Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075F2622F5CE11EF96B53D82762E951A.roa
File: 075F2622F5CE11EF96B53D82762E951A.roa (raw, json)
Hash identifier: zTqpctm9Q3/wjq23qCCH3E9opXvjP/QNVhNVTrxU/lQ=
Subject key identifier: 1D:DA:F7:BA:B4:02:42:DF:51:E2:4D:D0:AB:17:30:87:A5:96:F8:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075F2622F5CE11EF96B53D82762E951A.roa
Signing time: Fri 28 Feb 2025 12:17:51 +0000
ROA not before: Fri 28 Feb 2025 12:17:47 +0000
ROA not after: Fri 11 Apr 2025 12:17:47 +0000
asID: 138915
IP address blocks: 154.203.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92956 (0x16b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:17:47 2025 GMT
Not After : Apr 11 12:17:47 2025 GMT
Subject: CN=67c1a96f-add3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:6f:e9:9e:e1:82:72:1d:9d:8f:b9:7c:cc:
ce:fe:90:75:c8:99:40:e8:d4:d4:d7:ae:d4:a0:03:
2d:1e:7a:0d:fc:a3:35:b2:71:07:75:2a:23:a6:e4:
3f:c9:15:ff:c3:7f:79:00:1c:01:f3:db:82:73:ea:
7c:d9:8e:98:4d:b2:0b:71:77:05:dc:74:fd:21:f9:
1e:cb:18:a6:73:03:62:cc:2c:21:47:9a:2b:3f:c6:
bd:a6:63:e7:87:a2:46:c3:27:1f:30:7d:4b:bc:6f:
ba:6f:f1:9b:ce:8b:c0:38:37:85:86:1d:72:48:1e:
a1:8d:07:a8:67:d9:34:e5:a2:7d:66:0d:75:f6:10:
22:15:60:70:48:f1:81:dc:3f:74:bc:82:2a:0c:a2:
e2:45:69:78:e3:a1:ef:e3:c1:5e:15:4f:6f:b8:71:
59:35:7e:ec:e2:31:ee:de:4b:d7:f5:42:b5:84:a8:
5b:12:a9:99:3d:a2:3d:19:d2:af:3d:90:bb:ca:f7:
57:9c:83:80:e5:19:06:9b:42:38:cd:19:c3:26:7d:
97:62:3d:86:b0:8a:7b:6d:c9:9e:38:f2:7f:1b:5c:
43:0a:da:01:38:67:79:80:14:fd:c3:4d:0c:88:4e:
47:fb:dd:c7:50:94:0b:90:4b:58:95:e8:78:9a:58:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DA:F7:BA:B4:02:42:DF:51:E2:4D:D0:AB:17:30:87:A5:96:F8:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/075F2622F5CE11EF96B53D82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.139.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c3:33:bf:0c:99:99:87:63:c7:b7:6f:06:c4:62:b1:cb:41:
02:1e:15:d0:0c:d8:69:b6:27:09:ee:1e:5b:df:c7:2f:66:8d:
fa:96:97:42:b2:80:fe:58:6f:ab:44:98:ba:ff:70:e3:65:7f:
92:aa:68:3d:a5:26:ce:bf:83:0e:97:6a:3f:10:34:49:ea:d6:
f3:61:60:fa:b8:6a:a4:38:e3:a7:83:36:91:f1:32:44:16:5c:
79:ac:86:09:97:7d:5e:10:92:02:fe:12:6a:38:1c:6f:9c:d8:
30:cb:80:70:b6:8b:14:7c:28:ba:33:30:b2:20:af:66:53:22:
ab:a2:be:0a:d6:33:83:8b:b7:02:91:d1:58:4b:7f:3e:13:49:
00:19:79:ef:c7:ad:a1:92:91:bb:9f:d2:4f:49:65:20:4f:36:
c2:25:06:f4:f1:b5:4d:d2:c4:80:41:36:79:1a:3d:d3:e5:5b:
8d:33:44:79:0d:41:72:9a:18:47:0e:62:31:fd:c9:86:70:83:
1c:07:83:0c:35:88:6e:67:76:68:01:c6:f0:9b:ba:90:9c:07:
5f:42:6c:42:1e:1d:f4:23:60:41:b9:05:67:2d:96:32:86:7f:
9c:cd:71:cc:f2:12:45:72:bf:6d:27:eb:89:e2:e0:c2:75:94:
b8:77:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:18 2025 by rpki-client