Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A069466F7F811EFAF0ACFBE762E951A.roa
File: 4A069466F7F811EFAF0ACFBE762E951A.roa (raw, json)
Hash identifier: 3jlx5lEcdDp0IUnJW2eYMFeSGE3QJjspRu+PwOQgB+A=
Subject key identifier: F9:2D:33:97:96:E4:0F:6D:D2:B8:9D:11:8A:D9:5B:8D:92:3E:76:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A069466F7F811EFAF0ACFBE762E951A.roa
Signing time: Mon 03 Mar 2025 06:25:24 +0000
ROA not before: Mon 03 Mar 2025 06:25:20 +0000
ROA not after: Fri 04 Apr 2025 06:25:20 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94060 (0x16f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 06:25:20 2025 GMT
Not After : Apr 4 06:25:20 2025 GMT
Subject: CN=67c54b54-0583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:3d:e6:5b:6a:f9:1f:9d:87:8d:d4:9c:dd:
9a:f8:4a:c7:7d:e5:9a:e6:9b:30:8f:c6:43:f7:09:
17:56:f8:e6:c9:f8:9b:91:4e:eb:2a:b6:0e:b0:98:
f2:84:b4:4e:65:7c:97:50:52:46:a4:f3:c9:68:9a:
aa:bc:d4:26:68:9f:9a:a5:08:46:73:18:ad:f4:0f:
9f:32:2d:53:82:ff:7a:70:69:cb:c3:9f:db:cf:ff:
f1:72:c6:07:e0:90:ae:53:c8:04:d2:dc:6f:9a:af:
f9:fb:dc:16:b4:03:5e:74:e4:73:77:db:aa:fb:62:
9d:7e:2d:6b:4b:10:8c:30:fa:97:11:2b:3c:9f:9e:
ff:74:de:9e:7a:a9:49:f7:d6:60:07:06:fb:5a:6b:
b1:c2:7e:c9:9a:39:86:e5:3f:2b:2c:43:7b:43:a0:
19:2a:bb:16:b5:3c:ef:cc:5b:ee:7a:be:80:17:7d:
53:d3:6b:0d:b9:30:61:df:94:75:6c:65:22:71:48:
0d:eb:8c:40:26:81:ed:11:80:20:18:1c:00:bf:67:
65:12:59:8f:7d:01:7e:59:0c:7e:09:20:c1:1e:ca:
fd:4b:2f:94:69:ed:74:a0:44:35:3f:69:e2:2f:f9:
04:a8:47:e9:16:b1:5b:78:dd:b6:e5:00:ef:32:7d:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2D:33:97:96:E4:0F:6D:D2:B8:9D:11:8A:D9:5B:8D:92:3E:76:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A069466F7F811EFAF0ACFBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
58:65:f4:3e:ed:24:d0:c8:ce:09:a0:63:f2:38:ba:66:2b:93:
f1:f4:e1:ea:73:e6:f1:42:1d:85:c9:6f:b2:4b:d3:e0:f6:7e:
b9:a7:2e:34:ea:f8:8b:e5:c0:3f:67:68:47:f9:6b:43:cd:54:
8f:91:79:9e:46:5b:c5:d8:0b:53:d1:1c:b6:02:08:0b:2e:19:
ea:fc:76:c1:be:3b:6e:6a:ed:d9:36:07:07:16:50:8f:1f:74:
22:80:2a:d5:3d:d5:5f:94:05:c0:f3:a2:7d:8f:15:77:5e:eb:
60:40:69:76:de:74:73:d6:83:03:37:be:b0:4f:67:0c:8b:43:
e0:f0:aa:bf:df:f5:cf:d5:1c:e8:e0:48:b1:64:11:97:79:93:
1c:ae:75:63:15:c6:2e:8f:43:56:c9:56:f3:07:b0:b8:91:82:
0b:97:a5:36:97:28:62:7f:af:95:e9:b0:a9:38:9b:f7:30:e9:
a4:48:06:02:47:60:2e:68:e0:45:2a:9f:88:19:d5:21:6c:34:
39:de:30:d2:8d:f5:ca:42:ce:f6:80:21:e5:51:c9:56:a7:dc:
e9:5e:a4:e1:f8:89:d9:fd:e4:d4:ea:3b:50:4f:2c:ec:55:b3:
d4:22:c4:4e:e7:93:22:ee:72:47:d2:ce:a7:c6:49:6c:71:48:
c1:29:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:56 2025 by rpki-client