Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07883ADAF59C11EF831280AB762E951A.roa
File: 07883ADAF59C11EF831280AB762E951A.roa (raw, json)
Hash identifier: QILVprZbDTyXX168PLGX1SptQTf2FFVw7ANT34e+q4Y=
Subject key identifier: EC:60:74:57:2F:37:1B:B0:17:8E:7B:D7:39:8A:65:95:50:C1:32:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07883ADAF59C11EF831280AB762E951A.roa
Signing time: Fri 28 Feb 2025 06:19:56 +0000
ROA not before: Fri 28 Feb 2025 06:19:52 +0000
ROA not after: Mon 12 May 2025 06:19:52 +0000
asID: 151804
IP address blocks: 154.197.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92609 (0x169c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 06:19:52 2025 GMT
Not After : May 12 06:19:52 2025 GMT
Subject: CN=67c1558c-cba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:2a:6e:50:36:d9:a8:37:76:88:f0:a5:10:
74:a5:1b:88:e9:68:58:55:07:a7:1d:b5:15:96:c7:
94:b8:ef:36:3e:a7:ad:27:07:e4:7c:37:1c:94:89:
4b:99:15:f4:cc:bb:8d:7c:6a:88:53:19:7e:3e:1d:
e0:c7:61:fb:5a:b6:8d:21:dc:41:a1:02:be:84:5b:
0e:66:09:99:17:c0:2c:25:7a:e3:71:cb:d0:5d:e0:
6d:32:8f:fa:6a:16:b1:8a:e2:35:f9:18:b1:68:c1:
b1:fa:65:29:80:70:b6:37:cc:ad:ca:bf:19:03:fd:
7f:e2:ca:b5:20:11:79:27:b2:de:db:70:c6:4e:a3:
b1:22:d7:89:98:1e:48:9a:34:47:17:6a:17:5e:79:
e4:7a:0e:6b:c1:a8:32:aa:8a:a9:0b:b6:26:07:e3:
92:3b:7b:f0:27:59:c3:79:0d:b0:07:54:a5:32:aa:
cf:c8:68:e6:8f:f7:17:9c:e6:ed:bc:3a:e5:ba:9b:
77:9f:6c:f0:f1:d3:f7:40:96:56:58:18:26:93:c2:
08:28:94:74:dc:7d:5f:0b:80:41:f8:61:3e:d8:a5:
59:9f:61:66:bb:82:55:47:9d:6b:59:58:79:3a:b4:
37:a4:11:5a:96:02:b5:36:16:79:ab:a3:59:7e:5c:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:60:74:57:2F:37:1B:B0:17:8E:7B:D7:39:8A:65:95:50:C1:32:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07883ADAF59C11EF831280AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6b:6e:7f:03:ac:47:cb:db:a7:70:58:1c:c9:90:a8:67:e5:
2e:9e:af:f3:34:72:0b:fc:b2:40:2f:b5:67:04:9d:a6:f2:44:
f7:6a:0b:34:08:a4:11:86:c1:a5:d5:6d:db:82:68:bb:3c:de:
30:0f:99:45:47:c0:f2:9f:97:f3:bf:4c:6b:bf:3f:4b:61:09:
f4:69:47:6e:22:96:7a:93:b7:a5:6a:ba:e2:e5:5c:f1:7f:fb:
19:2e:63:ae:72:c3:a0:0e:7f:e0:c0:b0:48:0a:ef:92:d2:f7:
09:ca:9d:59:8f:ab:82:a3:54:3b:4a:7a:02:63:36:0f:cf:88:
1e:38:bf:b4:d2:73:07:a0:f7:49:8a:28:8b:17:75:5a:b0:ae:
fa:fe:b5:c9:fb:e5:c9:a5:c9:17:e9:07:55:15:84:b9:6a:eb:
46:4e:02:ad:c4:03:4d:64:c4:db:ea:f7:f4:cf:af:ea:93:78:
07:cd:e3:60:b3:cf:24:30:eb:4c:c2:2f:31:3e:36:29:a6:72:
69:78:53:b6:25:6c:3b:20:d7:7d:91:f9:5a:00:da:99:c9:eb:
01:1c:d8:d0:aa:66:ad:af:22:32:5c:67:cd:f5:b2:6f:c7:46:
d6:ec:2b:59:36:9a:36:7d:8d:8d:3f:e5:e4:f6:15:92:79:28:
75:82:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:46 2025 by rpki-client