Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBA8469AC93511EFAE9B8E8F762E951A.roa
File: DBA8469AC93511EFAE9B8E8F762E951A.roa (raw, json)
Hash identifier: mEfLvBKYnrXnVtQRsy5HhAafHaawE5f360mL5c4AyW4=
Subject key identifier: 3A:1C:9F:DF:8D:B1:97:51:D4:00:42:10:6D:6C:59:1C:F5:97:8A:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBA8469AC93511EFAE9B8E8F762E951A.roa
Signing time: Thu 02 Jan 2025 18:17:43 +0000
ROA not before: Thu 02 Jan 2025 18:17:39 +0000
ROA not after: Mon 13 Dec 2027 18:17:39 +0000
asID: 17561
IP address blocks: 154.222.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78801 (0x133d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:17:39 2025 GMT
Not After : Dec 13 18:17:39 2027 GMT
Subject: CN=6776d847-31f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:25:66:9d:6a:36:dd:4f:03:98:a5:ce:98:
b8:dc:12:90:27:50:4a:91:02:1b:17:ee:fa:13:be:
85:a6:15:e3:7a:2a:8a:52:2c:1f:b1:c6:07:2b:ab:
78:76:fe:b8:c1:0b:ba:aa:1a:c5:76:41:91:0e:2a:
38:96:2f:d7:d9:6c:5f:98:c9:be:a7:e9:ab:eb:af:
1c:c9:f6:0c:3e:96:97:95:fe:b3:99:f3:bb:dc:e2:
9b:f8:d8:1f:5a:b6:e5:e9:c7:46:a0:02:83:71:91:
ff:74:04:f5:4b:ff:2a:92:28:65:24:b1:29:c1:a9:
3e:ba:25:50:13:06:7a:0e:1e:45:8d:8b:b6:3a:b6:
15:c9:91:f7:91:31:0e:e3:78:34:a9:8d:49:46:c3:
87:df:ef:0d:ef:3d:0b:f3:93:88:d7:5a:46:bc:2d:
55:cc:57:38:7a:40:2d:10:b2:43:36:04:cb:45:bb:
be:c9:f1:14:4e:65:0d:05:02:6b:de:76:c8:1c:f2:
08:d2:64:f3:1f:f7:d1:31:f4:63:29:ad:60:f4:a5:
b3:58:55:0d:27:f0:91:dd:7d:bf:93:bf:79:7c:b7:
b9:44:64:6c:75:18:c7:1e:fa:33:66:61:66:af:68:
63:99:77:2c:39:34:8f:aa:6f:b5:fb:cd:d0:f6:42:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:9F:DF:8D:B1:97:51:D4:00:42:10:6D:6C:59:1C:F5:97:8A:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBA8469AC93511EFAE9B8E8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.183.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5f:4b:25:2d:52:9a:ad:48:71:67:f4:43:4b:8b:bf:e3:85:
56:60:35:39:49:5d:c3:71:c1:3d:d7:04:42:2b:69:4d:91:c0:
2c:38:ba:f1:2a:85:8d:68:f2:19:4d:61:48:36:46:90:91:01:
6b:bf:6a:78:bb:bc:4c:27:1e:8e:2d:1a:3d:78:98:8b:4b:9f:
02:f6:c9:8e:ee:1a:b7:b3:9c:b3:7e:f4:93:6b:8c:6f:18:8d:
50:4a:e9:a0:0a:29:45:87:41:35:8d:a4:2d:b5:58:47:ca:6c:
0a:b7:fc:71:cf:ea:38:b6:95:c6:a9:d2:19:d4:c1:ca:9f:9f:
84:96:a1:fe:a4:f0:ee:33:bf:69:60:2e:fd:9b:ff:04:f7:f1:
83:23:31:39:71:3e:b9:12:5f:d3:50:eb:4e:1f:04:9e:c1:ee:
ed:87:12:df:c7:1a:a6:39:5c:23:17:51:72:e9:c7:6a:3a:71:
bb:b3:c1:5b:71:57:4b:f6:32:3f:84:33:d5:32:1b:de:2c:48:
d9:b6:e8:b9:af:ea:f5:f1:74:5e:62:16:1b:a4:a5:fc:38:bc:
ec:3a:5b:62:c4:6b:5d:a4:c5:55:ab:0a:52:9a:e5:2e:e2:e9:
3c:c1:de:cb:73:04:f0:21:c5:2c:2f:dc:a0:4d:6b:4e:14:68:
88:b2:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:41 2025 by rpki-client