Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F05954B6E24511EF9AAFF180762E951A.roa
File: F05954B6E24511EF9AAFF180762E951A.roa (raw, json)
Hash identifier: EWKADA19alNoFojxCH9nDAp3uIQvl7gUb2ngsR5tdZQ=
Subject key identifier: 78:DC:7A:80:A4:43:4D:D4:70:08:E9:54:9E:7E:F0:DA:78:75:2D:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01504B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F05954B6E24511EF9AAFF180762E951A.roa
Signing time: Mon 03 Feb 2025 15:45:48 +0000
ROA not before: Mon 03 Feb 2025 15:45:45 +0000
ROA not after: Wed 30 Apr 2025 15:45:45 +0000
asID: 150008
IP address blocks: 154.206.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86091 (0x1504b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:45:45 2025 GMT
Not After : Apr 30 15:45:45 2025 GMT
Subject: CN=67a0e4ac-2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:2d:25:24:fe:5a:03:28:20:c2:13:05:13:
9b:a1:b7:af:7b:34:7f:45:2f:3d:20:b2:cf:3d:3e:
ed:64:b8:59:b8:dc:30:f1:c7:fe:b2:1c:aa:d1:6d:
de:6c:fc:75:27:b6:d8:c7:ef:b7:8b:59:e1:a8:85:
b4:49:c6:ca:4a:d1:d7:6d:bd:3d:20:91:4f:95:26:
c1:1a:42:73:f5:99:4c:fb:09:01:e0:49:d1:10:89:
c2:54:6d:56:01:8f:df:e9:62:80:7a:5d:80:33:52:
c9:32:13:f6:0e:cc:45:de:44:dd:49:46:e0:db:97:
c0:9e:c5:77:61:9c:a9:a4:dc:8e:de:7a:95:8c:cf:
ad:6e:4e:fc:e7:58:b9:8c:84:d0:62:15:12:3c:52:
7c:7a:e3:a4:9f:ee:02:2d:fd:aa:43:81:5e:b4:7f:
01:4c:d5:73:c4:83:01:49:c4:2d:21:a9:0f:6c:90:
0e:0a:67:12:76:57:04:cc:a1:f8:0a:2f:1d:22:f4:
be:59:fb:c7:78:13:df:ac:82:cf:1d:b7:ae:cc:49:
48:e1:fa:f9:4c:32:c7:7c:73:a5:45:be:68:59:22:
92:d3:6b:4d:e7:1f:03:2c:f3:c9:d9:c5:19:e0:25:
f6:c4:8a:cd:58:19:e7:54:b2:58:5d:1a:c2:08:c3:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:7A:80:A4:43:4D:D4:70:08:E9:54:9E:7E:F0:DA:78:75:2D:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F05954B6E24511EF9AAFF180762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.30.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1d:f5:db:fc:22:33:de:bc:7f:02:17:0a:ae:cb:3d:a9:46:
2c:47:c1:5b:65:27:56:c9:c0:6d:94:08:d5:fe:f1:88:88:c2:
74:fb:45:96:fc:cc:c0:3f:36:5e:b3:6c:3b:9c:2a:f6:59:3f:
8a:fe:ee:ce:3b:52:a5:1a:1e:73:d6:69:6d:22:14:13:09:e3:
0b:70:ec:25:f8:43:20:c5:f9:91:11:45:33:a3:2e:9c:de:4e:
1e:15:a3:45:62:6d:b6:0c:e3:07:2b:0d:7b:5b:ad:34:c9:da:
3b:8e:13:7e:fb:27:58:b0:48:03:c0:df:89:7a:ab:fb:56:21:
33:1b:49:4b:fb:24:d3:11:ac:fb:bb:0d:fc:19:52:2b:59:e3:
65:1d:f8:42:a4:b8:8b:d8:c1:ff:1b:67:32:32:bd:37:c2:94:
69:b6:ca:a8:90:6d:69:9b:e4:15:dc:7d:2f:55:50:af:62:f2:
41:0e:5e:b2:4d:cf:88:5f:ce:46:76:a5:86:17:d8:88:8f:c6:
48:35:d7:09:5f:b8:2e:d0:40:06:cd:27:42:93:25:75:c8:a5:
65:25:ad:2d:41:93:b9:26:4d:2e:5e:0d:2e:05:43:c6:4a:46:
48:c9:f7:14:f6:5d:03:dd:f1:d7:49:27:8a:49:bd:53:c7:f0:
2f:51:db:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:41:48 2025 by rpki-client