Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00D1C720F7F811EF82E039BE762E951A.roa
File: 00D1C720F7F811EF82E039BE762E951A.roa (raw, json)
Hash identifier: Rble+zYfg8ssi0WDD5HAOWhBCICbs6o36Xpx3WqWKVA=
Subject key identifier: 0C:F9:AB:1E:79:0D:FD:E4:EC:70:0C:EA:30:4A:7A:7C:18:F6:37:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00D1C720F7F811EF82E039BE762E951A.roa
Signing time: Mon 03 Mar 2025 06:23:21 +0000
ROA not before: Mon 03 Mar 2025 06:23:17 +0000
ROA not after: Mon 31 Mar 2025 06:23:17 +0000
asID: 20326
IP address blocks: 154.199.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94056 (0x16f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 06:23:17 2025 GMT
Not After : Mar 31 06:23:17 2025 GMT
Subject: CN=67c54ad9-0a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:77:16:66:ea:01:11:bd:ef:af:6e:93:03:
3f:89:be:f7:7b:15:fd:e9:ae:e8:8c:e6:2d:74:97:
36:60:72:06:fd:a7:2d:f9:0b:36:6c:62:f4:ec:f6:
50:dd:f1:fb:23:70:9c:fa:f2:68:8c:9d:2c:c7:87:
4e:65:f4:1a:ca:1a:f2:f5:7e:59:c4:fb:94:fe:ab:
99:1e:3c:62:0e:bb:29:0a:85:4c:5c:69:46:f8:82:
6a:7a:2b:ff:a2:d7:d9:35:5e:31:7c:eb:ab:10:5a:
a9:d4:2f:2a:68:29:d1:da:69:88:fc:42:83:32:12:
a3:58:1c:48:bc:b8:f9:bf:45:09:73:c0:ca:97:52:
de:7f:6e:fc:7a:2d:96:47:94:13:9e:ae:97:70:43:
76:f0:97:45:19:c2:16:fe:a9:99:3b:ae:6d:de:12:
a5:8c:0b:ff:96:62:d6:f5:03:bd:58:df:82:46:04:
be:90:cd:2b:1b:ea:0b:db:a4:9f:ad:78:4c:32:b2:
99:c5:32:e7:41:11:5a:4d:61:c7:d4:ac:b0:13:95:
d2:8e:a4:a0:47:30:9f:15:d4:80:da:e4:17:f9:15:
a3:8d:fd:0d:d8:83:d7:c9:9c:bb:ca:d3:09:5c:45:
b3:a2:49:d8:0b:07:dc:e9:ef:8b:99:81:e7:e8:50:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:AB:1E:79:0D:FD:E4:EC:70:0C:EA:30:4A:7A:7C:18:F6:37:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00D1C720F7F811EF82E039BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.8.0/23
Signature Algorithm: sha256WithRSAEncryption
14:03:29:48:b4:4d:b7:6c:e2:39:24:70:cb:bf:32:4d:ba:ac:
e4:79:4f:33:ca:18:24:89:2b:3a:5e:e1:f1:a4:3f:23:c5:76:
9a:5a:32:2e:c3:47:e9:7f:ec:b8:35:14:94:71:43:b5:e6:00:
ad:55:a7:cc:c9:51:47:b3:bc:1e:77:2a:b3:6b:1d:6f:95:8f:
ea:e2:b0:87:e4:76:fe:da:15:bf:76:8c:e0:37:8d:f0:2e:82:
ac:98:ca:eb:d2:cd:62:08:d1:f9:b1:22:6d:f8:3f:56:38:b9:
b1:da:66:0d:e1:c9:8c:77:af:61:0b:ef:9f:2c:61:b3:81:5e:
ce:46:b4:7b:6a:96:76:f3:98:98:09:53:d6:f4:b9:11:d5:ae:
3f:98:48:2e:3d:78:a5:75:16:dc:10:96:0b:07:3e:74:20:92:
ed:00:bc:b8:3a:e3:97:7d:7d:99:12:cf:f3:04:7e:31:48:13:
47:23:7c:e0:19:d5:3a:e3:00:33:eb:dc:17:be:c1:0a:73:aa:
cb:4a:bb:e3:29:19:eb:1f:fe:6a:0b:2c:22:57:c5:94:97:f3:
6e:02:cb:bd:e4:c4:d7:f4:5d:7a:f3:2a:6d:b3:74:40:7d:f1:
fa:cb:66:79:da:a0:00:7e:9b:01:32:c8:cd:d2:52:1d:6a:0c:
26:85:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:09:57 2025 by rpki-client