Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A22A62EF6C611EFBA33FB9E762E951A.roa
File: 0A22A62EF6C611EFBA33FB9E762E951A.roa (raw, json)
Hash identifier: Vug32UDsfsGJKWZOy1qtdjL8E716GMnktZXAqUoUCLE=
Subject key identifier: B3:86:DC:BF:3A:53:B6:51:C1:D2:02:EE:31:A4:AA:16:B5:1D:7A:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A22A62EF6C611EFBA33FB9E762E951A.roa
Signing time: Sat 01 Mar 2025 17:53:11 +0000
ROA not before: Sat 01 Mar 2025 17:53:07 +0000
ROA not after: Sat 05 Apr 2025 17:53:07 +0000
asID: 203020
IP address blocks: 154.205.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94037 (0x16f55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 17:53:07 2025 GMT
Not After : Apr 5 17:53:07 2025 GMT
Subject: CN=67c34986-03f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:7f:2b:1f:5e:a6:1c:1e:a4:74:ab:ad:c3:
e3:3f:32:42:aa:e5:81:59:18:eb:3a:11:32:a2:1d:
25:55:9a:0b:c8:be:90:04:0d:d1:97:5f:c9:ca:96:
1d:90:d4:7e:28:97:a0:d0:16:ef:b1:3f:fb:17:5f:
86:16:b1:8c:0c:ae:70:11:c5:ca:1f:b2:35:4d:41:
09:54:9f:29:18:20:8c:30:92:03:d2:3d:48:f7:2f:
fd:5f:cd:f9:39:e0:ba:e2:01:44:68:71:ac:e4:e8:
81:ad:76:00:f7:86:56:89:1a:bb:92:05:bb:6d:20:
0e:d3:35:98:ad:a9:f5:41:a3:44:01:03:ae:cf:7b:
18:af:38:fb:bb:65:73:b7:27:6e:9d:51:e2:4b:8b:
0b:b0:e6:d3:24:95:fe:d8:17:e9:8a:6f:f8:96:22:
52:15:2c:29:41:32:a1:3c:55:8f:90:b7:fc:9b:86:
c3:8d:04:5e:f6:43:61:2e:3a:5d:62:42:0e:8e:3e:
31:6d:90:9d:a2:0c:cb:63:05:39:d4:1b:75:e2:2e:
49:7d:d3:88:39:0c:3d:d4:46:01:cb:fd:3d:82:04:
cb:d5:33:38:d3:36:4c:e7:4d:c7:2d:9b:cf:ba:91:
2d:1e:cd:ea:94:40:ea:83:ec:1d:f2:f6:5e:f9:83:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:DC:BF:3A:53:B6:51:C1:D2:02:EE:31:A4:AA:16:B5:1D:7A:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A22A62EF6C611EFBA33FB9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.168.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:f3:4b:ee:0e:55:a7:db:16:f2:6a:5a:7d:56:3a:cb:ae:76:
4c:c4:c8:e0:3d:39:4f:f6:28:20:b7:cb:14:7b:1b:61:38:a0:
dd:d7:fa:fb:de:23:ba:dd:5c:96:9b:62:ef:b9:f3:3f:21:4b:
cb:bf:27:a5:ca:09:f2:ba:b8:2a:46:9f:84:bc:e8:2d:d0:fb:
45:8d:15:9f:37:80:f2:cc:9a:79:4f:55:1a:c0:be:6f:78:99:
e3:26:8c:e3:2c:93:6e:8f:51:4a:1d:38:0b:a8:ca:6b:07:ba:
9e:0d:7b:49:b2:46:4d:19:95:a4:38:1d:ae:41:09:fa:97:28:
37:fb:55:c7:95:51:66:89:d0:67:af:b8:45:56:cd:60:3f:d8:
d2:db:7a:e2:d0:4c:a0:1b:89:e7:3a:20:ce:81:bd:a2:a5:be:
92:cb:37:c6:3c:67:19:90:c7:82:80:ad:67:36:1a:2a:a8:8a:
53:6b:a2:e0:21:17:43:dc:eb:11:2c:fe:b9:0d:24:68:54:1b:
21:cd:cc:79:ca:b9:4c:55:17:b8:cb:bf:42:97:e2:44:53:b2:
46:35:3f:8e:c6:06:66:85:45:33:7d:48:70:fc:4a:7a:ef:56:
1b:f5:e7:06:3f:91:f5:0d:2e:1c:77:14:49:9e:bb:38:ad:94:
76:0a:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:06:08 2025 by rpki-client