Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44C3DC320A1511F0BFB42556762E951A.roa
File: 44C3DC320A1511F0BFB42556762E951A.roa (raw, json)
Hash identifier: c7WEPw8owEOq9qccxfz4hjG5ppjKOdStsa77bquC8lw=
Subject key identifier: 23:8C:2B:74:82:90:3C:80:34:F0:33:AA:ED:4D:17:C6:CF:5C:FE:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017655
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44C3DC320A1511F0BFB42556762E951A.roa
Signing time: Wed 26 Mar 2025 07:38:11 +0000
ROA not before: Wed 26 Mar 2025 07:38:07 +0000
ROA not after: Sat 03 May 2025 07:38:07 +0000
asID: 59642
IP address blocks: 154.84.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95829 (0x17655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 07:38:07 2025 GMT
Not After : May 3 07:38:07 2025 GMT
Subject: CN=67e3aee3-9225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:34:eb:4d:62:2b:09:54:41:2b:15:2b:a0:
3e:ef:97:e1:cd:b3:13:17:98:18:d6:b1:6a:6b:0a:
6c:b1:66:74:38:b0:9c:56:54:49:c6:34:58:0c:0c:
40:15:75:6d:48:5f:dd:36:b2:07:76:d0:1b:75:8f:
c0:de:c3:16:c8:6f:f8:c0:97:55:c8:b4:a8:10:0c:
18:3c:97:45:40:37:56:4c:1e:35:71:e1:27:11:aa:
f0:2c:5a:18:84:82:ab:a3:df:12:13:3d:b9:1a:a7:
7f:51:73:ef:65:0b:38:80:fd:06:a0:95:b9:af:d5:
0a:66:b0:bd:75:0d:5b:e3:f6:78:df:bc:a3:ce:9e:
80:7c:36:25:89:e2:a5:28:c6:c1:50:d8:e6:75:89:
6b:19:92:c9:10:85:2c:4b:16:bf:c2:8a:f3:12:61:
43:65:6a:58:ab:c5:bc:2c:59:ad:8d:4b:0c:34:49:
3a:b2:24:a9:6f:1a:04:a9:6e:5e:b7:aa:e3:23:d0:
95:84:f4:05:4a:92:fe:70:1d:ec:c3:35:3a:54:7c:
e5:98:da:a2:54:53:cc:29:d2:61:c8:51:14:22:f8:
cd:d7:69:93:4a:d1:84:44:16:01:57:d7:e4:b0:d8:
e6:a6:88:8e:ab:da:b2:1d:7d:10:36:f5:a7:10:e2:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:2B:74:82:90:3C:80:34:F0:33:AA:ED:4D:17:C6:CF:5C:FE:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44C3DC320A1511F0BFB42556762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.164.0/24
Signature Algorithm: sha256WithRSAEncryption
47:13:fb:43:cc:0d:7a:1f:67:ea:1a:f9:c0:8d:f6:bc:fe:cb:
f7:ba:04:2f:f5:bc:05:ac:bd:4a:43:7d:01:c7:9d:9d:e5:53:
79:e5:bc:20:d8:ea:0d:67:62:c6:8f:64:b5:81:ab:ae:76:3e:
9d:e9:8b:e4:c2:a4:07:55:14:c9:a5:b6:e9:1a:0c:b0:55:ce:
48:b1:5a:a1:4d:c5:59:65:96:35:c5:6f:87:eb:cc:0a:5d:d6:
a6:cf:37:91:4a:26:56:e2:05:1b:3d:03:98:61:32:e0:dd:08:
63:4d:26:5c:bf:3e:34:ec:87:7a:e7:cd:e5:f0:0a:6c:a7:17:
40:a6:d9:b4:6e:8e:9e:45:b4:b3:ea:a8:6c:6a:70:93:51:d7:
9f:58:90:a2:1c:b8:24:8e:85:41:63:d2:2f:f3:9f:95:11:28:
39:cd:80:5f:c3:2f:ff:75:89:8a:66:0a:a3:5d:ba:2e:01:d5:
d7:1a:87:4a:d1:e7:05:02:0c:2b:bb:b0:80:46:00:41:d3:28:
98:73:e8:5d:19:49:b4:db:d4:a3:96:a1:ce:90:a4:dd:a5:f3:
14:da:70:49:58:6b:ca:61:17:31:20:e6:ca:00:3c:2d:e0:05:
3e:6b:18:6d:41:89:b0:eb:3d:1f:db:b8:5c:6e:18:ce:dc:34:
52:2c:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:15 2025 by rpki-client