Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D7D7442FA6611EF8C1B3BB7762E951A.roa
File: 3D7D7442FA6611EF8C1B3BB7762E951A.roa (raw, json)
Hash identifier: gPmKd5G5Q7SVVnp1bJxeS5FPWvNczsO+VsOgLZ9rSVw=
Subject key identifier: 80:A7:6C:7F:44:F5:E8:56:AE:8C:3E:59:51:AB:37:62:8F:E9:B0:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01729B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D7D7442FA6611EF8C1B3BB7762E951A.roa
Signing time: Thu 06 Mar 2025 08:37:30 +0000
ROA not before: Thu 06 Mar 2025 08:37:26 +0000
ROA not after: Fri 16 May 2025 08:37:26 +0000
asID: 151804
IP address blocks: 154.197.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94875 (0x1729b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 6 08:37:26 2025 GMT
Not After : May 16 08:37:26 2025 GMT
Subject: CN=67c95eca-41da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:63:5f:fb:d2:4f:c7:08:e4:20:ff:d0:65:
00:ef:fd:40:0e:74:4f:2e:6d:06:c1:1a:9f:c0:56:
ab:23:b8:04:89:e7:85:7a:1a:15:38:c3:87:d8:de:
75:7b:35:86:0b:1d:28:d3:f1:e6:a1:30:63:10:49:
89:6b:10:b1:5f:7d:59:b3:8d:ea:8e:5d:58:59:68:
18:51:49:d3:67:68:07:1c:8a:53:38:bd:27:72:e4:
76:d7:3c:2f:d6:22:e9:4d:10:5d:39:dd:bb:a8:d7:
60:1f:29:1e:3b:cd:06:66:8d:78:d4:ad:3d:53:d1:
f6:cf:db:27:36:a3:3a:9d:df:00:3f:67:2f:59:5e:
44:f9:ff:06:1f:6f:57:c0:76:c7:7d:76:82:a3:94:
50:c7:df:8d:ad:e4:20:67:b3:86:6a:12:69:2a:f5:
12:da:6f:9d:48:56:ce:e1:c5:3d:4c:e7:ff:61:41:
02:55:d8:de:70:e7:15:92:aa:a2:81:b3:44:ad:f7:
53:83:24:8a:df:ef:19:1d:d3:d7:a4:56:6e:b2:84:
65:d9:8a:00:37:24:15:8b:29:a3:0c:e6:60:b4:d3:
33:3b:25:fc:c3:38:66:27:fd:ef:54:26:26:90:c3:
39:82:e2:bd:71:8b:71:83:d7:d6:35:05:4e:97:9d:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:6C:7F:44:F5:E8:56:AE:8C:3E:59:51:AB:37:62:8F:E9:B0:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D7D7442FA6611EF8C1B3BB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.141.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0d:22:16:86:18:a8:44:3c:b6:94:21:f9:0e:50:d7:ef:51:
f8:39:a0:cc:fd:08:9d:16:01:a1:de:da:8d:fe:6a:7e:5f:51:
2d:35:57:6b:8d:f3:18:f6:c0:79:21:7d:94:1d:fa:08:09:f4:
a7:41:24:d5:6a:b5:37:64:65:80:4c:ab:d5:da:41:fb:e2:7e:
cd:c9:99:8f:72:7e:69:e9:fa:a4:32:b7:dc:c6:b6:ef:2b:9a:
b6:ad:d4:a9:b0:83:35:32:1c:e3:fa:2a:a8:ab:d2:e4:9e:68:
63:7f:7d:9a:f3:09:6b:58:e6:80:9d:b6:c4:a7:06:68:18:5f:
02:80:a2:3a:6f:ee:1f:81:f0:43:ca:a3:57:c3:59:ac:f2:26:
e1:36:af:2d:70:17:84:a7:ae:0e:79:f2:e6:35:83:ff:21:1c:
a6:15:5f:12:89:52:aa:90:dc:7a:6f:f6:80:0b:1b:bf:45:7e:
6a:12:30:ce:ea:2a:00:ef:3b:76:e0:32:39:ce:52:23:bd:a8:
15:6c:8c:44:4d:a1:9f:5c:81:b4:6e:7c:f0:c1:ea:17:89:03:
a9:0d:b6:ec:8e:72:f2:78:57:b8:d7:b9:dd:25:50:3e:2b:17:
1e:79:1e:af:ea:5b:58:79:ef:d4:aa:7e:c3:8d:39:13:33:ba:
23:96:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:53 2025 by rpki-client