Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1940B196F45011EFBBC0C4B6762E951A.roa
File: 1940B196F45011EFBBC0C4B6762E951A.roa (raw, json)
Hash identifier: WcKcG9bT09G1DIEtSJ7XTLawf/c1QmPnOdFzrTHCnng=
Subject key identifier: 76:B7:0A:39:48:23:C9:E1:A8:64:7C:D8:A5:4A:83:77:0B:05:50:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016472
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1940B196F45011EFBBC0C4B6762E951A.roa
Signing time: Wed 26 Feb 2025 14:43:53 +0000
ROA not before: Wed 26 Feb 2025 14:43:49 +0000
ROA not after: Sat 19 Feb 2028 14:43:49 +0000
asID: 17561
IP address blocks: 154.82.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91250 (0x16472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:43:49 2025 GMT
Not After : Feb 19 14:43:49 2028 GMT
Subject: CN=67bf28a9-1f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:fb:70:f0:68:d0:ec:09:3d:23:66:a4:b4:
cc:ad:cd:ca:b9:fe:bb:c1:58:77:74:94:29:04:e2:
f9:c9:27:8a:5a:e1:08:57:cc:cb:d0:8a:86:a6:99:
4e:b6:f2:7b:df:0e:63:1a:55:c4:8c:db:9f:e6:e9:
35:d1:87:9e:78:8a:e4:ed:41:bf:30:36:4a:c7:ba:
71:65:52:9b:ea:df:83:30:2f:69:2c:2d:d2:b4:c1:
d5:f8:5b:af:01:69:71:55:21:aa:59:73:17:c9:07:
ff:6a:82:53:a1:9b:45:4b:ae:80:67:00:53:d9:97:
ad:d2:ad:b5:71:ed:75:57:f0:59:26:8c:8f:b2:93:
4b:fd:4c:dd:61:f0:7e:52:60:29:ef:2e:0c:e8:27:
0d:22:4f:0f:20:30:8d:43:d5:64:7e:84:dc:7e:2b:
ad:5e:b9:0c:de:80:49:80:13:b3:fa:e4:85:d9:c2:
d8:94:89:33:68:18:79:74:62:1e:3a:66:e2:4d:a0:
a6:e2:ed:e8:d2:a2:97:3b:01:55:b9:1e:2a:44:5e:
82:a4:ce:38:4a:93:b3:7f:61:fb:da:3e:8e:d2:ce:
e8:31:0a:41:58:83:48:72:9f:e0:21:a3:d2:f1:24:
45:a9:5d:6f:e6:c2:8f:56:93:90:11:da:21:76:60:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:0A:39:48:23:C9:E1:A8:64:7C:D8:A5:4A:83:77:0B:05:50:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1940B196F45011EFBBC0C4B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.216.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:89:43:a9:02:ab:08:7f:24:c8:ec:45:b6:7c:f6:03:bd:f6:
69:bb:6e:0d:7c:41:86:77:f5:50:5f:fd:f4:4b:3b:20:6f:c1:
59:ff:b9:63:b1:8c:64:0a:b9:e1:6d:9e:27:98:72:8b:cd:03:
5d:5d:52:fb:7f:e1:f3:d1:62:bd:4a:45:3f:76:6f:37:ba:9d:
0a:84:cb:98:a6:4b:ca:56:0d:3b:7b:cb:c7:a2:3b:9f:46:81:
21:6b:d8:22:24:9e:3f:63:9f:34:92:05:fb:f8:64:6f:d4:45:
a2:55:81:e4:bb:2a:b9:1b:05:4c:34:9d:16:e1:62:9d:08:42:
b3:31:2a:c7:44:a9:75:b5:a5:2c:98:1b:ea:a4:34:9f:de:58:
ad:da:0c:49:79:27:dd:88:65:35:3a:7b:8b:9f:e3:0c:b6:46:
05:97:79:2b:d8:06:53:cf:b3:43:2f:b8:6b:5c:3c:8e:1d:07:
97:9e:93:13:32:9e:fc:26:45:13:52:b9:3f:1e:51:84:56:b8:
b8:d1:a8:20:e2:0e:f3:d5:73:d6:8d:00:49:2a:85:0b:6b:03:
b1:cb:ff:a9:cc:c5:8c:09:0c:1e:b1:4d:f9:c8:86:4d:a8:cb:
4e:39:15:89:d4:92:65:ac:e8:93:3d:59:0a:f6:b1:eb:0e:6d:
ae:25:fb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:49 2025 by rpki-client