Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CF8FA5AEF3D11EFA8B835AB762E951A.roa
File: 0CF8FA5AEF3D11EFA8B835AB762E951A.roa (raw, json)
Hash identifier: tuoVof24HIPXj+uFC189YY5+kl+KBMDYaIHjRMTS6Tw=
Subject key identifier: 95:51:11:12:94:76:06:81:9D:DF:36:1D:99:BF:A8:48:E2:A5:48:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0158A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CF8FA5AEF3D11EFA8B835AB762E951A.roa
Signing time: Thu 20 Feb 2025 03:44:56 +0000
ROA not before: Thu 20 Feb 2025 03:44:52 +0000
ROA not after: Wed 31 Dec 2025 03:44:52 +0000
asID: 17561
IP address blocks: 154.198.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88230 (0x158a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 20 03:44:52 2025 GMT
Not After : Dec 31 03:44:52 2025 GMT
Subject: CN=67b6a538-5333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:f4:5a:da:25:31:95:85:9f:4d:0b:50:b1:
fe:21:67:c8:c1:64:99:a3:b4:c5:b9:04:c6:4e:88:
db:41:96:a9:9d:11:f6:d3:51:37:15:84:46:a3:27:
9d:dc:38:a4:1d:77:2b:c5:1b:f7:3f:c0:d8:6f:a7:
2a:50:7f:66:04:71:c4:0f:09:7f:63:76:6b:80:c6:
bb:d5:8d:3b:11:01:24:bc:31:3b:07:7e:37:88:8f:
ef:80:e6:57:3b:17:24:48:b0:3d:d5:6e:96:79:4f:
f5:33:49:4b:dd:c3:2f:c6:db:7b:a6:37:73:fc:c8:
be:2c:72:ca:56:96:eb:b6:f8:c9:4e:c4:92:9d:52:
c3:0a:e7:91:6e:27:15:a4:ad:63:ac:b4:40:96:22:
ae:5d:bf:21:75:d7:30:7e:82:14:b1:a4:05:a8:24:
56:30:b3:c4:93:29:46:25:27:ee:5f:62:4d:e9:fb:
73:7e:6a:a1:cc:37:88:04:d7:15:50:c1:2e:41:13:
e2:b7:6c:55:3f:ed:85:4e:03:73:c5:33:be:de:2a:
ce:56:ac:48:34:41:e2:29:7b:e3:12:a4:6f:76:c9:
f3:d7:11:64:52:42:40:96:b2:45:55:a0:4f:b0:33:
a3:c5:26:6b:16:31:97:32:1c:8b:92:31:f7:94:7f:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:51:11:12:94:76:06:81:9D:DF:36:1D:99:BF:A8:48:E2:A5:48:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CF8FA5AEF3D11EFA8B835AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b6:92:74:a4:ab:23:d7:02:ae:76:60:41:76:39:1b:f9:87:
2a:3b:f7:34:5c:47:69:94:8f:62:81:b4:db:88:34:72:ca:5a:
06:2a:46:45:dc:bf:1a:57:8b:96:86:64:f3:67:5f:4a:85:c6:
7d:ac:eb:46:46:44:c7:9d:3d:92:b6:cf:1b:00:41:46:71:e2:
49:fe:bb:99:10:70:57:79:c5:e3:7c:ad:2f:5d:b4:9f:31:23:
b3:55:0f:d6:bc:e2:a9:01:b3:58:b7:35:39:e7:1f:bc:7d:d4:
a3:86:2f:af:b2:9b:cb:2a:1a:19:dc:fe:5e:f5:69:f1:6d:66:
6e:2f:bc:60:43:0c:2f:5f:95:65:2d:a4:fc:78:14:80:e7:62:
58:67:51:08:41:89:3d:e2:3c:3e:3c:5d:8f:a9:9c:2e:5f:c4:
ba:e0:a6:b1:1f:57:d7:2d:dc:16:3d:f3:16:3d:cf:ec:e1:8f:
18:09:ff:fe:e1:89:d0:c4:16:75:74:ac:e4:e3:68:17:86:0c:
e1:f1:b6:af:7a:7d:ea:99:49:96:d5:6b:8e:75:8b:17:17:68:
7c:7b:26:e9:ca:f2:b2:dc:0a:f8:0b:6e:02:86:03:c5:bc:83:
cf:8b:4a:b5:1f:01:62:66:31:87:5f:45:28:20:4c:14:72:3c:
39:a3:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:11 2025 by rpki-client