Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A8CD416F3BA11EF9A8B29A0762E951A.roa
File: 2A8CD416F3BA11EF9A8B29A0762E951A.roa (raw, json)
Hash identifier: hgZ5JjaSD19l7QubJj6grMrGgLq9TFAb2fZR8vY2idM=
Subject key identifier: 26:50:03:F5:2C:05:D1:87:C9:8D:08:1D:8C:57:C8:7F:83:74:8E:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016001
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A8CD416F3BA11EF9A8B29A0762E951A.roa
Signing time: Tue 25 Feb 2025 20:50:37 +0000
ROA not before: Tue 25 Feb 2025 20:50:34 +0000
ROA not after: Wed 09 Apr 2025 20:50:34 +0000
asID: 138915
IP address blocks: 154.95.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90113 (0x16001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:50:34 2025 GMT
Not After : Apr 9 20:50:34 2025 GMT
Subject: CN=67be2d1d-aaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:34:e7:48:76:7b:e1:10:a1:c6:60:59:1c:
73:1b:f5:ce:5e:d5:dc:41:62:95:0e:0d:aa:2f:2b:
73:d6:6c:6e:f8:4d:0c:f6:15:3f:c6:7f:46:b7:3d:
9c:63:29:9f:f8:3b:1c:c0:90:0d:5a:97:d3:25:58:
c3:25:85:1b:45:2c:fd:aa:d8:99:8b:6c:5f:f6:13:
d0:a1:e0:2f:05:62:6d:3c:4c:5c:1d:c2:ec:38:d7:
86:7f:a3:e4:a0:b5:e5:b6:7e:fb:16:a0:ea:86:a0:
45:93:04:6f:db:78:4a:c0:12:83:86:e1:cc:21:08:
c5:82:ac:b1:3a:bf:c3:a6:38:bc:49:32:38:38:48:
4d:4c:72:aa:4a:9d:50:67:37:f8:9c:db:60:b9:ce:
93:df:fe:36:de:d1:44:11:25:31:83:63:64:da:1a:
12:11:b9:2e:70:a0:a3:45:49:cb:01:fb:65:dc:19:
1a:03:b3:df:62:51:74:0d:10:91:bd:8c:c3:c1:fc:
52:8d:d7:d5:b9:f7:10:24:22:a5:c2:ea:64:4b:39:
6e:27:f5:f5:a4:d0:af:05:b8:f3:8a:0a:c9:dc:df:
2e:04:14:1b:88:81:6b:9b:57:b5:7e:1a:43:6d:fc:
ef:41:0c:83:25:71:fe:b7:c9:99:c1:58:04:69:3e:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:50:03:F5:2C:05:D1:87:C9:8D:08:1D:8C:57:C8:7F:83:74:8E:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A8CD416F3BA11EF9A8B29A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.70.0/23
Signature Algorithm: sha256WithRSAEncryption
28:27:47:ac:f1:c2:8d:12:69:8c:41:56:88:c9:31:89:cb:b8:
b5:ef:07:a1:c2:8a:51:29:49:89:8b:0a:23:e1:b8:d9:79:bd:
cf:5b:20:1a:3e:fc:fb:ad:94:0b:e5:53:08:3f:9f:34:15:a6:
44:ac:6b:c9:db:e0:23:cb:3e:6a:66:2f:d6:11:f0:ff:a6:b0:
36:10:02:df:89:5c:8e:77:3e:7b:ee:40:5e:ba:c3:03:1b:12:
6f:67:38:4d:b8:c7:41:99:eb:c8:64:71:80:f9:f6:7e:ea:4b:
38:fd:32:91:5c:ee:f4:ed:9c:9b:4d:85:a9:d9:92:0a:a3:0c:
a8:df:96:46:39:7c:36:a4:55:6a:a6:e5:6d:7d:2c:63:8a:3d:
2a:5e:a5:3f:97:ec:1e:8e:19:76:3b:f7:fb:ff:c7:d4:49:e9:
32:e7:ef:dc:4a:81:c3:c7:71:6b:f8:15:5b:9b:7d:93:c1:87:
f4:99:a3:41:3b:eb:67:79:cf:1b:a2:f4:89:c1:fd:df:38:f7:
11:6c:3a:f2:d4:7f:1e:ac:5b:b2:0b:b9:e2:51:49:fa:2a:91:
19:a9:85:03:9b:c3:d8:58:3e:30:74:00:1f:cc:57:90:9c:5a:
eb:c5:ff:c1:61:a2:d3:00:95:dd:1d:e7:cc:8f:9c:51:fa:a9:
ca:60:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:32:18 2025 by rpki-client