Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A62FDE096D11F0AE60E651762E951A.roa
File: 29A62FDE096D11F0AE60E651762E951A.roa (raw, json)
Hash identifier: 7r5WTQlSbStiPwP8Lz+hOqgarOPIcUzd1AFVxG9It/w=
Subject key identifier: 12:73:45:88:74:81:A3:8E:61:37:93:93:1B:18:23:3D:44:F8:7E:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01762A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A62FDE096D11F0AE60E651762E951A.roa
Signing time: Tue 25 Mar 2025 11:34:50 +0000
ROA not before: Tue 25 Mar 2025 11:34:47 +0000
ROA not after: Sun 25 May 2025 11:34:47 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95786 (0x1762a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 11:34:47 2025 GMT
Not After : May 25 11:34:47 2025 GMT
Subject: CN=67e294da-ac78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:a9:f5:b1:25:10:43:7e:1f:dc:b8:20:b3:
fc:b8:5b:87:b2:23:83:3c:13:4c:9b:b9:1f:e6:62:
7b:f9:1b:50:a0:3c:5c:ac:7b:12:8d:e0:49:d7:dd:
3d:4f:c1:82:b0:57:40:88:8c:28:7d:4b:2a:d3:e2:
99:50:69:71:5e:fb:2c:75:0a:c6:1b:ba:c2:39:5b:
22:6e:11:e3:43:bf:10:3c:85:34:af:ba:ce:ae:01:
1d:3e:c5:d7:1c:3d:5f:cf:8d:65:c5:16:a1:d5:fc:
95:85:b0:56:9b:9a:ce:4f:76:ac:f1:69:cd:62:24:
f6:88:cd:27:66:64:c7:7f:66:24:63:ad:e4:53:5a:
c8:a0:6b:25:db:ff:44:26:c1:8c:ae:d0:95:af:b2:
95:12:6e:f5:cf:f5:ce:a8:d3:4b:61:5e:22:28:16:
4d:3e:09:92:10:61:4c:b0:d9:ed:10:a4:f3:da:07:
94:6d:b7:c5:2f:a6:26:e0:d2:67:2a:3b:10:18:e6:
6e:79:ac:0a:1c:71:03:0a:d3:88:29:4f:52:2b:37:
8f:56:03:d5:65:8c:d9:87:5c:a3:d4:3d:56:af:ce:
d9:c0:24:73:ea:1e:af:1c:8f:18:ae:2e:88:64:52:
58:09:5a:a9:f9:b1:89:44:8a:cd:63:38:cb:f1:a7:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:73:45:88:74:81:A3:8E:61:37:93:93:1B:18:23:3D:44:F8:7E:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29A62FDE096D11F0AE60E651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a1:37:39:b0:f2:6c:99:d0:9d:c5:12:6e:49:c5:39:09:ed:
ab:55:ca:a6:cd:b8:a2:4c:ae:8b:31:ca:03:d6:8f:c2:48:a8:
d7:1e:13:fb:0b:dc:4a:28:f9:9f:6a:85:5d:5b:a4:a3:70:bf:
6e:4b:d4:5a:62:d3:e3:d8:a9:1b:97:09:7f:9c:55:dc:cc:05:
5a:2c:b0:ea:e7:c7:a0:26:91:8f:52:d8:d6:22:29:1d:8d:ab:
19:ca:05:12:a0:1a:9a:82:66:53:91:87:70:e9:9c:0c:e9:df:
a2:b8:72:b9:6a:53:38:50:fe:63:72:57:db:80:cb:38:99:e9:
be:c0:76:46:e4:dd:04:79:3e:57:02:aa:01:86:96:63:1c:0c:
e2:04:4a:8d:0e:7b:b7:59:3a:f5:92:4d:11:87:6c:3b:66:e8:
57:d2:aa:a1:74:b0:98:bb:41:5f:94:bf:8b:d7:1c:81:f4:c0:
78:2e:a4:24:15:9b:36:2c:1a:c9:b7:f3:65:2b:fa:5e:01:47:
51:05:0c:37:0a:36:1a:04:6c:d0:4c:1d:c9:0c:f1:ca:67:29:
b7:f7:07:e2:06:59:7e:88:ec:a5:58:85:e1:1f:4a:79:58:84:
20:eb:0b:0b:f4:19:d8:f5:7b:3b:f6:8e:01:aa:d0:04:79:ab:
38:f1:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:56 2025 by rpki-client