Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D8F30300A1211F0AD16DD44762E951A.roa
File: 4D8F30300A1211F0AD16DD44762E951A.roa (raw, json)
Hash identifier: 1nrL0uclm2iacPN9ZTkO8/bzhYs0U/14Wkj00FDZ4eM=
Subject key identifier: 95:5D:59:4B:9B:D2:D2:5D:61:F6:71:2E:25:29:93:01:F9:00:88:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017651
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D8F30300A1211F0AD16DD44762E951A.roa
Signing time: Wed 26 Mar 2025 07:16:58 +0000
ROA not before: Wed 26 Mar 2025 07:16:54 +0000
ROA not after: Sat 05 Apr 2025 07:16:54 +0000
asID: 209242
IP address blocks: 154.83.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95825 (0x17651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 07:16:54 2025 GMT
Not After : Apr 5 07:16:54 2025 GMT
Subject: CN=67e3a9e9-e19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:f3:cb:4b:c9:59:79:82:5a:9f:89:15:b9:
cc:e5:79:46:6e:68:55:74:31:de:04:38:f5:28:f2:
59:a3:d0:3f:f3:c9:2c:9e:fa:1a:f4:8d:90:41:46:
f8:aa:69:c8:8a:ae:09:c7:08:b3:99:dd:c6:d1:89:
26:f9:a4:14:79:3f:af:66:d1:3f:e7:94:dc:6b:fa:
17:3d:07:87:b8:c4:f7:6d:02:00:d6:2e:3e:05:fa:
7e:aa:2a:64:a2:55:d3:1d:1d:69:37:cb:49:61:1b:
2f:cc:cd:07:aa:75:2e:ae:34:d3:a4:9b:54:74:16:
d0:05:a6:48:4e:c5:81:85:ee:26:ee:1c:e0:14:f0:
8b:59:40:4c:e6:36:3a:cc:7b:fe:61:9a:f1:6b:aa:
f7:70:ff:4f:33:80:5f:9f:43:45:6b:22:39:65:10:
07:a7:69:87:5f:53:79:64:fa:63:b8:bf:87:4b:09:
e8:f7:cf:c0:18:2e:2d:76:7b:de:75:59:d1:71:0e:
be:c0:1c:25:3a:22:e7:8d:14:e7:e2:fd:72:8d:e7:
a9:0a:8e:be:7e:dd:b2:27:7f:07:65:44:06:3c:ed:
45:9d:e6:e6:68:e4:ec:7f:be:52:4a:12:8f:26:37:
ce:5c:8f:bb:37:81:c8:50:5b:64:ad:bc:db:29:1f:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5D:59:4B:9B:D2:D2:5D:61:F6:71:2E:25:29:93:01:F9:00:88:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D8F30300A1211F0AD16DD44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:0e:46:90:65:d8:86:46:9b:de:c2:0e:d9:00:61:8d:b1:51:
c3:06:a9:19:1f:2c:82:6b:05:cb:ab:2a:3b:16:9c:d2:bf:02:
d7:33:7b:d5:9c:e4:11:48:f6:db:fa:72:19:f3:d6:21:e2:a8:
b3:d8:4b:3b:63:49:1f:94:22:a6:26:c1:07:a0:0f:fa:22:9f:
1a:10:c9:80:1f:14:d6:7d:17:46:5d:f0:fa:89:0b:d6:6d:14:
a3:a5:48:f9:70:f1:38:ee:50:37:c6:ee:e1:75:f6:19:a7:a0:
26:d8:2c:62:59:40:96:2d:c4:49:d4:2f:69:4a:f2:22:1c:d5:
df:f3:a3:dc:c8:50:be:95:b2:64:cc:fa:a3:67:df:83:1d:a2:
ff:24:9d:a0:3b:be:12:61:de:4c:4a:72:0f:06:37:b1:02:c0:
be:13:ac:b9:00:70:ec:00:3e:0e:fe:c0:eb:ca:f2:7f:6e:f5:
c5:f3:59:2d:f5:52:a6:de:38:d3:f2:26:94:cd:72:6f:da:ea:
e8:e8:e7:b3:3d:42:30:0d:54:cb:34:01:ae:dd:c3:99:1f:be:
cb:9d:72:07:2a:51:aa:79:95:ac:ee:13:f9:9f:fa:61:1e:18:
f9:08:89:b4:97:3e:b5:fe:30:70:43:70:30:29:8f:67:e2:ec:
0e:1e:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:36 2025 by rpki-client