Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC3C0C2C8BC11EF813ABE9A762E951A.roa
File: DDC3C0C2C8BC11EF813ABE9A762E951A.roa (raw, json)
Hash identifier: YYsRqBPcZdLjcFBspq8HVUlfM54ufmZryLAG7FmPRj0=
Subject key identifier: 1D:B2:33:5C:65:47:73:06:7C:5A:44:64:39:A7:EE:A4:DD:F6:89:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC3C0C2C8BC11EF813ABE9A762E951A.roa
Signing time: Thu 02 Jan 2025 03:51:37 +0000
ROA not before: Thu 02 Jan 2025 03:51:33 +0000
ROA not after: Mon 13 Dec 2027 03:51:33 +0000
asID: 17561
IP address blocks: 154.221.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78302 (0x131de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:51:33 2025 GMT
Not After : Dec 13 03:51:33 2027 GMT
Subject: CN=67760d49-b57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:28:6d:c4:ed:aa:7d:46:7a:56:5f:be:67:
46:ed:ad:f4:45:19:bf:ba:4d:78:0d:4d:85:60:13:
d3:5e:8c:b2:ab:2e:b6:ff:e0:f8:a6:32:c6:fd:fa:
f7:29:de:6c:30:33:ac:de:a2:99:5e:65:8b:33:bc:
bf:10:54:da:da:06:85:53:a2:da:a3:e8:37:26:4b:
71:76:40:ca:a9:18:15:25:d5:fd:f9:52:dc:6c:09:
75:62:35:55:86:47:af:bc:a8:05:c9:0f:a7:38:70:
bc:a8:c9:2f:6d:9a:5f:eb:0d:8d:51:9c:cd:b3:1a:
3a:da:0c:6e:75:c8:18:bc:3b:c5:15:65:05:86:05:
5f:c4:5f:f3:f4:80:60:13:76:6d:eb:dc:2f:87:8d:
98:6c:80:94:4a:49:a1:42:5f:e7:7d:6a:d1:27:40:
2f:ac:56:f0:0b:aa:0f:12:2e:69:9b:e3:48:36:cb:
7d:75:b9:e3:95:7c:62:2f:a7:6f:a8:26:29:db:ef:
74:4a:67:d5:7a:4c:48:d5:95:d7:5c:11:98:eb:b7:
a2:c1:24:3c:43:16:75:e8:f9:e4:84:37:34:74:ea:
ac:f9:a5:cc:c9:58:01:d4:f6:71:2f:84:c2:4b:66:
a7:19:46:bb:cf:53:ef:86:9a:71:c8:31:09:24:fd:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B2:33:5C:65:47:73:06:7C:5A:44:64:39:A7:EE:A4:DD:F6:89:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDC3C0C2C8BC11EF813ABE9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.47.0/24
Signature Algorithm: sha256WithRSAEncryption
68:77:0b:1d:88:6e:46:bd:92:ef:8c:d8:5c:15:9d:a4:95:d8:
8d:6b:7f:51:be:91:1f:a7:32:fe:ed:19:21:47:95:85:f4:77:
12:cb:3b:38:4a:54:88:eb:7f:f4:5b:b9:f2:02:f6:b5:e1:c3:
23:a1:04:6a:2e:73:1f:4a:52:d0:1e:38:1c:5d:95:2e:d6:e5:
f9:2d:35:34:91:dc:a2:59:9b:21:2a:9c:73:a4:c7:ee:cc:6b:
73:c9:00:88:2e:ff:9d:45:a9:43:27:7c:4b:a1:7d:32:25:90:
7a:e8:28:fa:17:95:5a:2c:33:53:94:2e:5a:ba:f1:f3:16:8b:
7f:b9:87:e1:a0:e1:44:f8:53:1c:50:47:aa:71:ad:4a:c1:da:
38:d9:83:fd:a2:fe:b2:c7:24:d3:de:04:c0:e0:74:4e:31:cb:
81:7a:19:78:4b:b7:da:d8:60:38:1f:70:a8:91:76:cf:e1:e8:
d8:ef:08:20:3c:88:80:bb:2e:9a:8f:50:6e:32:fc:f5:47:a6:
15:2c:34:1f:3c:13:c5:af:a8:10:fb:ab:d1:9a:1b:28:a1:c1:
20:eb:c4:48:6f:70:cb:50:c4:8b:7d:37:3e:dc:aa:89:20:c2:
9b:fd:7d:dd:a5:a0:39:17:e4:d3:2a:08:d4:e8:30:e5:5a:f5:
35:c8:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:52 2025 by rpki-client