Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D21984FFE911EF8883B661762E951A.roa
File: 37D21984FFE911EF8883B661762E951A.roa (raw, json)
Hash identifier: yS7k3/HgSxmZB4xpxa0O5LCRYzDBMPyBnZKCuBU9HnU=
Subject key identifier: 4D:D9:66:8F:2E:B5:3F:7D:EE:0C:0A:21:1A:D7:C7:5B:1F:89:E3:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01742B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D21984FFE911EF8883B661762E951A.roa
Signing time: Thu 13 Mar 2025 08:57:40 +0000
ROA not before: Thu 13 Mar 2025 08:57:36 +0000
ROA not after: Thu 12 Jun 2025 08:57:36 +0000
asID: 398823
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95275 (0x1742b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 13 08:57:36 2025 GMT
Not After : Jun 12 08:57:36 2025 GMT
Subject: CN=67d29e04-e637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:fe:71:9d:10:ee:02:eb:15:ed:88:e1:81:
fa:81:32:26:ef:e2:54:6f:3e:0a:63:bb:09:f9:fc:
dc:cc:ec:de:44:bd:01:ef:62:30:3c:19:7d:fe:9b:
34:4c:6d:61:36:8f:d5:9f:16:7a:1c:fe:da:8a:22:
91:50:e3:23:03:d8:10:7d:04:a9:1a:3d:0a:7d:ac:
8c:45:a2:a6:06:97:6f:46:ad:58:53:d7:92:5b:bb:
7f:78:c7:3b:fc:9d:49:c5:84:15:c3:78:ed:7b:69:
f5:87:f8:12:4d:72:e0:c6:9c:cd:c6:e0:04:a8:54:
a2:83:3c:b9:8a:c3:c5:ae:28:e6:f0:1a:09:23:05:
d9:2d:ee:15:8a:01:b5:ac:6a:ff:29:91:ac:31:5f:
4e:62:25:fc:ec:99:d0:e4:8e:19:95:0f:3c:48:a1:
9a:da:33:ac:56:b5:80:f7:4e:cc:7a:69:9a:49:02:
72:12:38:54:db:28:59:d4:5f:2c:fb:66:14:38:04:
4f:73:c4:b9:5f:a4:e0:2e:d5:68:02:10:fe:66:b7:
01:b4:33:e7:0c:a0:94:3c:d0:9c:29:79:79:84:c9:
a7:2a:d0:53:1b:e1:7f:15:c3:c6:30:b7:a0:0a:04:
8d:8a:56:5b:90:15:ec:a3:6a:21:3c:9e:06:35:66:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D9:66:8F:2E:B5:3F:7D:EE:0C:0A:21:1A:D7:C7:5B:1F:89:E3:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D21984FFE911EF8883B661762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
10:c5:7d:89:06:b9:71:b5:63:34:95:2f:cb:52:2c:5f:ea:b1:
0b:ab:8f:ac:81:7c:9c:f0:da:b6:50:6d:f3:d3:44:08:42:d9:
3e:b3:8f:7c:e9:49:0c:32:40:38:17:51:64:93:bd:f4:f6:5f:
ad:cd:d8:b4:cb:9e:49:4f:e7:00:f9:b3:23:eb:a0:2a:11:d8:
29:43:cc:bc:fd:44:2f:60:41:93:b8:58:27:e1:f7:f6:dc:14:
c2:dd:96:ad:01:d6:3c:d2:55:cd:89:ad:c9:7a:d5:dd:db:67:
af:4a:74:7c:f0:58:ec:d8:6f:ba:6f:c3:c3:4c:5b:2f:15:cd:
b8:63:46:2e:70:98:26:57:16:af:3a:9d:09:09:5b:31:7b:5d:
23:82:34:19:c5:f1:ce:5b:a8:7b:b1:85:c4:ff:73:e2:2b:08:
aa:2c:39:ab:a7:12:3f:26:31:a7:ec:77:2d:25:05:5d:6a:49:
11:6c:13:1b:02:1b:d6:88:4e:1f:ff:be:43:99:4f:7c:e3:19:
9a:10:64:7f:5f:bb:41:16:7b:d1:7f:71:8f:55:b1:8c:a6:ed:
cc:3d:a1:95:b2:30:1b:6e:f5:aa:50:77:dc:86:2c:53:6a:ee:
ca:e1:64:67:74:dc:a4:29:68:3e:49:f0:bd:b8:1a:0d:9c:48:
d2:13:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:54 2025 by rpki-client