Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C50DC6F62911EFBD983A69762E951A.roa
File: 37C50DC6F62911EFBD983A69762E951A.roa (raw, json)
Hash identifier: xvSnN7rvZvkidQxAPXW9709UGkYleVSzTLR2AzYD/VA=
Subject key identifier: 92:84:7B:B4:1D:C7:FA:AC:65:54:35:92:FB:D7:03:A8:45:F1:DC:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C50DC6F62911EFBD983A69762E951A.roa
Signing time: Fri 28 Feb 2025 23:10:36 +0000
ROA not before: Fri 28 Feb 2025 23:10:32 +0000
ROA not after: Sat 19 Apr 2025 23:10:32 +0000
asID: 138915
IP address blocks: 154.90.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93367 (0x16cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:10:32 2025 GMT
Not After : Apr 19 23:10:32 2025 GMT
Subject: CN=67c2426c-e6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:eb:ee:a6:d4:3b:8c:58:d5:2e:b9:d5:96:
e1:b7:83:d0:79:b8:ca:aa:57:01:02:6c:e1:52:28:
01:96:56:dd:27:50:9b:27:df:9c:2e:4a:f9:20:af:
cd:9c:88:af:57:9a:38:11:03:93:03:6d:8a:f4:74:
ff:a0:83:a3:44:e3:ca:6b:43:dd:64:36:08:05:20:
f1:2f:2a:b4:fd:e2:11:d0:a9:69:cf:cc:02:30:4a:
e1:6a:ae:da:51:7d:1d:58:05:1d:6d:08:c5:fa:70:
05:36:f4:6b:a6:ee:04:6c:35:d5:5d:a9:4c:20:e4:
3b:cd:dd:e6:62:e1:87:e9:11:bf:fb:d7:e1:64:28:
52:98:35:85:e3:2b:df:ad:46:ba:f5:86:d6:31:d2:
06:a8:6f:b8:49:4f:53:76:c7:98:1a:96:59:14:d9:
e4:7f:87:86:f0:e6:21:4c:43:78:99:96:49:14:bb:
7a:9e:d4:3f:74:f3:af:e4:4e:85:56:84:41:32:cf:
d2:86:12:9a:41:84:97:2a:5a:b8:7e:a9:db:0e:b9:
29:5f:2b:bd:cf:e9:b8:b2:65:93:a4:cd:e6:ad:f2:
fb:7a:ec:2f:6b:5b:fb:e2:f3:a3:60:29:37:bf:62:
52:27:56:e9:3f:2e:cc:76:12:ba:94:fd:d4:f8:2f:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:84:7B:B4:1D:C7:FA:AC:65:54:35:92:FB:D7:03:A8:45:F1:DC:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C50DC6F62911EFBD983A69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.46.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:93:8f:18:76:1c:a6:b0:58:d4:0d:ca:23:8f:58:58:de:08:
c3:19:33:cd:08:db:9b:a3:07:4e:c2:3e:bc:58:5d:c2:6d:64:
d6:aa:c8:d1:a5:57:0d:46:ae:a4:ca:05:db:05:98:4d:d7:fc:
44:b6:64:4f:c9:a0:08:fc:17:64:49:9a:bc:d3:da:64:e3:93:
40:6f:15:a7:8b:d3:c4:e1:57:c6:58:bb:29:6c:f9:98:a5:50:
dd:e8:4c:7c:c0:eb:ba:3b:24:32:6a:89:bb:33:89:d6:c7:b6:
57:d5:07:de:d4:7d:a7:66:90:0d:50:d0:a5:9f:7e:70:0c:14:
40:aa:d3:04:32:6d:e2:92:34:0e:8d:6b:26:c6:b2:a1:c5:ee:
57:4c:67:6b:49:d5:1a:a0:c6:52:24:66:ed:1c:36:1f:29:8c:
ed:52:12:07:0d:ea:93:ae:f1:3f:56:24:95:8a:b2:0b:8f:f9:
2f:58:20:1a:2e:ae:1f:a6:13:4e:de:1a:d1:28:7f:9e:53:57:
d5:02:31:8f:e5:ea:bf:b7:59:90:54:7f:cc:a8:28:b7:78:2d:
ee:13:c6:ca:73:6b:a8:5d:ad:57:9f:3e:b6:93:40:0a:08:ae:
f1:d1:39:4b:41:a3:75:ec:30:90:4c:5d:a2:1a:2e:80:75:59:
53:43:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:52 2025 by rpki-client