Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D055018ED2E511EFB066C898762E951A.roa
File: D055018ED2E511EFB066C898762E951A.roa (raw, json)
Hash identifier: ADXu+EtDerIiRCIPeQ8c+1G0ivI1mj5HUSHXgtfFopA=
Subject key identifier: ED:9C:1B:09:57:72:F6:3B:39:8B:D9:82:37:E8:A7:E2:84:16:A8:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D055018ED2E511EFB066C898762E951A.roa
Signing time: Wed 15 Jan 2025 02:09:56 +0000
ROA not before: Wed 15 Jan 2025 02:09:47 +0000
ROA not after: Mon 03 Jan 2028 02:09:47 +0000
asID: 17561
IP address blocks: 154.222.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80784 (0x13b90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:09:47 2025 GMT
Not After : Jan 3 02:09:47 2028 GMT
Subject: CN=678718f4-0202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:ed:a7:53:7e:21:28:b1:d9:6d:b3:8d:a3:
d4:f2:24:e3:1f:90:21:20:cf:26:bc:33:ec:42:06:
b2:72:3c:11:4e:df:79:41:bf:cd:69:c9:b6:f1:94:
32:35:21:ef:17:30:9c:ab:76:11:fb:3c:ed:26:e9:
e2:b4:45:2a:ec:0f:39:f3:91:60:1a:a3:a4:86:5c:
17:42:05:92:23:cc:b5:e2:7e:ee:df:05:a1:b0:c6:
3a:55:bc:f7:7a:8e:a0:a7:3d:b3:a5:9c:13:0c:16:
58:c0:b2:f5:51:f8:60:53:b5:e0:63:07:b3:56:e3:
fc:ae:26:db:89:c9:19:cb:17:64:88:da:7a:70:6c:
9d:af:be:61:7c:22:e3:d0:36:27:d3:31:cc:f5:c9:
3b:65:09:40:dc:df:1f:fd:0b:b0:d2:a7:15:d7:b2:
5f:97:42:4d:e1:4b:6d:81:94:f1:1b:a3:82:e6:6d:
48:a3:cd:d1:ef:8b:74:5d:4a:59:e5:84:c1:34:f6:
14:96:7f:3e:4c:2f:e9:3e:b2:f5:a9:56:82:92:53:
45:3f:c7:2a:2c:78:83:1e:9c:f3:04:13:3d:4a:65:
9c:56:2f:15:3e:77:79:05:34:90:a9:7e:0e:84:25:
7a:67:80:3d:78:a6:a8:2f:87:32:5a:75:e8:9b:ae:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:1B:09:57:72:F6:3B:39:8B:D9:82:37:E8:A7:E2:84:16:A8:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D055018ED2E511EFB066C898762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.115.0/24
Signature Algorithm: sha256WithRSAEncryption
af:56:42:4e:1e:15:6b:bb:bf:e6:e8:16:80:35:d7:3d:80:05:
31:3c:c0:92:f7:a1:2f:73:0e:7e:6f:aa:6d:3c:48:6f:9e:c3:
02:ca:f6:16:50:50:0f:40:11:94:cb:b7:64:40:da:f3:4c:9d:
03:e0:d8:89:ab:ad:57:ff:7a:36:ab:ac:f7:42:fa:87:4a:0f:
be:ce:1f:6d:af:16:35:ee:2c:a2:bc:3f:54:5d:40:bb:01:13:
aa:0c:bb:39:00:c1:ac:e8:2d:f4:5c:71:1f:47:ba:b2:92:17:
2e:69:63:91:30:81:48:9e:6e:45:16:fd:3a:d4:68:13:19:f0:
a8:3b:96:9e:62:73:5b:21:c8:2e:fc:02:3f:18:bf:c2:e5:9d:
6c:15:5c:bb:f8:27:5d:5c:40:28:e8:b2:25:a9:36:25:52:14:
ad:6a:5f:9a:a1:b3:43:5a:8e:bd:4f:a0:8f:4b:99:ae:1d:1c:
60:b6:80:e7:11:a7:64:78:7c:d5:d1:76:74:e0:e5:4f:77:4f:
1c:e8:81:2e:5d:b4:2a:d6:6e:03:db:3e:d4:dc:d5:4c:ed:ae:
59:03:e0:47:70:76:f0:2f:8d:b7:3e:3f:c7:c7:66:19:b5:b2:
54:bf:5f:58:4f:fd:e8:26:1f:35:07:99:71:5d:1f:a9:ca:ad:
41:ed:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:35 2025 by rpki-client