Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38E20FC2F68A11EFB50A348B762E951A.roa
File: 38E20FC2F68A11EFB50A348B762E951A.roa (raw, json)
Hash identifier: u6GCHaBwX2FVdWkbTCUDOHTUtGA44sWQ43DL5nYtKfw=
Subject key identifier: EE:A5:FC:8B:4A:8E:F3:C1:90:4D:E5:7D:07:53:14:C6:D1:6F:94:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38E20FC2F68A11EFB50A348B762E951A.roa
Signing time: Sat 01 Mar 2025 10:44:59 +0000
ROA not before: Sat 01 Mar 2025 10:44:56 +0000
ROA not after: Sat 05 Apr 2025 10:44:56 +0000
asID: 203020
IP address blocks: 154.204.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93662 (0x16dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 10:44:56 2025 GMT
Not After : Apr 5 10:44:56 2025 GMT
Subject: CN=67c2e52b-6e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:82:2d:1f:fe:1d:a4:26:46:86:34:54:57:
57:f7:8a:1e:6e:89:ce:28:49:76:47:2d:d8:bf:2f:
12:ef:5c:b5:83:dc:04:f0:c8:1e:44:98:03:f1:4f:
d1:9f:e3:96:f8:d3:10:c8:0e:5d:ee:0a:eb:e1:7e:
77:a2:ec:1e:8b:c3:ad:e1:02:2e:3e:8a:54:d0:0d:
36:22:ac:f2:d3:c5:1c:3a:2f:8f:5e:cf:79:b9:8b:
d4:2f:b2:06:9c:b1:48:15:11:2d:cf:b4:23:0b:b1:
68:c2:10:3d:53:89:31:f0:ec:07:b4:c3:2c:b4:c4:
9d:ec:49:16:75:fb:8e:8b:69:02:14:85:31:90:e8:
8e:37:e5:e4:4b:3b:ad:1d:2b:1f:39:ff:06:e7:3a:
db:1e:7f:cf:77:d3:85:70:e1:00:8d:99:08:78:19:
93:e9:ec:c5:ca:dc:a9:3e:57:cd:d5:6b:34:33:3f:
b2:50:03:4f:74:30:15:ab:b9:45:a6:49:e5:50:0e:
57:96:90:ea:dd:aa:5d:49:20:73:76:27:e3:64:4e:
a1:58:fd:fe:95:6d:6b:c3:84:a0:c1:2b:35:39:a5:
e6:66:6f:35:43:2c:05:33:80:68:d7:fb:cd:c4:38:
9c:47:b5:5c:d4:2a:2a:b3:f1:7e:fb:cd:86:12:f7:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:FC:8B:4A:8E:F3:C1:90:4D:E5:7D:07:53:14:C6:D1:6F:94:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38E20FC2F68A11EFB50A348B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.51.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:1b:5f:f4:1c:94:30:88:46:d7:20:57:ce:3b:9b:55:d7:6e:
7d:91:a5:76:37:13:de:c9:00:d8:bb:2f:f4:da:a8:64:fd:ce:
76:55:d3:5d:52:9a:8a:d1:6b:de:b6:ab:b2:9f:0e:74:09:c5:
68:22:e3:5f:39:bd:9a:17:fa:8a:fd:1d:37:86:d9:66:5f:62:
06:93:fa:6e:2f:d3:f4:a8:9d:76:45:97:c6:d0:70:b4:77:70:
bc:16:76:dc:9e:99:4d:91:30:db:a7:22:6e:56:6b:97:a7:3e:
0a:b2:ee:f6:c3:6a:cf:d1:28:94:f2:b6:72:11:0c:6d:1b:29:
be:5c:08:96:87:b5:56:7e:48:38:fa:5d:9e:9e:0e:2b:ad:cd:
39:4d:6c:e4:c2:41:0b:bb:c8:b3:b6:fe:22:d0:e4:f3:ce:21:
69:2c:c7:3c:ed:21:1b:02:2e:73:eb:63:49:fd:ca:33:83:db:
55:a3:62:cd:e9:a5:b2:b0:f0:38:f5:5c:8a:92:86:c2:0c:95:
80:b8:bf:2f:c3:a7:35:81:f1:aa:16:f5:4b:ab:8f:ef:f9:60:
98:d5:b5:6c:05:b2:1b:c1:4b:77:45:48:48:f8:b6:c4:b0:61:
d4:14:ac:ae:2e:22:11:98:dd:0e:59:f3:6e:8e:6b:18:c6:ae:
a6:40:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:11 2025 by rpki-client