Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/8C890460CB8011ECB9F7CF9DF1222468.roa
File: 8C890460CB8011ECB9F7CF9DF1222468.roa (raw, json)
Hash identifier: I3gWBZFcOpdEKi5h7+fOG2G/3gMLdoPeLcvJNsVVat0=
Subject key identifier: B8:6E:57:AA:44:E3:C5:26:8B:E7:D0:64:76:A2:15:A2:F2:CC:E2:AB
Certificate issuer: /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial: 0201
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/8C890460CB8011ECB9F7CF9DF1222468.roa
Signing time: Wed 04 May 2022 08:02:32 +0000
ROA not before: Wed 04 May 2022 08:02:27 +0000
ROA not after: Thu 08 Jun 2023 08:02:27 +0000
asID: 327790
IP address blocks: 154.73.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAF
Validity
Not Before: May 4 08:02:27 2022 GMT
Not After : Jun 8 08:02:27 2023 GMT
Subject: CN=62723318-910d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:be:63:52:2c:6c:58:87:4c:af:0a:b2:91:
a0:dd:d8:fd:a9:47:32:c4:50:96:e3:6e:3c:94:ce:
c0:81:5a:b9:4e:ba:7b:73:bd:be:93:72:10:d3:84:
46:dd:d0:74:b1:2a:d2:cf:54:6b:43:e7:84:7d:5c:
96:65:b2:40:d9:8d:a1:5b:5f:63:fe:ea:d8:d0:d4:
b0:82:fc:78:13:8d:f8:bb:26:4d:34:67:a7:98:da:
9b:32:91:9f:42:e9:26:98:fc:69:fb:dc:5d:17:c6:
86:52:1a:99:b5:38:28:13:d9:85:8b:3b:d2:95:48:
85:85:91:fd:fa:38:0f:77:ff:29:bf:43:b0:c6:62:
b0:cb:7f:49:df:10:58:7a:a3:c1:e3:a4:43:6a:88:
02:7b:63:b7:23:bb:e0:df:6f:dd:1b:a8:39:17:bd:
c5:ec:e4:c2:de:a1:01:09:9d:08:d8:03:11:63:e2:
84:87:42:58:20:70:ba:19:bd:3c:e2:be:34:47:42:
56:f5:78:35:91:01:67:66:e6:be:82:fc:d3:54:ca:
7f:f6:9b:3a:f4:48:2b:a5:21:3e:40:d1:ec:62:25:
36:10:71:4f:be:8a:e5:e2:5d:74:17:b2:59:15:63:
94:94:fb:5b:19:5e:8c:b4:7c:43:05:08:fb:de:fe:
b1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:57:AA:44:E3:C5:26:8B:E7:D0:64:76:A2:15:A2:F2:CC:E2:AB
X509v3 Authority Key Identifier:
keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/8C890460CB8011ECB9F7CF9DF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.248.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b5:c7:02:f0:c2:81:73:10:db:44:6f:80:c5:04:fe:ff:37:
5d:91:e8:c6:b1:1a:73:00:2a:00:d3:97:86:9c:d7:c8:d1:a9:
30:33:91:26:a1:4e:f5:69:75:5f:ef:03:2d:c3:8d:04:84:82:
a7:dd:b6:c3:09:58:c0:5b:4b:2b:2c:da:ff:6c:63:e7:00:d8:
59:55:48:41:e1:50:5d:33:72:0b:8a:03:e9:e9:11:de:bd:55:
27:00:0b:c5:e3:80:01:0b:02:be:5b:2e:5e:bd:49:80:bb:43:
62:a4:07:f9:3d:2f:3c:48:7c:21:95:f3:fa:4a:09:10:cd:56:
39:cb:7c:15:0f:f1:46:8b:51:cf:84:b8:ac:65:67:22:14:70:
1a:be:b2:57:b6:68:bd:2a:e4:10:70:5c:6d:04:5b:b8:00:81:
f0:19:3f:3b:e6:61:05:3f:fc:c2:39:c1:03:af:29:0b:e7:d3:
29:1c:1c:41:40:f2:07:30:c7:9f:15:ff:71:1c:ad:de:c4:2b:
71:b1:25:91:4d:77:30:67:79:1b:0c:64:f6:c9:6e:78:b4:5d:
12:92:2b:dd:38:a4:59:da:73:95:50:f6:81:86:21:f2:43:22:
7f:e9:58:71:81:42:3e:e7:82:5b:67:72:7c:70:a3:aa:96:61:
ab:e5:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:42 2025 by rpki-client