Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8447090F45911EFA4767A7C762E951A.roa
File: F8447090F45911EFA4767A7C762E951A.roa (raw, json)
Hash identifier: gTDRL5liz1aBTsB3z5hUruwSq7EIjkKdYhbNNLJxh9o=
Subject key identifier: 44:28:2C:E8:1E:BC:DE:36:F2:10:9C:D8:8E:31:1E:61:AC:45:C1:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8447090F45911EFA4767A7C762E951A.roa
Signing time: Wed 26 Feb 2025 15:54:33 +0000
ROA not before: Wed 26 Feb 2025 15:53:59 +0000
ROA not after: Sat 19 Feb 2028 15:53:59 +0000
asID: 17561
IP address blocks: 154.82.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91387 (0x164fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:53:59 2025 GMT
Not After : Feb 19 15:53:59 2028 GMT
Subject: CN=67bf3939-cde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:9c:cb:c8:1d:07:f2:9c:55:e4:af:ac:89:
fc:3f:e2:9c:db:9b:55:b7:27:a0:bd:aa:02:98:e8:
7f:50:54:59:ca:af:f2:8a:46:2c:2b:3e:0d:27:70:
a7:be:cb:bd:ed:46:15:ea:3a:12:ce:eb:83:a6:6f:
91:1b:e2:80:37:4d:2b:84:21:38:04:64:85:33:53:
e2:4e:6f:b0:ba:71:25:14:f6:64:0d:34:fa:0a:02:
27:93:f4:60:b1:e8:74:fb:83:fc:33:8d:37:20:1c:
3b:3f:df:cf:60:fb:81:f7:8a:bd:09:fe:f2:d4:24:
94:71:ec:03:d3:7a:ed:f3:f2:28:67:bb:ac:b2:24:
d9:ac:58:c8:d9:6e:67:ba:9f:00:23:d7:e1:01:1b:
99:b4:15:2d:49:75:50:49:e5:83:b7:71:ba:71:1e:
d8:72:97:da:3b:9f:63:69:e2:58:8d:1e:b9:b0:6f:
8e:08:d2:68:49:c5:e9:1d:53:67:01:45:d6:97:d8:
77:60:d2:b2:f1:f2:a9:c2:28:ae:f2:6e:ed:c0:4d:
87:4a:a5:db:53:5d:75:15:e9:cf:90:92:26:c7:b7:
55:bc:32:fc:9c:43:83:94:28:16:e3:1f:18:f3:23:
46:ab:e0:25:76:cb:fa:48:62:f7:13:7c:96:ba:6a:
ae:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:28:2C:E8:1E:BC:DE:36:F2:10:9C:D8:8E:31:1E:61:AC:45:C1:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8447090F45911EFA4767A7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.244.0/24
Signature Algorithm: sha256WithRSAEncryption
48:30:8a:9c:e4:9a:9a:60:94:01:fa:69:77:34:2f:bc:ff:35:
0d:d6:07:96:29:3b:bb:35:f4:ff:56:0c:f9:f4:89:97:df:64:
9c:63:aa:a8:6b:3d:2b:ac:04:6d:e7:ca:e0:53:b2:9b:77:c3:
aa:49:5b:4b:83:a9:dc:5e:ac:0a:0d:4e:b9:88:ed:da:1d:16:
68:46:b8:5d:7a:5a:cd:b5:2b:e5:6b:84:66:c9:ce:a0:4f:93:
f0:04:6c:af:43:d0:37:18:2d:37:82:55:3a:b9:04:89:f7:21:
57:ac:77:65:95:3f:4a:74:7c:f6:ac:9c:3e:a8:d0:5f:ef:7f:
4c:30:fa:db:38:b4:02:18:96:ba:0b:d8:fe:5d:a8:69:a7:02:
5d:f1:72:67:9a:f2:8d:90:58:d4:a6:5e:e0:57:7e:dd:5c:6e:
c4:d0:5b:85:3d:e2:75:d9:1f:a4:fd:d6:8f:d3:17:32:e5:a9:
7b:9f:5a:f4:72:6c:f5:fb:61:25:8d:8b:5d:88:5f:5c:43:5c:
71:81:9d:6d:31:7c:53:c4:23:c6:f2:b0:45:d4:5d:ea:fc:ad:
92:28:00:17:b8:fd:8a:2e:d0:fa:6a:aa:f1:29:ec:50:b0:db:
91:79:14:09:af:c2:b9:1a:cf:7c:57:76:75:5d:c0:f0:85:23:
95:4b:12:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:25:08 2025 by rpki-client