Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED54478807AE11F0990DC0B1762E951A.roa
File: ED54478807AE11F0990DC0B1762E951A.roa (raw, json)
Hash identifier: J//8jH9V3wlVeJqAlPS4se+BsB5PpqFEbZPlO8Dlk3s=
Subject key identifier: 3A:8A:66:59:6E:F0:AE:96:0F:9F:4A:CF:20:CF:DF:E8:3C:56:0B:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED54478807AE11F0990DC0B1762E951A.roa
Signing time: Sun 23 Mar 2025 06:20:34 +0000
ROA not before: Sun 23 Mar 2025 06:20:29 +0000
ROA not after: Sun 30 Mar 2025 06:20:29 +0000
asID: 138152
IP address blocks: 154.211.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95655 (0x175a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 23 06:20:29 2025 GMT
Not After : Mar 30 06:20:29 2025 GMT
Subject: CN=67dfa832-585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:91:f6:84:bb:77:2d:bc:0b:d5:20:77:44:
e7:cb:b4:bf:ba:69:63:c5:2a:44:ad:0b:72:51:75:
2e:9c:e8:03:0b:d5:4f:15:9a:92:84:af:ae:ea:05:
5c:06:d2:8b:9f:c2:94:0b:9a:61:db:ee:2d:57:c6:
94:d2:66:88:40:91:95:d8:c5:9e:f5:e7:a2:c4:d8:
ea:c7:97:8f:67:84:8d:1a:89:7d:f8:fc:7a:d5:f7:
16:35:40:d5:fc:9d:c2:60:9c:44:e9:a0:73:ce:f7:
11:c3:28:51:0f:68:7c:01:cd:62:9b:57:ac:7c:d0:
a4:60:2d:9f:85:ae:30:26:c1:49:25:ca:7e:f3:58:
7b:53:37:99:aa:c1:3c:6c:76:7c:b6:32:a9:ac:c3:
86:9d:b5:ae:cc:a9:de:65:bc:ab:d2:d9:0c:6b:0c:
d0:fe:cf:67:75:4c:0e:a4:04:e7:79:84:9e:97:e9:
21:8b:98:17:62:a7:6d:80:9c:a4:36:3c:85:59:ad:
75:ed:ff:70:cd:ec:c9:d7:f8:85:d5:af:5b:e6:63:
da:c6:f5:91:d0:21:5f:68:ff:e4:92:8d:0b:f1:b6:
3b:fa:b3:fd:75:31:db:39:80:b5:37:aa:ec:ef:98:
15:5e:dc:74:d9:5b:e7:4e:2f:e9:bb:f6:af:bc:ac:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:66:59:6E:F0:AE:96:0F:9F:4A:CF:20:CF:DF:E8:3C:56:0B:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED54478807AE11F0990DC0B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4e:13:cf:be:21:11:11:74:b5:a6:4c:81:9a:1c:c6:ef:c7:
c6:f5:07:bc:64:86:f6:6c:8b:12:3a:e3:7e:b2:ab:fc:90:74:
af:9a:77:8a:2e:72:0e:35:90:c4:9c:a8:a2:29:3a:0c:13:ea:
8f:90:e2:a2:06:a2:68:5c:36:23:5a:61:08:70:be:29:e5:7d:
b2:2c:31:5b:ea:63:ca:b2:96:04:db:7e:f0:9d:43:54:41:98:
11:f3:1e:e0:7a:c2:49:f3:b1:c5:d4:d3:46:ef:6d:5f:cf:71:
c0:fc:f4:a9:b4:fa:28:eb:f4:5b:56:3b:e5:08:0b:68:0f:7c:
00:56:92:b9:26:19:7b:21:48:9f:da:da:50:6d:f5:3a:3a:9e:
dc:7c:39:48:ea:e4:c6:cc:6f:24:28:e3:ee:bc:52:5a:58:74:
60:d3:ec:9a:c8:4b:5b:09:ca:d6:60:6a:ed:94:fd:73:35:86:
5d:7c:02:4b:60:9e:d4:82:69:bc:67:fb:5c:72:4e:17:e0:cc:
25:50:e6:e8:a7:7c:48:d8:4c:f3:97:a0:1f:8e:f3:56:9f:39:
18:94:9e:58:d8:d4:24:11:37:b3:e2:61:3b:00:bb:e5:44:ef:
eb:a5:64:82:01:5d:e8:59:ba:45:fa:c8:92:11:02:10:0e:c8:
2c:a8:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:09:55 2025 by rpki-client