
1c:00:66:45:75:ed:1c:5c:fc:46:14:fc:94:1e:56:e3:45:5a:
57:2b:66:b7:12:33:fa:08:26:57:6c:7a:49:a6:a9:0e:24:c5:
bf:47:be:eb:8e:72:10:5a:7d:11:b4:8a:ed:5d:5d:12:b9:85:
bb:c6:16:20:6d:93:c6:8a:ea:2c:65:f2:02:5e:3c:9c:f9:11:
f5:52:b2:1b:a6:d0:5e:48:ff:db:d6:8c:09:85:c3:0a:ca:e9:
33:49:ca:b5:96:19:01:39:04:71:d9:c4:35:ed:e2:9a:03:17:
f1:f1:2b:f4:3b:48:a1:67:77:5b:81:bc:a9:38:37:1f:dc:75:
b0:59:ee:0a:97:ee:4b:2d:cc:46:a8:0f:d8:ef:30:5a:58:c0:
85:bb:80:c3:c8:e4:33:e5:60:98:7d:b6:62:fc:cc:88:4f:32:
73:d0:be:7a:fa:3b:e1:50:28:ef:6c:03:65:28:c2:f1:36:95:
22:a4:5e:ae:9f:b5:c1:f2:33:e7:c4:92:1e:49:f7:5a:0a:89:
8a:67:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:50 2025 by rpki-client