Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41620C3EFB3411EF9EBEECA6762E951A.roa
File: 41620C3EFB3411EF9EBEECA6762E951A.roa (raw, json)
Hash identifier: GC2889gGFdy8qAZIwbN/JzRsVoX8yb3/nL7bLnJBIQQ=
Subject key identifier: 55:14:91:40:89:4D:D4:2C:CE:AB:20:A8:65:6F:FA:27:CE:81:6E:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41620C3EFB3411EF9EBEECA6762E951A.roa
Signing time: Fri 07 Mar 2025 09:12:13 +0000
ROA not before: Fri 07 Mar 2025 09:12:09 +0000
ROA not after: Thu 24 Apr 2025 09:12:09 +0000
asID: 135097
IP address blocks: 154.91.6.0/24 maxlen: 24
154.91.8.0/21 maxlen: 24
154.91.16.0/20 maxlen: 24
154.92.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94948 (0x172e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 09:12:09 2025 GMT
Not After : Apr 24 09:12:09 2025 GMT
Subject: CN=67cab86c-12ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:70:55:e3:1f:12:1d:35:f8:4b:fc:4d:a5:
0b:00:59:d8:0c:40:c6:8b:5e:db:3a:55:a4:82:65:
22:34:41:1f:a3:44:43:37:6a:2a:cb:fe:a6:77:26:
57:a4:6b:80:08:f3:c9:80:dd:cc:2c:bd:37:0b:1c:
f3:6d:ad:56:36:91:16:6f:ef:06:26:0c:a5:b5:33:
28:40:51:65:8d:87:34:b0:80:1d:d4:f5:9e:60:cb:
9c:02:ad:24:3d:03:4e:91:e2:f2:2e:15:c9:2f:6c:
46:e8:e5:2e:c5:0f:24:01:28:0b:d0:7f:e6:18:dc:
a7:c8:20:73:35:16:45:de:33:b2:7c:d9:65:ba:83:
97:18:b5:fc:96:c8:f8:34:be:8e:71:81:01:19:65:
24:24:6f:5a:c5:83:84:44:6e:7f:fd:1c:59:09:2e:
cc:8d:4f:8e:b0:7e:d0:27:fe:56:76:7d:67:ea:8b:
1e:bf:99:27:55:46:92:96:7d:8f:cc:d2:6b:72:e1:
cb:98:15:08:da:63:a2:fd:08:d9:01:9d:ca:7f:54:
cb:d8:b6:9b:17:ba:94:5e:3f:1d:42:15:82:fa:f9:
1f:8b:21:d4:2a:16:3e:11:1e:4e:10:86:97:e0:6e:
05:41:85:cf:d6:59:c4:3c:7f:01:91:d1:68:7e:d7:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:91:40:89:4D:D4:2C:CE:AB:20:A8:65:6F:FA:27:CE:81:6E:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41620C3EFB3411EF9EBEECA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.6.0/24
154.91.8.0-154.91.31.255
154.92.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:20:13:56:6e:bd:76:b3:19:bf:2a:9c:be:ff:58:21:b6:76:
46:3f:a2:7f:b1:bb:f4:b3:e4:68:75:0f:fd:12:f7:09:34:b6:
05:6c:23:07:59:93:c7:5a:4f:6c:28:65:4b:f0:33:50:e4:72:
90:f8:29:73:2f:f2:06:bb:a1:84:14:bf:9e:81:aa:6e:6d:bc:
da:72:3a:72:5f:54:49:4e:58:a2:92:a8:5d:fb:12:70:eb:f4:
38:8b:9a:6e:d9:e0:05:b2:82:26:6a:e3:92:ad:af:b0:a3:23:
55:14:f7:c7:a3:08:ec:dd:1f:90:21:00:97:8f:1f:fd:b1:62:
77:e8:f2:c0:bc:12:5f:29:e1:71:e3:de:ca:f4:86:39:77:75:
cb:b0:0a:78:87:2d:e6:3a:c2:0d:7a:8c:8d:68:1a:92:63:bb:
7b:ce:38:3e:0e:93:83:dd:cc:29:5b:60:c8:ac:ad:15:e0:ac:
f1:0d:44:b4:7c:e4:56:55:d3:a2:fe:a4:80:f0:03:52:2d:24:
05:ff:ae:0a:ba:3c:26:b3:1c:32:b8:ed:76:42:8b:15:9d:25:
fd:7e:04:b6:0a:68:e0:dd:96:e1:e1:ba:51:b6:c3:25:b8:7d:
49:bf:04:ca:96:ca:05:30:df:74:a2:9a:d8:bb:3c:46:a7:82:
5a:eb:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:09 2025 by rpki-client