Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CFF1E30F56111EF81779F8A762E951A.roa
File: 3CFF1E30F56111EF81779F8A762E951A.roa (raw, json)
Hash identifier: 7WarhelrlwwSHGwYF2B4FoqheWusRtSA6D4k11q3ZZA=
Subject key identifier: 8D:BB:E9:56:B9:A7:FF:17:B1:89:77:12:78:35:FA:45:A2:97:DF:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01699E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CFF1E30F56111EF81779F8A762E951A.roa
Signing time: Thu 27 Feb 2025 23:19:06 +0000
ROA not before: Thu 27 Feb 2025 23:18:57 +0000
ROA not after: Fri 11 Apr 2025 23:18:57 +0000
asID: 63139
IP address blocks: 154.203.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92574 (0x1699e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 23:18:57 2025 GMT
Not After : Apr 11 23:18:57 2025 GMT
Subject: CN=67c0f2ea-4105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:25:ae:34:81:70:0e:51:b2:b0:d9:e7:01:dd:
cc:88:66:42:d9:50:88:29:d3:e3:2d:40:28:f7:25:
50:fc:3b:9b:70:46:ee:96:55:1b:51:1c:ee:f0:79:
4e:da:a8:17:f5:ef:f6:fe:a8:21:64:0a:d4:37:64:
fe:e1:07:91:21:eb:59:54:e7:ee:9e:4f:f3:37:7d:
ff:28:bb:15:f6:65:9f:6b:a7:80:19:0f:83:04:f8:
6d:e7:d7:a0:2a:94:65:7b:98:1e:d1:d1:23:7f:cc:
b3:3d:ce:04:d7:38:bd:7b:63:03:f8:fe:68:49:06:
a8:7a:d2:40:99:7f:9f:c5:4d:29:bf:d6:cc:e4:b0:
37:9a:8f:57:19:5f:b4:82:be:c5:69:c8:ae:bf:93:
f8:23:2c:74:98:26:81:79:fb:4c:26:71:48:d3:0b:
1a:10:bd:a8:93:67:a8:76:56:00:1f:4f:ca:5e:18:
98:ff:6c:69:b9:e7:1d:ce:2a:c4:d8:90:59:76:2d:
1d:df:49:65:1d:5a:ac:83:a5:f6:0b:1a:38:68:50:
16:8d:5c:0e:45:6a:93:fd:4d:63:a4:19:d0:1b:0a:
49:03:69:44:a0:bd:9b:fc:03:aa:dc:39:2d:d5:fa:
96:4b:54:8b:28:e2:fa:fc:b2:6d:55:a0:af:44:fb:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BB:E9:56:B9:A7:FF:17:B1:89:77:12:78:35:FA:45:A2:97:DF:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CFF1E30F56111EF81779F8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:31:e4:72:3c:f5:10:54:d2:d2:c8:e8:da:71:fb:72:6b:f6:
41:8c:23:08:77:d4:64:1c:ac:e3:9a:7b:36:54:9e:4d:1f:b2:
ee:15:03:33:c0:66:00:4b:c8:47:21:fd:5e:5a:a7:a9:8a:da:
47:aa:0c:dc:c1:b3:3b:a6:c5:7d:bc:35:67:40:8b:41:1a:86:
09:cc:e7:fd:e3:4b:6e:18:cd:a7:58:3c:46:21:2e:e9:f6:9f:
eb:2a:5e:fe:09:70:1d:e8:09:36:7d:5a:e1:a2:ad:64:c0:ac:
da:a8:0d:72:27:d7:68:fc:66:b7:53:ac:a5:5f:da:3c:4c:ad:
16:77:a4:f9:fe:ad:f0:de:2b:3b:41:19:7d:59:e3:98:d7:68:
ee:b3:e9:e8:42:99:10:db:37:49:70:3a:21:33:ef:98:8d:27:
c6:58:77:fa:e8:14:c6:2d:e0:bc:a5:96:4d:3b:8f:95:7b:89:
a3:7e:8c:cc:48:d6:14:36:49:cf:5c:21:13:b9:cd:f1:f8:bb:
c1:ef:f1:f7:3a:56:91:af:aa:7d:f7:4d:01:ea:d0:80:15:89:
64:8f:68:0e:c1:2f:7e:ef:f0:b5:7b:ee:e3:23:f6:78:1f:ea:
ee:92:8e:42:6c:45:c2:e6:2a:81:50:05:1d:56:1c:82:4b:5e:
a6:18:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:14:42 2025 by rpki-client