Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03DA4424F61D11EFAE2D2697762E951A.roa
File: 03DA4424F61D11EFAE2D2697762E951A.roa (raw, json)
Hash identifier: d35n1X/ERGlb2tbVJwGP2bG67TSdmK6GoeNHZvAHP1E=
Subject key identifier: E3:65:11:97:DB:48:37:B3:D7:65:C8:88:C6:44:85:00:05:7C:63:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03DA4424F61D11EFAE2D2697762E951A.roa
Signing time: Fri 28 Feb 2025 21:43:15 +0000
ROA not before: Fri 28 Feb 2025 21:43:11 +0000
ROA not after: Sat 19 Apr 2025 21:43:11 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93267 (0x16c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:43:11 2025 GMT
Not After : Apr 19 21:43:11 2025 GMT
Subject: CN=67c22df3-313a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:ed:3f:72:b0:8b:69:90:85:c3:c4:9f:ba:
f4:e5:fc:e8:17:f9:7f:1d:23:cd:da:ce:84:28:d3:
63:70:2b:dd:89:9a:ce:e9:ec:ff:7e:ec:92:d8:82:
6d:7d:11:19:6f:55:89:09:b9:99:f9:6b:47:b0:4a:
cd:38:92:a2:f6:70:07:02:00:3c:c7:f3:84:20:28:
57:44:8e:c7:13:c7:4e:24:75:4f:03:ae:c5:39:5c:
4e:b7:24:d8:89:79:37:bc:34:85:19:66:63:2a:2d:
47:fd:2f:7e:1d:24:e8:c1:ff:e8:43:05:16:38:25:
f4:1c:ca:13:2b:03:6e:2a:55:c1:d2:0f:f2:22:ae:
77:f3:6e:60:33:ca:02:3e:2a:16:53:fe:2d:30:74:
5d:b1:62:27:ee:2d:c4:f4:62:45:20:87:4d:65:95:
49:b1:1d:29:34:9a:96:cf:d5:96:62:4d:b0:82:cd:
3a:a7:d2:76:e8:db:d3:bf:77:d0:a5:df:27:91:b0:
68:93:05:bc:18:ab:1f:73:14:8a:1a:92:27:bc:10:
44:12:5a:28:1b:75:9c:cc:80:dd:5d:26:86:99:8f:
b2:b4:a5:10:67:ce:08:89:44:a8:71:fa:58:27:48:
65:d3:8b:f6:a9:92:27:9d:11:40:70:a9:fb:9e:c9:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:65:11:97:DB:48:37:B3:D7:65:C8:88:C6:44:85:00:05:7C:63:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03DA4424F61D11EFAE2D2697762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:8d:ab:b0:6d:f9:a3:97:82:13:27:51:7c:07:75:99:48:f3:
1d:dc:c4:98:7e:d5:57:3b:20:e7:17:6a:2f:4c:43:29:2b:26:
0f:7b:b5:0b:71:0b:88:41:1b:12:78:b0:7c:71:b0:f7:80:9a:
3e:7c:e5:d3:05:ea:cb:ba:09:80:44:55:0d:27:ce:af:ec:ab:
15:89:67:02:ad:52:ba:56:d9:6a:58:ba:fd:07:e3:38:78:64:
79:6b:58:c8:f3:8b:bb:0b:8e:ae:42:27:2e:ad:84:bc:f2:e3:
a5:0a:a7:cb:04:a8:9d:ca:01:22:a9:e9:8a:eb:2f:77:a1:83:
33:4c:fd:86:b5:32:1f:c2:3a:b3:ed:06:b9:84:03:23:54:30:
ff:bc:9d:93:67:f6:9e:2c:a1:92:1f:bb:20:02:be:1b:f7:e8:
02:2b:79:d0:78:93:0e:ab:eb:4a:4c:ec:58:91:c0:88:72:e9:
96:44:0d:50:be:4f:71:fd:0a:33:7b:a3:f8:25:61:60:9b:be:
0a:09:ed:a9:e8:91:25:57:9f:ab:ea:a0:bd:75:c6:9e:eb:e0:
b3:a0:6e:18:eb:e5:c2:a2:02:a0:5e:3d:52:41:6f:14:d4:22:
48:f3:93:74:ee:ba:e3:42:80:1d:07:86:d5:9c:37:d0:d3:6a:
c3:84:47:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:03 2025 by rpki-client