Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89D38D0F35911EFA94B879D762E951A.roa
File: E89D38D0F35911EFA94B879D762E951A.roa (raw, json)
Hash identifier: 0s988+OQcYI7XyMS2aONWuIiaSqlMmOGL694WHVWha0=
Subject key identifier: 68:15:8C:3E:CD:FE:75:1A:BE:42:B7:DE:6E:43:F3:72:2E:D6:37:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89D38D0F35911EFA94B879D762E951A.roa
Signing time: Tue 25 Feb 2025 09:21:35 +0000
ROA not before: Tue 25 Feb 2025 09:21:31 +0000
ROA not after: Mon 07 Apr 2025 09:21:31 +0000
asID: 138915
IP address blocks: 154.223.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89592 (0x15df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:21:31 2025 GMT
Not After : Apr 7 09:21:31 2025 GMT
Subject: CN=67bd8b9f-3c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:b5:05:2c:6d:f4:68:7e:f0:f6:46:7b:7b:
fa:b6:0c:91:3f:30:a1:4c:82:1f:3e:15:1b:19:64:
8a:ee:52:95:0a:38:04:ca:0d:3e:5b:4b:6e:13:47:
cd:d9:e8:c9:9c:2b:c1:1e:df:03:49:7c:96:53:77:
8c:b4:e8:bc:6e:6a:c5:4b:a4:86:5e:90:df:7c:24:
14:c9:78:f1:b1:33:f5:3d:bb:85:eb:0e:ca:f4:1f:
39:b0:b4:1d:69:49:ff:45:be:a9:a3:93:86:74:71:
d0:6c:4c:bd:be:1e:11:a4:a1:47:f1:46:56:1c:31:
6f:98:e8:d9:71:c9:9e:d1:13:9d:1d:1b:04:c9:9b:
6f:1f:a2:42:88:a5:d7:c0:58:7e:fb:36:cc:de:30:
a5:f7:b0:b7:2e:5e:32:b7:18:7a:09:5b:5c:6e:17:
56:6b:33:4e:19:ba:8b:2d:06:8a:ff:33:ea:3e:0b:
4e:c4:07:61:1c:91:d4:88:dc:b7:ec:11:95:d5:b5:
38:93:4b:f2:50:b2:09:5d:17:52:13:7c:e2:d1:6f:
33:6e:7e:82:52:2f:10:39:35:2b:4c:39:fd:27:c7:
04:31:4f:d7:59:79:7b:58:f6:bc:f4:bb:c4:ce:e1:
e9:b0:2b:65:4d:5d:f4:79:67:04:41:b0:e0:52:4b:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:8C:3E:CD:FE:75:1A:BE:42:B7:DE:6E:43:F3:72:2E:D6:37:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E89D38D0F35911EFA94B879D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.30.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:4b:f3:93:0a:38:57:19:cb:28:3c:d8:9a:6c:27:33:1c:13:
2f:7e:86:2a:de:ac:d3:26:ef:22:25:95:09:85:3c:6d:a5:d0:
1e:57:3b:49:3a:34:2d:e2:5a:50:dd:dc:20:4b:02:13:9d:c7:
59:2c:8d:40:ad:80:43:40:2f:cb:0a:1a:f5:a0:cc:16:0e:44:
a9:e8:9c:92:f0:44:bf:8e:f6:bc:77:3a:6e:60:a9:84:d3:79:
d6:13:3d:1e:fc:97:0a:32:84:bd:1e:4e:d6:3b:ff:8f:2e:57:
db:3f:82:54:34:c0:6a:40:4b:8c:57:9c:89:22:f1:45:f0:a5:
57:6a:1e:7b:25:56:74:bc:3c:a5:09:35:b1:ab:ca:04:24:a4:
8e:91:18:54:17:81:c0:5d:b6:f9:b2:1f:84:58:2a:61:05:fe:
35:04:00:8b:a9:07:e8:22:58:d0:8e:d3:3a:b6:97:f6:aa:91:
05:2b:c9:57:9e:a7:4c:71:27:98:e1:ab:3f:3a:1a:07:1d:09:
45:98:9c:e5:d7:d0:27:38:af:19:8c:2c:c0:10:45:b5:d2:37:
4f:e5:d4:81:43:49:a1:3a:e8:58:27:8c:3b:b8:3b:4b:dc:37:
49:17:71:6c:d8:a5:34:73:16:ef:19:2f:ef:81:ff:5f:18:5f:
6d:4e:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:40 2025 by rpki-client