Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECB7986F81711EFB15F4F91762E951A.roa
File: 2ECB7986F81711EFB15F4F91762E951A.roa (raw, json)
Hash identifier: V/ntwcg/30wXLTapbkQ0bG7eavKGX3yRkcn90r3Us1A=
Subject key identifier: 25:E6:58:60:E6:4B:AD:28:26:A8:99:5C:DD:E0:8D:09:93:CE:40:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECB7986F81711EFB15F4F91762E951A.roa
Signing time: Mon 03 Mar 2025 10:06:33 +0000
ROA not before: Mon 03 Mar 2025 10:06:29 +0000
ROA not after: Wed 30 Apr 2025 10:06:29 +0000
asID: 63139
IP address blocks: 154.94.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94194 (0x16ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:06:29 2025 GMT
Not After : Apr 30 10:06:29 2025 GMT
Subject: CN=67c57f28-aa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:2c:93:0b:28:9d:20:cc:9a:57:a8:e7:f3:
1d:c8:96:58:a5:4c:26:53:f5:2c:0b:86:1f:e7:01:
22:d8:b2:1f:74:bd:4e:c7:49:18:4b:32:d3:6f:f9:
a8:d9:44:a2:ea:9c:31:9c:37:ef:ab:6f:66:9e:d5:
c7:3d:05:ba:89:98:83:2e:5b:73:f2:b1:71:f4:dc:
ef:d5:a1:09:c3:77:22:e1:86:f4:a3:88:05:29:72:
19:19:6a:63:60:5f:ee:72:ff:84:c0:0f:2a:ae:59:
05:4f:b3:47:20:31:64:b5:2b:15:ef:3c:92:e4:74:
81:15:e3:ca:ef:26:24:5a:14:aa:de:20:c6:ba:97:
16:1e:c7:d3:11:e5:6b:ac:a0:4d:1d:ab:79:d6:34:
81:fb:34:af:a9:c7:0f:09:9e:01:71:19:a2:ee:9f:
9e:3e:6f:14:97:a0:9d:2d:4c:46:5a:79:66:6b:8c:
54:d0:47:6e:00:8a:12:4b:84:29:23:21:71:94:63:
0e:e5:e5:5c:58:23:6b:5d:ff:ab:0d:92:66:db:50:
1d:3b:c9:df:07:ec:04:d6:22:e3:46:8b:3b:8d:97:
de:4e:ee:3c:08:f1:c2:62:af:39:89:3b:c0:99:72:
0d:0a:61:6e:d8:2e:9d:10:13:c8:2f:09:1d:d0:3d:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:58:60:E6:4B:AD:28:26:A8:99:5C:DD:E0:8D:09:93:CE:40:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECB7986F81711EFB15F4F91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.122.0/24
Signature Algorithm: sha256WithRSAEncryption
69:65:ae:66:20:f3:49:16:49:9a:a8:69:6e:ae:3b:49:99:38:
b7:92:96:ab:2b:67:4d:e6:b8:d3:94:bb:45:0e:be:a6:b1:a4:
f2:20:5c:50:ef:50:b5:4c:69:85:3f:7c:4b:99:70:5a:22:f4:
95:31:17:ff:4d:07:77:a5:7a:eb:91:a0:b9:ee:11:58:dc:02:
69:c3:19:6b:40:8e:f2:e4:f5:65:87:6d:90:0d:b7:93:32:73:
e1:1a:a2:3f:e3:5e:d1:c5:e5:49:fa:4e:c6:be:84:6c:a8:68:
b5:12:f6:91:0d:39:cb:af:e8:8f:a1:c5:d9:f7:b7:f7:0e:01:
e0:21:29:d8:1d:77:f5:95:54:d7:d3:37:a3:66:8d:6c:e1:ae:
8f:30:9c:02:d3:ff:2a:c9:ce:61:ad:7d:3e:60:78:02:60:87:
a7:08:06:f3:c0:a9:59:7b:55:16:59:57:9b:e7:a1:f3:a2:0b:
1a:de:ac:dc:17:86:2a:63:76:11:68:68:df:ca:b8:a3:fa:5a:
eb:c4:73:0a:4e:5f:76:92:f7:b9:e0:2e:d7:c1:31:14:42:39:
5f:df:14:1e:0e:30:fc:bd:50:0d:53:b6:f1:fe:8d:14:52:fc:
2f:de:75:90:f9:40:3c:26:82:ce:71:ad:c1:06:81:ad:3f:56:
66:fd:53:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:46 2025 by rpki-client