Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4726310CF3BB11EFA1DEE0A8762E951A.roa
File: 4726310CF3BB11EFA1DEE0A8762E951A.roa (raw, json)
Hash identifier: SW66YPH8FLheQ5LZ8RJJAgfxKCYKpCAhCB8VRScZ9xs=
Subject key identifier: 6F:38:AA:58:69:DF:2B:81:49:F8:59:D4:DA:A7:E3:8D:26:56:9B:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01600C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4726310CF3BB11EFA1DEE0A8762E951A.roa
Signing time: Tue 25 Feb 2025 20:58:35 +0000
ROA not before: Tue 25 Feb 2025 20:58:31 +0000
ROA not after: Wed 09 Apr 2025 20:58:31 +0000
asID: 138915
IP address blocks: 154.95.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90124 (0x1600c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:58:31 2025 GMT
Not After : Apr 9 20:58:31 2025 GMT
Subject: CN=67be2efb-8900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:65:4f:c9:11:64:6f:b1:06:4a:9a:9f:07:
e8:ee:84:70:6f:8d:47:78:a7:b2:4b:9d:0f:92:79:
c7:27:30:07:55:d2:e5:03:0a:24:34:3b:10:d7:72:
7d:b5:26:d8:54:b8:cb:61:ee:d0:55:dc:d9:98:e4:
c1:55:9b:24:3d:74:4d:42:20:d2:6c:40:46:77:75:
8e:be:fa:b2:c0:f1:a8:eb:1d:c0:85:23:0c:10:df:
e1:50:f6:8d:6f:3c:dd:1d:3b:af:5a:e7:c4:7b:1a:
b3:19:eb:3e:e9:0a:c2:6c:17:b3:ec:87:f4:88:30:
c4:11:4a:ae:ec:ba:12:3a:c3:f6:6b:3e:44:50:a3:
fd:0b:7a:ab:fa:b5:ce:73:41:83:74:5e:91:2c:94:
1d:be:78:0c:25:18:5b:46:7f:ce:54:65:97:63:72:
0b:0b:74:d7:3c:c5:5a:93:9e:66:7c:d1:37:d5:84:
ea:72:bb:5c:1c:69:a6:59:1d:a7:c1:16:1e:94:64:
91:89:52:f5:c4:61:76:22:a9:f0:b4:36:06:ae:e4:
14:29:e6:24:d1:f6:ea:90:57:69:93:2a:9d:9c:e0:
07:47:ac:b6:e8:33:d1:1c:37:4c:7a:ba:be:c6:d9:
87:7b:b3:05:8d:78:4b:45:54:06:b0:28:54:5b:bb:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:AA:58:69:DF:2B:81:49:F8:59:D4:DA:A7:E3:8D:26:56:9B:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4726310CF3BB11EFA1DEE0A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:eb:70:46:e6:4c:68:6e:4a:69:28:ac:80:34:1f:53:54:93:
20:e8:f1:9c:3a:5d:c4:bf:33:59:4d:94:8c:ab:59:13:ea:5c:
61:e9:00:e4:b1:06:8f:ba:47:c2:c0:79:6e:15:68:28:34:2e:
2f:0d:2b:96:7f:a7:a2:25:aa:23:46:ac:78:7c:00:ec:1a:6e:
74:d9:da:4e:b5:c7:47:94:3d:af:a6:11:ce:fa:9c:c5:32:71:
97:14:e2:4e:db:bf:27:38:c6:fb:2b:f4:b1:6f:e4:9a:63:b5:
e1:c4:cc:eb:6a:0f:6e:5c:38:65:42:59:4b:c3:83:b7:19:20:
42:24:e4:ce:47:b1:db:fc:cd:89:5b:fb:d4:8f:b8:3b:79:8a:
d6:86:08:ed:d4:35:91:de:54:68:32:60:5a:95:b9:3f:b1:45:
f2:2b:32:52:b3:5d:71:0b:25:ea:fc:34:27:ef:38:f1:31:58:
54:11:ab:3d:eb:29:af:cc:91:c7:c6:f7:f4:d0:e5:a3:70:ab:
ed:81:91:37:89:f0:f9:78:48:b3:76:5f:f2:1d:d2:82:ce:cd:
a9:93:2d:88:3a:bb:f0:a7:0c:26:94:95:be:17:28:83:96:ef:
bb:66:88:c3:66:86:ec:f0:30:93:0b:7f:63:e2:7f:a7:e3:24:
70:56:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:49 2025 by rpki-client