Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9D50E6C93211EFBADA3A7C762E951A.roa
File: CF9D50E6C93211EFBADA3A7C762E951A.roa (raw, json)
Hash identifier: GKmmsL4PSBCHzklXPo9pCmLPcrJKQyJ/KUhFX5S+bYM=
Subject key identifier: DC:46:71:3F:CA:B0:61:45:B3:95:C6:D5:24:F7:96:1D:E3:F6:B0:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9D50E6C93211EFBADA3A7C762E951A.roa
Signing time: Thu 02 Jan 2025 17:55:54 +0000
ROA not before: Thu 02 Jan 2025 17:55:50 +0000
ROA not after: Mon 13 Dec 2027 17:55:50 +0000
asID: 17561
IP address blocks: 154.222.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78777 (0x133b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:55:50 2025 GMT
Not After : Dec 13 17:55:50 2027 GMT
Subject: CN=6776d32a-1590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:03:59:41:f0:c4:8c:4d:49:db:d1:d3:bc:
5d:0d:2b:4b:f5:fd:4c:5b:25:4e:f1:c7:2a:b3:f1:
09:98:2b:ba:9b:48:19:4f:51:7d:7d:32:5b:93:6a:
9f:50:f6:7f:b8:68:fb:8c:6b:f2:59:2c:f1:cf:30:
d1:59:bc:f2:a0:51:89:4b:e7:77:ee:bc:1b:8f:95:
7c:2f:b2:98:2e:1d:f3:d2:ed:aa:9d:3a:b4:69:a3:
6a:23:ac:b5:df:5d:f1:c7:92:19:f8:00:e8:82:89:
a0:83:b1:d9:f8:23:33:ce:a9:88:0c:a7:1d:c8:21:
f5:22:5b:1b:0b:d3:75:2e:5d:4a:49:c7:2b:bf:8f:
47:ef:01:6b:56:4e:96:e2:5e:45:0b:b5:06:b9:f6:
cc:39:f1:71:7b:3c:d0:52:21:3b:30:0a:07:bb:e6:
b8:8c:0b:e2:cf:c0:56:b6:1e:93:72:2c:26:b8:16:
d1:ca:b4:90:6b:8a:c8:1e:d7:e3:79:70:77:68:30:
38:47:10:c2:12:21:cf:36:b2:61:f8:66:0d:76:51:
33:08:62:e6:40:ac:8a:a1:79:cd:b8:0e:b2:d6:ad:
33:7e:74:3a:bd:85:8c:79:aa:1b:15:82:07:3a:94:
1b:23:cc:31:f7:60:a4:c6:11:8e:68:0f:4a:07:e5:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:46:71:3F:CA:B0:61:45:B3:95:C6:D5:24:F7:96:1D:E3:F6:B0:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF9D50E6C93211EFBADA3A7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:40:b0:df:5a:f0:be:7f:0d:22:a1:94:04:31:f3:b0:d2:00:
33:8e:2b:d4:0e:bf:a4:0b:50:7a:6e:34:3e:cb:f7:4b:e6:a9:
e8:6a:d7:ee:77:7b:d9:b8:dc:3e:a6:3f:d0:6f:19:24:fb:ae:
c0:52:17:cb:d0:1e:52:3b:4b:47:61:91:b4:69:9f:28:0e:fe:
77:d1:ae:f6:e4:27:cf:3f:d1:ee:8d:fa:9f:72:29:6c:c9:a0:
5c:9c:e5:e6:ec:f4:c3:60:71:3f:6d:88:70:ee:ad:a8:07:7f:
0e:dc:12:0a:cc:dd:1b:05:63:87:8a:2f:29:52:89:79:1b:fb:
08:a1:37:14:32:da:e2:38:5f:0c:e6:a2:d1:8b:61:91:e8:53:
c7:4c:f4:67:28:9e:2e:ac:e4:68:67:2a:8d:f3:40:26:b2:50:
56:9d:3d:3b:09:e1:e0:87:e4:7e:e1:0b:81:8d:13:71:c5:7c:
4e:8b:6c:a7:1b:87:2c:d1:df:75:c9:85:a0:83:a1:f4:22:34:
44:ae:dc:27:b1:f1:2c:6a:7c:7d:65:ca:b5:1d:9a:2b:13:90:
2a:58:bb:e6:ce:74:30:24:82:cb:ee:3e:12:35:cd:18:a9:93:
92:f0:7b:c9:24:b3:9b:c1:9f:05:d8:c6:69:36:5f:25:d5:c9:
dd:9e:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:53 2025 by rpki-client