Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3193AE82F45611EFAD1B7863762E951A.roa
File: 3193AE82F45611EFAD1B7863762E951A.roa (raw, json)
Hash identifier: WHKAYgUuTkKKHQosImLz8LyxUeglL8KMqriv81CkE6g=
Subject key identifier: 92:CF:56:3F:74:FC:2C:56:C5:A8:24:AC:C0:4D:A1:DC:2C:18:DE:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3193AE82F45611EFAD1B7863762E951A.roa
Signing time: Wed 26 Feb 2025 15:27:31 +0000
ROA not before: Wed 26 Feb 2025 15:27:27 +0000
ROA not after: Sat 19 Feb 2028 15:27:27 +0000
asID: 17561
IP address blocks: 154.82.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91345 (0x164d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:27:27 2025 GMT
Not After : Feb 19 15:27:27 2028 GMT
Subject: CN=67bf32e3-a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:c9:56:53:37:4f:c9:56:d2:a8:65:ba:76:
4a:8e:fe:ec:f7:d9:0f:df:98:85:32:4a:77:9e:cb:
ee:72:c4:f1:74:68:1d:15:6a:ca:c6:45:fc:e9:58:
19:c7:3c:da:f7:76:de:5b:fa:5d:d3:00:f9:8e:5a:
59:2a:a7:31:c0:a1:e8:e4:03:b4:27:80:b7:b2:7b:
4a:6a:47:10:20:4c:3c:e5:5a:8a:c7:2e:6e:76:9a:
34:89:6b:32:f2:9c:68:87:ef:77:2b:97:0a:f5:66:
b6:0d:36:db:36:bc:f6:53:33:f1:49:2f:3b:b1:9e:
f1:7d:fb:58:e2:92:59:e0:0f:78:cf:5e:fb:2e:3d:
6c:9d:6e:0f:fc:e4:3c:14:95:5b:01:b6:69:4c:47:
19:7c:0e:84:79:e8:63:75:31:d2:77:31:fc:91:de:
bb:ec:10:01:ad:f4:c1:ef:69:5b:97:cc:46:c6:fe:
6b:ea:93:e1:9b:b2:55:f7:db:df:0e:13:e1:77:94:
2f:55:eb:bb:25:8a:6f:eb:27:84:8f:7d:60:d2:14:
3d:5f:55:d6:26:d0:c6:70:48:19:5f:a4:25:76:a0:
f4:e1:ca:74:41:27:e9:42:ae:6c:f3:36:75:c7:53:
ee:35:e1:e6:16:f1:ee:2b:f3:0a:67:4a:c7:0e:28:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CF:56:3F:74:FC:2C:56:C5:A8:24:AC:C0:4D:A1:DC:2C:18:DE:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3193AE82F45611EFAD1B7863762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.235.0/24
Signature Algorithm: sha256WithRSAEncryption
83:91:55:11:d9:e1:58:2a:9e:69:23:e6:49:40:a0:2e:11:bb:
52:9d:c7:87:19:1f:0a:02:a9:91:cd:47:99:5e:fe:53:50:0f:
50:4c:f4:d8:c4:34:8c:11:ca:10:85:24:fd:fe:88:6d:99:7c:
cc:95:95:89:d7:d9:36:dc:14:4d:31:66:94:04:80:8e:d1:3b:
00:ea:2f:8c:93:94:4e:2f:39:03:ec:ab:3e:a5:22:27:27:2b:
ec:84:07:e5:41:23:68:0e:4d:bd:43:b8:51:98:95:05:61:16:
84:ab:c6:21:fc:c7:09:e1:f8:1e:fd:89:4f:2f:6e:6f:28:a7:
78:6d:fa:73:1f:6a:24:c7:65:3d:df:62:8c:0e:51:cb:0b:c1:
42:e3:61:65:bf:c4:7f:fb:47:77:5f:a1:02:e1:31:19:15:b4:
39:53:74:a5:0c:f1:ca:cc:16:fe:99:d8:2d:0f:a3:61:e8:d1:
9d:a9:06:2a:df:af:71:af:da:b6:4b:b2:2b:b4:61:a8:52:3d:
74:00:d8:f6:13:e0:81:51:76:5d:cb:68:64:ea:66:06:db:92:
dc:e7:c9:32:b7:63:99:42:4c:92:bf:ac:6a:26:91:67:dc:44:
9e:f0:48:bd:9c:c6:1e:be:f4:ee:89:0f:2d:f3:f7:4e:c1:e9:
6b:2b:b7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:19 2025 by rpki-client