Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36BCF0B0F5CF11EFB269AB87762E951A.roa
File: 36BCF0B0F5CF11EFB269AB87762E951A.roa (raw, json)
Hash identifier: 6Ug8FyPm9bbX+K7VRwxVEkm7nrFpZWMXTDowr6Njk7o=
Subject key identifier: BA:5B:F4:C6:B1:51:FE:AD:7C:E2:F6:92:8A:EE:F2:62:55:F3:10:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36BCF0B0F5CF11EFB269AB87762E951A.roa
Signing time: Fri 28 Feb 2025 12:26:20 +0000
ROA not before: Fri 28 Feb 2025 12:26:16 +0000
ROA not after: Fri 11 Apr 2025 12:26:16 +0000
asID: 138915
IP address blocks: 154.203.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92964 (0x16b24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:26:16 2025 GMT
Not After : Apr 11 12:26:16 2025 GMT
Subject: CN=67c1ab6c-e71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b0:f1:4b:58:51:2a:13:65:c6:c9:d3:3d:48:
01:0c:fe:45:0a:3f:72:09:d0:3a:2a:0c:fe:73:33:
6e:6f:8b:82:6c:e7:56:78:86:e7:5b:95:fc:e5:0d:
08:32:f6:05:cc:ab:2d:3d:1a:de:b1:43:1c:43:f4:
80:86:57:50:3c:40:e9:57:8c:ba:1a:33:32:5e:b6:
ea:89:9c:71:14:b8:bd:9a:5a:fa:a5:14:b0:27:eb:
71:f6:18:d8:90:4c:fe:b2:91:04:3b:72:aa:ea:89:
e8:89:49:a7:b7:bc:fb:2d:81:97:29:f5:f5:5d:2b:
48:76:3f:93:81:7b:bb:8f:d4:da:49:98:52:08:2b:
9e:a1:3b:f5:71:17:d1:b7:7c:66:86:b0:f6:98:10:
90:1f:5a:28:3a:71:e6:3f:3d:a3:e9:8a:da:3b:b4:
c9:f3:39:20:d8:9b:e7:81:c6:c3:ea:a8:26:c0:7d:
f7:c3:70:e9:53:c4:ab:77:74:46:a1:0f:35:23:bc:
a2:ba:1c:e6:8d:e6:8d:7b:08:1e:c2:6b:00:2c:b5:
95:d8:c8:3e:9e:8c:39:95:31:a2:5e:57:da:d9:43:
29:95:31:a4:44:3d:a7:82:72:99:e6:be:c5:f6:4d:
4c:05:4a:ac:66:ba:cc:41:a5:a8:c6:ba:b7:28:66:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:F4:C6:B1:51:FE:AD:7C:E2:F6:92:8A:EE:F2:62:55:F3:10:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36BCF0B0F5CF11EFB269AB87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.134.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:5a:24:93:a7:f1:7a:fa:ee:7c:25:79:22:df:1c:af:43:69:
40:57:58:4a:e1:11:27:39:37:a5:47:55:92:7c:33:c7:7d:01:
c9:b3:10:24:70:21:a5:76:fa:32:1c:4c:46:6e:1f:41:3e:17:
15:90:d1:09:d6:e2:66:cd:f1:26:62:5a:97:1f:43:ce:a8:f0:
9f:39:28:41:1e:28:01:78:23:f3:7c:52:41:50:7a:83:bd:f6:
c7:24:c3:bf:94:5d:c8:7b:8f:ef:21:99:8b:80:cb:69:27:4f:
d1:6c:60:e6:0e:5d:71:35:e8:bb:3b:cd:af:ef:5c:70:b9:42:
65:9e:3b:6e:38:c1:55:c7:f3:02:26:e9:da:8f:e8:a7:b6:da:
f8:50:40:b8:f7:06:df:d9:81:88:93:ab:70:3c:13:9f:be:16:
60:64:19:c0:b2:33:29:bc:27:38:78:16:db:46:d4:0f:81:9f:
f7:b8:1b:5a:9b:80:9f:06:7c:0e:f1:6a:af:2f:0a:3f:d6:fb:
87:a1:d6:da:83:c4:ee:4f:d8:aa:31:91:bc:1b:fd:90:0e:9a:
ef:6a:71:7a:34:d5:21:aa:04:d5:2c:d3:3f:fe:1a:2f:81:8a:
40:da:8a:8f:39:cc:0c:a4:75:ca:1d:23:dd:c4:f4:50:da:9a:
f4:09:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:50 2025 by rpki-client