Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB985F4FEEC11EF83E3AE83762E951A.roa
File: 3AB985F4FEEC11EF83E3AE83762E951A.roa (raw, json)
Hash identifier: 3/4h0IeSP+rjpIkqWPVLUxV7Aj5rz6AMD7HqZtL93t4=
Subject key identifier: 44:50:95:1A:A6:9E:9B:43:88:F5:F7:CD:B2:7C:A9:CB:A6:DA:7D:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017383
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB985F4FEEC11EF83E3AE83762E951A.roa
Signing time: Wed 12 Mar 2025 02:46:42 +0000
ROA not before: Wed 12 Mar 2025 02:46:39 +0000
ROA not after: Thu 12 Mar 2026 02:46:39 +0000
asID: 984
IP address blocks: 154.196.132.0/24 maxlen: 24
154.200.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95107 (0x17383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 02:46:39 2025 GMT
Not After : Mar 12 02:46:39 2026 GMT
Subject: CN=67d0f592-e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:22:be:f3:a4:c2:95:ad:8e:22:f3:23:dc:
0f:9d:8f:e0:b2:9c:af:51:b0:db:82:27:a6:e7:59:
f5:ea:48:cc:62:1d:9b:d0:4a:5f:3d:eb:e8:1f:75:
d9:d4:22:8c:bc:9b:4b:c9:36:63:8f:a3:71:0c:0d:
f4:a8:60:04:e6:eb:a4:e1:73:3d:d1:26:67:a3:40:
1c:85:65:3f:bc:85:0f:c3:c8:36:33:20:bd:96:6e:
3f:7c:5e:ed:9d:bf:6f:1e:d1:ae:e3:e8:88:c7:81:
5d:2a:3d:74:22:1a:2d:4d:9f:05:03:ae:fe:c3:8d:
18:a0:ea:38:bd:3e:78:15:74:38:5b:24:93:93:56:
68:71:fc:31:db:f6:e7:e2:44:66:81:b7:7f:66:c7:
37:8e:8a:7a:33:2c:c7:ae:69:a4:9c:53:64:1e:28:
ec:b7:15:05:8c:4d:15:50:83:80:19:88:77:a2:06:
de:b2:a0:c4:3f:dc:6c:e1:9b:e7:4a:8d:d8:31:5a:
22:8f:b6:f5:a7:54:41:9c:5c:11:f6:a5:f9:94:e6:
bf:0b:45:65:dd:95:5b:c2:ab:0e:ee:55:8b:1d:3d:
11:20:c1:ab:2c:c0:13:3b:b3:9e:df:c1:92:5d:79:
76:9d:b2:82:68:5c:22:6b:6f:81:2f:6b:8f:bf:51:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:95:1A:A6:9E:9B:43:88:F5:F7:CD:B2:7C:A9:CB:A6:DA:7D:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB985F4FEEC11EF83E3AE83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.132.0/24
154.200.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:62:a6:67:18:14:93:81:b2:6a:e6:7a:d5:4c:84:e2:38:d6:
bc:92:ff:73:5f:39:95:fb:57:f3:25:87:4c:22:eb:f7:58:22:
3f:74:21:c0:c8:bf:fb:eb:47:44:23:c2:ae:c1:7c:cd:7a:2c:
9b:c4:5f:93:58:03:08:1b:ee:83:4c:08:66:39:ab:df:35:58:
28:af:c5:93:06:85:f2:60:48:44:f0:50:38:3b:ec:e9:4d:8b:
91:01:98:cb:2c:a9:a0:7a:ae:41:d6:03:25:b8:2a:b5:3f:dd:
2c:ca:e8:89:93:c8:af:af:55:a5:33:e8:f2:8e:42:89:92:bf:
b9:58:9c:4f:40:90:af:7b:10:28:ea:bd:b2:b9:8e:ec:76:e2:
04:c0:55:8a:59:9e:e0:6a:83:43:83:ee:cd:aa:54:ff:02:81:
c1:ae:a3:8f:38:c9:5b:48:50:bf:99:ce:42:89:b2:b3:89:39:
d5:4d:81:27:f7:7a:06:74:44:82:0f:9a:e2:bf:09:8f:f4:82:
93:dd:35:e1:78:d7:e6:b9:22:63:30:43:f9:30:f7:8b:60:17:
4e:dc:9b:8c:21:5d:59:c2:9c:43:9f:b5:45:2e:fc:f6:6c:b3:
c6:9e:61:1e:e3:ad:66:30:90:c1:67:fb:e9:27:26:15:4a:cb:
d1:92:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:56 2025 by rpki-client