Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA8A6766E2D911EFB3B1106C762E951A.roa
File: EA8A6766E2D911EFB3B1106C762E951A.roa (raw, json)
Hash identifier: xszNujZrObW96uaiID1Dnr5U8xwg0uuvvUJ/Freo3MY=
Subject key identifier: 77:2B:3F:A2:96:A6:47:5D:18:D4:5D:7F:D5:A2:33:27:C6:E5:A6:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA8A6766E2D911EFB3B1106C762E951A.roa
Signing time: Tue 04 Feb 2025 09:25:04 +0000
ROA not before: Tue 04 Feb 2025 09:25:01 +0000
ROA not after: Wed 30 Apr 2025 09:25:01 +0000
asID: 18229
IP address blocks: 154.210.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86234 (0x150da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:25:01 2025 GMT
Not After : Apr 30 09:25:01 2025 GMT
Subject: CN=67a1dcf0-0037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:28:e2:ea:3f:e5:4a:34:8d:01:82:2e:2a:
8e:a7:c9:f0:0f:d1:1c:4c:f7:d6:4f:7c:de:db:69:
b1:2e:b7:f1:8c:1b:da:f3:ca:c6:e9:73:f5:24:4a:
d8:40:15:76:b1:ea:e6:a4:4a:de:97:bc:df:0b:b8:
1f:f3:3f:5f:cf:5e:ef:a2:ad:87:c8:4f:fc:ad:c8:
fd:a6:99:ac:98:10:3c:41:25:96:be:ff:63:32:82:
92:70:9e:f7:55:eb:b2:cd:8c:a9:29:8e:93:0b:c0:
ff:f0:7f:83:a1:2b:da:07:e4:aa:06:5b:c8:09:1d:
4a:d5:8c:97:6f:b3:b1:53:a8:fc:d8:e0:4e:d6:a7:
5c:f6:79:d4:bc:8c:13:66:69:07:71:24:69:1b:0e:
71:55:c8:02:29:2d:fe:84:6d:65:e3:85:bf:3c:98:
05:ef:49:ad:cb:4c:47:a3:d3:2c:51:9e:13:fa:9d:
d5:43:27:7f:75:d2:02:40:6f:db:ed:d9:9f:e0:0b:
8b:e5:90:67:86:15:71:06:c5:27:88:55:1f:72:f9:
3f:66:ae:73:e0:71:07:79:65:e7:b1:7c:aa:33:78:
ec:82:b9:7b:1b:e8:4b:83:9b:3c:3d:01:0b:6e:16:
27:fb:66:25:a0:9a:46:fc:d1:30:2b:08:23:56:60:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:3F:A2:96:A6:47:5D:18:D4:5D:7F:D5:A2:33:27:C6:E5:A6:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA8A6766E2D911EFB3B1106C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.151.0/24
Signature Algorithm: sha256WithRSAEncryption
40:28:e9:72:83:ee:2d:56:11:bb:6e:88:7f:1f:22:97:46:06:
eb:f0:eb:b2:34:19:54:79:98:f6:06:eb:40:61:a8:e4:bc:23:
7d:c8:cf:2a:9f:ed:b2:b0:27:6a:72:94:74:7e:a6:61:99:76:
be:01:82:10:a9:42:40:41:e8:77:b2:7f:4e:17:14:29:48:4b:
3a:4f:d7:d0:5b:b6:b1:39:99:de:d1:c9:88:d5:22:21:c3:53:
98:e5:50:2c:9e:af:f6:ea:c9:e4:fe:18:e3:81:fa:8a:7a:1b:
2a:34:15:97:d0:92:14:6f:be:0c:b6:b7:75:32:cb:30:db:68:
52:ec:a8:a6:af:4e:31:7f:18:06:42:37:f9:c3:e7:8b:01:9d:
cd:47:5c:f6:40:30:b6:e2:71:ff:82:08:50:60:f7:3b:60:8f:
e2:d7:2f:6d:0a:d0:31:35:07:5d:1b:9c:7a:25:1f:b9:17:e0:
9b:ed:c0:99:3c:e0:45:8f:5a:5e:6e:47:59:1e:23:81:3a:8b:
70:d9:a6:7b:af:89:a3:ff:18:4e:ab:0f:ad:c2:b0:28:9b:9a:
9f:e3:4a:93:87:a1:3f:9e:4a:de:20:15:2d:dd:09:17:31:1f:
a6:54:83:3f:f1:83:67:f1:12:02:80:60:19:74:9b:86:2a:bb:
d5:12:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:54 2025 by rpki-client