Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E3444EF35711EFA4CBAC8F762E951A.roa
File: E3E3444EF35711EFA4CBAC8F762E951A.roa (raw, json)
Hash identifier: Bi8nSlDfJVPMaXAvN9fsAE1IkAn1mQUpk/zopwDNv5A=
Subject key identifier: 20:43:DA:73:E6:D4:D3:27:77:BD:FD:7B:6C:F9:9B:4F:2D:4C:57:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E3444EF35711EFA4CBAC8F762E951A.roa
Signing time: Tue 25 Feb 2025 09:07:08 +0000
ROA not before: Tue 25 Feb 2025 09:07:05 +0000
ROA not after: Mon 07 Apr 2025 09:07:05 +0000
asID: 138915
IP address blocks: 154.223.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89566 (0x15dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:07:05 2025 GMT
Not After : Apr 7 09:07:05 2025 GMT
Subject: CN=67bd883c-2c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:ab:c5:91:ad:71:1b:e6:33:44:ce:51:cb:
82:45:ca:ea:53:93:cb:b3:e9:f5:00:50:78:f5:51:
0b:9f:ff:f2:97:8a:12:2a:c3:39:9b:8e:fa:6e:a5:
2c:a4:13:b1:b0:c1:26:55:31:22:cc:ce:27:05:a1:
65:04:a3:1b:85:6b:21:c7:54:2c:99:27:f7:c0:dc:
27:24:9f:47:f2:33:f7:55:d4:94:35:42:20:14:04:
32:70:90:01:d8:88:66:b7:4d:65:e9:bf:16:83:6d:
f4:01:18:b5:15:53:df:dd:7c:01:4f:97:b4:33:9a:
d2:1a:98:a9:bc:64:6c:d5:cc:1f:d4:bf:fa:69:03:
49:d4:bd:db:bc:1d:ab:34:1a:5f:16:ed:fc:8a:ba:
a4:cf:87:3f:fb:5e:fd:c1:08:76:19:db:69:34:66:
27:fa:ab:65:64:47:e8:42:0f:16:03:74:d0:9e:f1:
f4:a1:87:ce:77:e4:97:2f:17:fd:45:44:b5:51:07:
87:21:87:c7:4e:54:7a:37:00:2f:10:ad:8c:b4:6d:
80:38:c3:c2:d9:bb:7f:3f:f3:91:63:af:c4:9c:31:
51:9a:30:d7:2c:44:cc:e6:03:9a:4b:88:43:5a:03:
8b:42:3b:23:6c:f2:a9:32:d2:f9:e2:71:45:64:d8:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:DA:73:E6:D4:D3:27:77:BD:FD:7B:6C:F9:9B:4F:2D:4C:57:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3E3444EF35711EFA4CBAC8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.21.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2b:f7:c7:ad:13:79:76:99:13:7a:d4:f0:ec:86:8f:11:ad:
e2:08:57:c4:2b:38:a6:e0:82:2f:b0:b2:92:22:2a:c8:4c:af:
cb:03:c3:79:08:54:be:5c:ce:99:e7:ea:32:be:fb:71:f5:f8:
fa:40:0a:4b:f8:5f:f1:03:75:7d:84:49:d0:5f:cd:74:9e:80:
c5:82:ff:33:87:1b:f3:9f:0b:cb:6a:cd:ee:bd:14:ee:f6:8e:
7c:c9:99:73:f0:76:3f:bc:51:a5:56:5c:55:4e:6f:6a:89:b4:
21:4e:f9:1d:5b:c9:d7:30:e0:09:fe:37:c0:62:8e:6c:8e:23:
88:81:ca:e2:1a:12:7b:54:16:21:00:61:50:d3:5c:0f:e2:39:
47:10:c4:a2:a6:df:66:90:9f:7f:5b:51:55:94:0a:f7:b3:38:
c0:94:38:71:09:67:2d:7b:8f:59:f6:7b:01:23:48:17:c0:f3:
df:9f:9e:1f:b1:8f:20:c4:5e:8c:3e:0d:df:01:70:50:35:e3:
c6:0d:e4:60:4c:0d:b0:50:02:a6:4c:e5:b1:82:13:8e:9e:80:
55:12:14:15:9c:9b:4c:f4:6e:72:5b:ff:26:5c:c1:ec:fa:27:
f6:bd:e1:07:3b:90:87:4a:d8:45:06:2e:4d:43:90:fe:b6:e6:
d9:6e:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:57 2025 by rpki-client