Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DBB7952F8CC11EFBF6D2E63762E951A.roa
File: 0DBB7952F8CC11EFBF6D2E63762E951A.roa (raw, json)
Hash identifier: Eah1ZyEVwwZ5VA6EMH/hGZlfJ1NBGlcNbzBqOtOBZIc=
Subject key identifier: 20:8E:6B:52:90:3A:6C:26:C5:FD:93:E4:07:69:C9:50:DC:BF:F3:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017180
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DBB7952F8CC11EFBF6D2E63762E951A.roa
Signing time: Tue 04 Mar 2025 07:41:16 +0000
ROA not before: Tue 04 Mar 2025 07:41:12 +0000
ROA not after: Sun 11 May 2025 07:41:12 +0000
asID: 5650
IP address blocks: 154.194.20.0/22 maxlen: 24
154.205.176.0/22 maxlen: 24
154.205.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94592 (0x17180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 07:41:12 2025 GMT
Not After : May 11 07:41:12 2025 GMT
Subject: CN=67c6ae9c-906e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:65:b6:dc:35:90:4b:6f:73:29:7a:63:e1:
ad:1f:a9:0f:9b:5e:fb:e1:1c:bd:f2:f5:86:cc:fc:
e7:40:81:21:2b:fd:f6:ce:61:70:fc:ad:99:8f:75:
f2:0d:3b:f5:a3:03:11:1d:78:9c:cc:2c:37:7f:5c:
bb:eb:1a:87:d7:9d:75:d8:eb:e8:8c:68:96:d3:42:
94:25:ce:1e:91:49:2c:11:e2:41:8c:39:d7:ff:c5:
b1:63:a8:56:39:81:67:e8:57:de:35:d3:06:2e:4a:
a6:e2:47:9f:2f:8d:ea:64:43:3a:9d:71:08:e1:66:
cf:35:dc:ad:17:b5:7e:76:71:4d:25:f0:d1:a9:78:
82:d0:2a:ca:6b:9e:45:a0:5f:28:fe:f7:78:0e:92:
b5:fd:6c:f7:78:c5:47:27:96:76:e8:46:e2:2f:84:
a0:70:ed:a2:13:da:78:95:68:81:79:e2:3f:54:61:
b1:d9:29:84:57:05:63:00:0a:e9:93:53:95:e5:2d:
2d:22:ef:d4:d1:22:3a:8f:40:7d:83:ab:e8:1b:d4:
5d:0a:6f:e8:b7:31:8d:fa:8e:44:e3:e0:3b:27:4d:
74:86:b7:12:f4:5f:e5:22:43:42:91:17:0b:01:0c:
e2:1d:3a:ff:84:87:18:dc:ba:11:03:2c:5e:bc:ce:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:6B:52:90:3A:6C:26:C5:FD:93:E4:07:69:C9:50:DC:BF:F3:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0DBB7952F8CC11EFBF6D2E63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.20.0/22
154.205.176.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:94:1e:ee:ea:17:21:2a:d8:ea:45:2b:fe:85:64:be:cb:ab:
c9:d7:60:ac:c6:06:f1:a2:02:c1:b1:1f:aa:cb:b2:74:27:3d:
fb:dd:8e:58:c6:ff:ad:25:99:9a:f0:9f:28:df:76:64:96:00:
58:20:e8:d0:5d:bf:d1:15:fa:1a:28:92:52:81:89:07:10:d4:
8c:22:ca:90:6c:39:c9:fd:f9:9a:9f:e0:54:b0:59:ee:62:2e:
cc:b9:d0:71:92:3b:a1:36:97:fb:75:60:c7:ec:37:2a:fa:92:
b7:e6:9b:f4:89:bf:74:d0:d7:d8:db:ac:e3:1b:d5:ee:66:82:
e7:cc:cb:ee:d9:9c:9b:da:fc:0a:aa:b4:69:2a:bc:88:9f:cb:
67:e8:5d:35:28:60:fc:01:a6:bd:51:0a:9e:f9:7c:1f:ca:4a:
cc:50:6f:7d:9f:0e:4d:a5:a3:82:57:fe:85:a1:63:71:53:59:
fb:42:a8:b9:94:42:ac:5e:ac:cc:e0:a0:e9:64:82:45:7f:bc:
00:82:23:85:c2:60:e1:e7:66:7c:b7:9b:c1:8a:56:36:92:aa:
95:ed:5e:18:71:cf:58:4b:79:c6:2d:29:1b:dc:50:16:fe:98:
5b:ab:4c:01:da:57:fc:7f:46:e0:3b:6d:a4:ab:87:c9:87:3d:
d5:e8:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:20 2025 by rpki-client