Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616638AC90F11EFA8C82BA1762E951A.roa
File: E616638AC90F11EFA8C82BA1762E951A.roa (raw, json)
Hash identifier: /ZYIp68IdGEREwM5dqkbI2uEQ/npoYfOan4WA78LKyI=
Subject key identifier: F8:82:7E:85:7F:25:F3:48:65:70:18:4E:F3:C4:EE:02:0D:E4:38:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01329F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616638AC90F11EFA8C82BA1762E951A.roa
Signing time: Thu 02 Jan 2025 13:45:59 +0000
ROA not before: Thu 02 Jan 2025 13:45:56 +0000
ROA not after: Mon 13 Dec 2027 13:45:56 +0000
asID: 17561
IP address blocks: 154.221.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78495 (0x1329f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 13:45:56 2025 GMT
Not After : Dec 13 13:45:56 2027 GMT
Subject: CN=67769897-1b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:84:17:c8:19:44:83:0a:a1:ba:ef:23:ee:
3a:b2:0a:c8:30:de:39:03:bd:ec:82:48:1e:6d:ea:
c9:2c:ce:86:ba:75:0c:c8:eb:dd:f3:21:80:50:73:
11:cd:74:94:91:4d:63:34:c5:a6:90:54:4f:9f:46:
e0:37:69:70:b5:90:2d:06:8b:4d:f2:0c:1c:15:98:
37:f5:b6:79:bc:89:2e:54:fc:8b:a2:0c:48:eb:fb:
e2:9c:a8:4b:5b:a6:1c:de:69:0a:d2:62:1c:d0:12:
98:19:bd:39:35:e0:3a:c2:b8:1e:85:89:f0:bc:bb:
be:7e:67:b2:6e:b1:e4:8d:83:61:92:7f:3c:9e:7f:
e6:4a:65:c8:01:0c:bc:ba:a5:09:6c:82:4f:1b:4d:
40:d0:4c:20:85:34:59:3b:68:5c:2d:66:26:7f:d6:
4b:27:2c:4f:0d:36:5f:6e:3f:d7:18:06:7f:e3:2e:
b1:e5:02:f9:a0:88:3d:a5:2e:6c:58:ce:43:6b:1f:
26:c4:f1:6b:ef:8f:b9:8f:83:a0:e9:20:7d:b8:64:
ee:b6:21:3d:f8:5b:54:7f:35:f9:5e:60:15:16:dd:
9d:ac:9f:e5:41:6f:06:10:53:fc:66:97:ad:ef:68:
b3:ee:28:f4:56:91:c4:89:d8:46:8c:b6:57:88:00:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:7E:85:7F:25:F3:48:65:70:18:4E:F3:C4:EE:02:0D:E4:38:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E616638AC90F11EFA8C82BA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.220.0/24
Signature Algorithm: sha256WithRSAEncryption
84:aa:ef:cf:8f:fb:07:d3:d6:92:11:8a:1a:74:88:6d:ae:22:
81:84:d2:5f:b7:49:89:3c:d6:6e:4d:3f:cb:2e:fe:6e:a3:0b:
39:93:81:17:28:79:10:b0:74:70:8a:1b:0b:7a:57:71:db:c9:
c9:5d:0e:f1:1f:fe:fe:91:35:2a:88:1e:47:ff:50:ed:e7:61:
03:ac:5b:a0:c6:9b:39:09:34:29:04:7e:98:8f:0d:65:8c:f5:
2e:d8:d7:11:ff:aa:3b:e4:4a:09:80:ec:94:16:27:06:75:b1:
16:91:6a:6a:a4:34:05:70:5a:8d:da:33:98:e1:e9:22:33:1a:
2b:37:83:00:cc:9b:9f:af:29:12:f5:eb:b0:fe:01:7c:ac:89:
96:1d:56:81:6b:a5:48:7e:b4:1a:04:71:0f:15:cf:6f:af:07:
5a:a2:8b:a3:e1:f8:5f:0b:24:71:2d:5d:1f:01:de:f3:52:34:
60:63:2b:e7:78:7a:bf:a8:d4:a0:d4:40:2f:07:0d:51:94:cf:
f3:27:26:ac:aa:e0:4a:3e:09:14:0e:8e:b7:d5:81:8e:c9:a7:
7f:52:b7:c3:ce:dd:bd:12:e3:ff:b0:45:84:bb:ed:47:3a:57:
ca:1c:51:e8:bc:c3:7a:23:e2:72:c7:29:22:85:3c:43:ed:82:
fa:f1:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:52 2025 by rpki-client