Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/516AE07EF5C611EFB656934E762E951A.roa
File: 516AE07EF5C611EFB656934E762E951A.roa (raw, json)
Hash identifier: RnmcfxGsPaCW3nlW0mZIxlw0kcKu1x27dBsfd9F5udk=
Subject key identifier: 17:3D:DA:CB:19:25:F1:7D:76:59:1B:9B:B0:E5:17:EA:D8:A5:18:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/516AE07EF5C611EFB656934E762E951A.roa
Signing time: Fri 28 Feb 2025 11:22:39 +0000
ROA not before: Fri 28 Feb 2025 11:22:35 +0000
ROA not after: Fri 11 Apr 2025 11:22:35 +0000
asID: 63139
IP address blocks: 154.203.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92899 (0x16ae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:22:35 2025 GMT
Not After : Apr 11 11:22:35 2025 GMT
Subject: CN=67c19c7f-704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:f3:c6:c8:60:12:3d:c0:e5:5a:03:8a:f0:
d7:27:e9:9a:eb:42:ae:6e:8f:89:71:3a:53:6a:3b:
74:ca:62:ef:20:ed:50:4f:b6:71:1c:b9:27:d0:1c:
9d:45:8f:76:e0:d5:7d:ed:29:d9:cd:98:b2:f5:dc:
cc:68:50:70:f9:cf:e9:69:d0:3f:81:bf:57:0b:6d:
cc:79:0a:c4:4c:83:6d:87:b8:db:2c:96:6f:85:75:
44:25:11:13:f9:9d:4c:9a:95:dc:41:fb:5b:b9:cc:
48:d8:23:4e:f8:c8:5f:38:24:4e:3e:30:b7:cc:43:
3d:9f:fc:e8:9c:1c:2c:3b:90:21:9f:2e:c1:0b:16:
b1:2e:bb:76:5d:2f:ce:6a:d1:de:42:6f:ed:65:9d:
f9:f6:fc:fb:1f:27:58:1c:07:ca:47:60:3c:91:1c:
aa:6e:f8:f7:0c:58:85:94:9d:21:32:b5:51:4c:4a:
1a:c4:aa:f4:b2:6a:85:64:f3:12:df:56:90:4f:ed:
59:52:70:25:ed:60:10:db:ad:bf:0a:ad:8f:7e:31:
c3:29:56:14:2e:0d:5c:c9:03:92:90:f3:59:01:49:
fa:bd:e9:55:26:d6:a4:2c:56:32:c4:1c:ab:2b:66:
7a:7a:45:d0:b8:8d:19:16:92:0d:db:59:db:a7:0b:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3D:DA:CB:19:25:F1:7D:76:59:1B:9B:B0:E5:17:EA:D8:A5:18:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/516AE07EF5C611EFB656934E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.165.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b9:4a:0c:24:2f:41:e9:bf:2b:67:f0:ed:2d:b3:93:df:6e:
4a:47:e1:b7:e1:07:5f:35:23:bd:1d:42:4f:af:9f:2e:7b:d4:
7d:be:ca:1d:b5:a0:08:6e:67:9c:00:a1:0d:77:21:b4:41:41:
1b:47:be:f7:5e:2e:aa:eb:bc:cd:d8:53:4f:bc:6c:83:b9:0d:
51:5b:1d:00:19:1e:36:a1:55:cb:74:0f:84:94:a4:bd:f3:93:
31:df:25:08:2b:53:c5:1c:cd:fe:dc:98:ad:c7:32:2b:c7:97:
c0:14:00:7a:12:f6:2f:87:14:0d:39:f1:6b:f3:92:69:a8:d3:
db:90:bf:28:c7:ab:68:62:f0:ac:65:37:b0:0f:fe:c3:d5:54:
0d:bd:72:83:03:b2:95:f8:d2:9f:e9:9f:74:48:56:c0:a8:aa:
77:ca:c5:c2:66:62:fa:68:da:78:e2:a8:c8:2a:09:c0:f8:45:
62:aa:95:70:a0:9f:73:29:da:88:45:fc:f6:c4:61:ee:1a:02:
f9:81:39:26:10:97:83:46:30:3d:1a:7a:f1:5d:ac:23:7c:45:
64:87:87:62:ad:37:43:e7:ec:67:ef:c8:fb:c2:cd:c9:0b:65:
6c:fd:30:61:ef:40:63:a7:9e:b4:f8:b4:b7:7e:73:87:40:51:
df:8c:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:55 2025 by rpki-client