Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35E59D52FEEB11EFB0F54D7A762E951A.roa
File: 35E59D52FEEB11EFB0F54D7A762E951A.roa (raw, json)
Hash identifier: Hxpc3DNlcJxekiKF4YaqynVO+gzX6KfhTyP/naH71k0=
Subject key identifier: 6C:AC:3E:CA:8F:72:62:C7:CD:D7:AB:6D:66:F5:C9:8F:FA:7A:79:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017381
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35E59D52FEEB11EFB0F54D7A762E951A.roa
Signing time: Wed 12 Mar 2025 02:39:25 +0000
ROA not before: Wed 12 Mar 2025 02:39:21 +0000
ROA not after: Fri 06 Mar 2026 02:39:21 +0000
asID: 984
IP address blocks: 154.90.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95105 (0x17381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 02:39:21 2025 GMT
Not After : Mar 6 02:39:21 2026 GMT
Subject: CN=67d0f3dd-176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:8b:29:2a:a4:84:05:72:17:fb:90:b7:d2:
36:1a:28:fa:e2:21:94:83:25:a9:26:8f:55:90:ff:
dc:37:26:8f:70:1b:9c:a7:cc:66:9e:06:7e:5d:d8:
10:e0:7f:6c:29:92:1a:64:2c:02:5c:8d:55:9d:aa:
c6:66:e7:65:2f:b0:e5:cb:7d:b9:45:8f:8a:aa:5d:
ac:99:59:93:b1:6f:74:5d:9b:bf:08:8b:e4:3f:df:
0e:3c:97:67:8e:c3:52:98:cd:37:bb:ec:17:36:d2:
76:ec:38:a2:56:e5:3d:0f:82:fa:79:2c:92:78:00:
76:5b:0b:d9:36:3c:a6:af:0b:41:7e:da:cd:44:3e:
4d:c6:e2:de:fd:5c:9c:2d:8a:cd:b6:52:e4:c5:8a:
53:66:a2:56:64:3d:75:d2:2f:6f:96:71:ea:48:30:
99:6e:ba:77:45:8f:df:1f:88:b7:fe:c1:16:c7:e9:
c1:2d:6d:cd:78:00:9d:c9:ec:60:78:71:04:35:41:
96:72:af:00:06:44:99:d2:85:a3:ce:e5:5c:fc:d0:
82:16:44:5c:1e:3f:41:37:c3:54:16:f9:3d:b2:a9:
26:77:ad:c9:40:8d:fa:39:19:62:01:8e:d3:e3:c9:
b5:29:22:a3:73:c5:4f:b0:60:5c:d5:27:96:7b:c8:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:3E:CA:8F:72:62:C7:CD:D7:AB:6D:66:F5:C9:8F:FA:7A:79:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35E59D52FEEB11EFB0F54D7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:69:b6:54:21:ea:29:c3:14:89:88:a1:e2:7b:9e:81:89:25:
0e:e2:92:61:69:5e:22:33:74:c4:8f:da:b3:87:40:5d:c7:d4:
98:dd:c0:87:f5:e1:36:82:07:6b:c1:4d:aa:6c:bc:6f:84:76:
6a:a4:d0:de:de:4a:91:a6:21:d1:cd:72:1f:fa:f0:9b:f4:4c:
73:29:a9:34:94:e1:10:33:3a:1a:d4:55:35:6e:9a:83:7b:88:
45:f7:3d:ff:28:65:96:d2:18:df:b1:b2:6a:0e:b0:6c:8b:6c:
1b:50:41:21:f8:17:63:2e:dc:38:c0:fa:83:1b:bd:47:bc:52:
ed:84:d3:3e:36:10:18:39:7f:0f:2e:78:ae:c9:17:f3:2d:0e:
9e:09:52:a3:43:0b:43:8a:d3:30:0a:ba:16:f3:36:e4:6f:86:
86:90:41:a8:b9:d5:1d:d5:7b:fe:ed:37:05:2b:6a:9a:02:ba:
0f:7c:a6:e1:a6:b2:4d:37:b6:32:9d:3f:89:82:81:44:98:ef:
54:3a:c1:db:71:e3:ff:77:be:f1:04:a0:e5:e4:f6:89:0d:b5:
38:68:83:97:d8:1c:0e:de:8f:b4:f5:56:6e:04:85:98:49:94:
e8:03:20:98:6d:cd:23:a7:73:21:c4:41:bb:de:c8:ee:02:46:
0a:d4:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:16 2025 by rpki-client