Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CBAE1D804BE11F08B664FBB762E951A.roa
File: 1CBAE1D804BE11F08B664FBB762E951A.roa (raw, json)
Hash identifier: lMGK9LPTnGCquF8rhQfoLMLKzradkjd8GgOY022xOOM=
Subject key identifier: F4:09:A2:F0:B9:FC:86:EC:F7:38:CA:90:59:74:5A:77:AF:00:23:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01750A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CBAE1D804BE11F08B664FBB762E951A.roa
Signing time: Wed 19 Mar 2025 12:31:42 +0000
ROA not before: Wed 19 Mar 2025 12:31:38 +0000
ROA not after: Wed 09 Apr 2025 12:31:38 +0000
asID: 7018
IP address blocks: 154.81.0.0/21 maxlen: 24
154.90.8.0/21 maxlen: 24
154.95.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95498 (0x1750a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 12:31:38 2025 GMT
Not After : Apr 9 12:31:38 2025 GMT
Subject: CN=67dab92e-f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:e1:68:98:32:63:32:0c:c9:46:8b:05:ea:
54:4b:db:93:d5:b2:5e:55:6b:04:49:5c:3f:d0:2f:
c8:12:dc:5f:53:9c:c5:d5:73:65:0a:f6:23:01:8b:
ba:71:fa:a3:40:27:98:25:a5:aa:08:65:85:51:d2:
c6:a5:d7:3a:81:33:92:b4:70:bd:28:2f:fd:5e:8c:
e6:25:4e:b8:1c:d3:73:53:ec:4d:1b:e8:5a:fe:fd:
8d:44:fa:f5:fa:6a:18:2a:6a:8e:73:ce:6d:cb:69:
6a:41:0a:57:a0:8a:17:6b:4c:f7:1c:81:67:97:28:
f5:9d:74:9a:39:7f:7c:aa:c9:88:8f:86:ac:e7:1b:
b3:02:8c:a3:98:32:6f:e2:ac:69:fc:55:88:ef:47:
59:36:fe:67:08:36:45:0e:55:e1:9c:73:10:8f:8f:
85:27:dc:64:32:26:62:c8:6f:a4:c0:dc:8d:76:22:
0c:3f:72:49:01:e4:8b:17:bb:4c:7d:78:ca:a3:0b:
65:67:da:9a:d2:23:ba:4c:70:22:55:ca:a9:68:c5:
4a:71:4a:f5:e8:19:e2:90:2c:76:ae:2c:fe:4d:03:
99:fa:ce:a6:0a:91:e1:66:bf:9b:27:4e:f7:d6:ee:
e4:04:0b:de:f4:db:de:7b:d6:c7:1b:f7:8c:98:32:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:A2:F0:B9:FC:86:EC:F7:38:CA:90:59:74:5A:77:AF:00:23:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CBAE1D804BE11F08B664FBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.0.0/21
154.90.8.0/21
154.95.8.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:a2:09:d1:67:8b:ff:2f:33:41:de:5d:64:ca:50:28:b9:cc:
a6:6f:1d:8c:bf:6f:a4:3d:0c:b6:72:34:5a:50:d6:3b:50:df:
05:33:0a:9e:ca:d0:c2:80:16:35:f3:65:63:4d:96:d6:1f:b9:
06:8e:ef:cd:42:e2:ad:5d:db:8a:08:d5:e1:55:0e:01:39:d1:
8c:f0:2e:20:a9:82:89:1c:9a:75:87:6c:35:37:cb:68:9e:74:
66:06:ab:f4:26:23:6d:10:79:22:89:34:eb:f9:99:56:7f:3e:
d8:2a:f0:41:15:8d:b2:16:45:78:ab:fc:a0:e3:7e:b7:35:85:
8d:eb:05:6a:bd:0b:31:74:b9:c6:a1:da:14:a5:07:69:35:7f:
ef:91:ed:d6:77:ae:d5:46:c0:23:30:54:ea:63:50:d9:c0:12:
6b:9d:1d:43:d9:6b:59:74:76:bb:6f:f7:2f:af:27:2d:1e:97:
24:31:c9:87:66:a4:cc:58:9d:6d:f5:4b:9f:5d:83:6c:0c:a7:
ca:27:e1:11:9d:e9:d6:f7:fd:7f:2c:a8:59:fe:19:55:ce:0f:
b0:d5:8d:18:0b:d0:b6:be:e1:9a:c6:d9:d3:5e:f1:a7:2e:d3:
dd:38:e9:00:5d:85:68:ed:f7:e5:9b:5e:6d:99:eb:f5:bc:4e:
74:b5:9c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:14 2025 by rpki-client