Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94BFF1E4E6D911EFAA38F490762E951A.roa
File: 94BFF1E4E6D911EFAA38F490762E951A.roa (raw, json)
Hash identifier: bs87IbBUjT7fMCCpsl47ve6mQGyDQXSMEkdwIUMRS5Y=
Subject key identifier: 22:9B:83:31:F4:C9:45:B7:9B:6D:04:3B:D6:C2:3A:0C:B5:FC:C7:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01550B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94BFF1E4E6D911EFAA38F490762E951A.roa
Signing time: Sun 09 Feb 2025 11:32:45 +0000
ROA not before: Sun 09 Feb 2025 11:32:40 +0000
ROA not after: Mon 31 Mar 2025 11:32:40 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87307 (0x1550b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 9 11:32:40 2025 GMT
Not After : Mar 31 11:32:40 2025 GMT
Subject: CN=67a8925d-88e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:d0:2f:08:65:b7:50:b2:cf:ae:a4:24:fe:
29:2b:cf:fa:99:43:c2:55:58:f5:7e:96:a1:f4:6b:
1c:c1:89:91:a9:6b:da:bb:a9:bb:7e:09:f4:32:8b:
95:db:9e:50:ab:79:39:f3:b6:67:a6:c6:ef:79:96:
5b:58:7c:a7:2a:c9:6c:de:f5:eb:d4:ff:72:03:9b:
60:38:eb:a3:1f:03:b4:73:1c:45:22:e9:ff:10:22:
1a:82:1e:4d:37:25:11:9e:86:ea:f0:c4:d7:56:58:
e6:55:df:65:7f:3c:c7:d6:84:79:c7:8e:4d:88:01:
ef:a4:d9:eb:34:f6:6f:b7:75:4d:a9:35:74:55:59:
94:df:1f:98:fa:4b:6e:b1:e7:aa:fc:71:a0:1c:06:
26:10:51:58:6e:59:f9:76:7a:ec:ee:b7:6d:8e:33:
72:a6:af:27:07:b2:de:48:f3:61:ac:63:5a:fc:5a:
25:e2:dc:df:82:66:cb:a6:db:a2:cb:71:ed:41:69:
d3:99:22:b9:3c:87:99:b8:f0:1f:8e:e6:f3:5c:3b:
92:ea:9e:ad:d3:55:78:76:b6:92:85:8e:47:1e:ab:
29:2f:7c:43:fe:45:a3:9e:25:3e:ce:c0:a8:98:fb:
e2:8d:88:49:a2:a4:60:ac:89:4b:a4:cf:3b:61:a4:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9B:83:31:F4:C9:45:B7:9B:6D:04:3B:D6:C2:3A:0C:B5:FC:C7:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94BFF1E4E6D911EFAA38F490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
82:5c:76:c9:41:51:95:1c:52:c7:0c:40:c9:8f:db:16:d3:5a:
8f:c0:cd:07:f6:cf:84:03:cd:13:5b:39:9d:28:4a:38:0f:24:
06:e1:b8:d8:dc:5c:c6:64:ed:28:73:78:d5:a3:c5:e2:23:69:
96:32:02:98:e4:f2:44:47:5d:69:c9:2e:94:cf:f2:63:cd:7c:
79:b2:56:33:e1:9e:5c:63:91:e2:5c:2d:eb:4c:6b:52:85:d6:
8c:b4:bb:08:c7:17:35:1d:13:0b:e4:fe:9d:0e:06:18:d9:55:
cc:05:81:f0:f2:c7:94:af:e1:a9:17:a1:bd:3c:7a:cb:09:0c:
ac:df:3d:98:c0:6d:ca:2f:1e:04:46:f8:18:d9:b7:64:32:dd:
10:a3:20:57:f5:10:6f:06:8d:85:44:9c:22:e5:47:c6:48:ca:
ac:63:c5:83:50:2b:93:29:62:7c:70:8b:a4:4b:63:53:43:b0:
b6:b5:54:ae:a8:f7:b5:42:14:e5:d4:4f:cd:94:56:22:2a:b8:
f2:55:e7:f2:95:26:bf:16:3b:b6:fa:76:6d:40:21:87:3b:a9:
33:fe:8b:00:2f:97:07:c9:2d:15:0c:f7:71:7d:16:d9:9c:1b:
e3:b1:d1:99:68:21:c1:33:29:93:bd:59:20:68:ca:37:ac:a1:
0f:4e:aa:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:53:45 2025 by rpki-client