Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA45A1EAE2C911EF8A5F6B81762E951A.roa
File: EA45A1EAE2C911EF8A5F6B81762E951A.roa (raw, json)
Hash identifier: us2KJjZHiKl+7Db++YDBXD9U3Uzf6OWUdFKRAiQPip4=
Subject key identifier: B8:7D:3F:2E:0E:C0:55:CC:8D:9F:83:C6:6F:4D:7A:60:6C:D3:24:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015078
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA45A1EAE2C911EF8A5F6B81762E951A.roa
Signing time: Tue 04 Feb 2025 07:30:32 +0000
ROA not before: Tue 04 Feb 2025 07:30:28 +0000
ROA not after: Wed 30 Apr 2025 07:30:28 +0000
asID: 18229
IP address blocks: 154.206.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86136 (0x15078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 07:30:28 2025 GMT
Not After : Apr 30 07:30:28 2025 GMT
Subject: CN=67a1c218-1e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:72:30:37:06:2f:d9:b8:f6:f9:90:03:6b:
88:fc:83:b9:08:de:c8:2a:de:3f:4c:c9:c7:40:8a:
5d:cf:f9:0c:92:ed:40:3a:2d:39:aa:bc:0e:26:31:
5a:97:e6:19:b4:47:bc:ab:b4:5c:24:f6:99:61:14:
ee:ba:0b:38:4b:15:26:55:95:77:e1:1b:0e:df:83:
65:de:68:eb:20:89:c8:82:5f:9f:cb:17:fa:d0:c5:
0a:f3:71:c0:15:8e:2a:52:69:8d:2a:54:f2:c3:59:
4d:e5:b8:72:38:88:27:c7:e2:a3:3d:38:8e:5c:03:
ca:e8:07:9c:44:f6:a9:af:64:63:00:52:2c:fa:c7:
71:86:49:26:92:67:25:57:4c:9c:6a:31:77:0c:d2:
ee:44:61:5c:ca:64:32:9e:9d:67:36:bf:cd:ca:f4:
d4:67:98:94:8e:d8:e2:a4:f1:83:2d:4c:c9:8b:89:
9f:1a:bf:56:69:1f:9e:81:a0:17:7a:5b:65:7d:07:
f6:0d:cb:12:f0:a1:d3:2d:d4:ee:d0:f4:f3:08:08:
a2:1e:93:e6:b6:43:89:c5:83:7d:4a:59:2c:5e:11:
aa:66:5c:ad:1f:40:89:58:73:d9:ad:72:ff:00:db:
7f:47:42:c9:f5:0c:7d:76:67:9c:cb:33:10:e3:5f:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7D:3F:2E:0E:C0:55:CC:8D:9F:83:C6:6F:4D:7A:60:6C:D3:24:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA45A1EAE2C911EF8A5F6B81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.22.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1d:9f:fa:04:2b:f8:99:01:5d:42:47:83:99:12:73:ae:ac:
62:49:6b:46:15:76:34:d6:aa:ce:c0:30:81:d6:cc:44:fd:5c:
f8:e8:50:0e:e9:30:1e:f6:d3:d5:b4:4b:ce:12:a7:b7:42:2b:
98:ed:0f:92:fd:67:80:dc:ca:4f:c8:53:71:bb:c5:21:05:99:
d2:7d:f3:30:b4:e8:fe:ae:c9:43:af:32:f5:77:f9:79:86:5e:
1f:9f:f7:d6:6b:b1:b5:26:b9:6e:6b:c0:a4:38:d9:d6:81:2b:
21:74:ce:ad:49:80:28:c6:35:74:b9:1d:7f:3b:e4:6f:b8:ba:
23:20:dd:ba:86:5e:66:20:2d:ca:23:45:fb:c9:46:af:88:83:
11:1c:be:05:d0:80:b9:d7:e6:3b:05:a4:24:51:3f:0b:01:a5:
f5:9d:a8:46:d9:19:9c:dd:98:ca:ee:66:a6:cd:d1:3e:0b:5e:
83:e0:9e:50:a9:a3:d1:0b:11:07:ff:67:6c:ce:62:0b:bb:a9:
e6:e8:b4:6a:d9:12:39:99:6a:c9:4c:e6:44:42:73:24:7f:3b:
64:7c:ac:c1:34:2e:6c:aa:90:14:41:c5:0f:db:33:a8:8f:87:
a5:ec:8d:c8:41:87:24:1f:8b:d4:85:eb:70:c7:b9:af:49:5d:
46:38:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:04 2025 by rpki-client