Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53626F72FE5011EF91B8A49A762E951A.roa
File: 53626F72FE5011EF91B8A49A762E951A.roa (raw, json)
Hash identifier: RlGh5Y2y1Jnj3fgHC/dRs3w/gX9pokPw/SFLNGXG2uA=
Subject key identifier: F3:38:2D:AB:04:2A:20:59:9C:C0:9F:B3:82:F7:60:A8:C0:87:08:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017376
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53626F72FE5011EF91B8A49A762E951A.roa
Signing time: Tue 11 Mar 2025 08:10:42 +0000
ROA not before: Tue 11 Mar 2025 08:10:38 +0000
ROA not after: Sun 31 Jan 2027 08:10:38 +0000
asID: 138456
IP address blocks: 154.194.41.0/24 maxlen: 24
154.194.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95094 (0x17376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 08:10:38 2025 GMT
Not After : Jan 31 08:10:38 2027 GMT
Subject: CN=67cff002-fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:85:b3:ad:3a:e7:b8:64:03:26:43:cf:08:
67:b6:35:93:4e:55:2d:5d:d8:c3:a5:9e:7e:43:d8:
d5:d5:65:df:7f:83:96:31:01:95:c6:a6:ad:d5:af:
f1:f3:3f:e1:52:e3:0d:6f:00:ed:46:1f:67:44:58:
59:67:3d:51:e6:d5:4d:b3:b9:df:a9:45:be:5f:f4:
7e:ef:d9:66:c4:9f:de:ca:c2:d0:c7:cd:0a:94:d6:
5a:73:05:dc:3e:fb:47:68:8a:77:29:7b:04:27:af:
dc:42:c6:f8:dd:ce:b4:4e:0f:f5:25:88:9b:59:49:
b2:b4:3f:e2:bb:3f:02:f6:55:e1:86:cc:09:3e:1f:
47:8d:cd:ab:ac:d5:3e:a8:76:65:33:be:8a:8a:2f:
4b:d9:1b:45:8f:d5:a6:ca:65:c8:56:7c:3e:ba:31:
6c:12:b9:d3:19:f8:49:19:98:9b:66:ad:a0:38:ce:
bb:52:b9:9b:8e:99:9e:f7:ca:a1:a2:f9:1a:5e:bd:
3d:75:3b:69:9c:6f:3f:f9:95:75:9b:17:4c:a1:fc:
58:15:04:92:40:a6:ec:07:fa:6f:7a:a9:9f:3c:14:
37:24:eb:75:6a:c8:51:4b:f2:76:22:bb:c4:70:3e:
a0:ef:e7:32:6c:78:ac:9b:77:53:86:00:2d:94:50:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:38:2D:AB:04:2A:20:59:9C:C0:9F:B3:82:F7:60:A8:C0:87:08:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53626F72FE5011EF91B8A49A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.41.0-154.194.42.255
Signature Algorithm: sha256WithRSAEncryption
22:76:b6:b4:b6:db:83:58:0c:d0:e7:dd:ab:d8:48:cf:7a:0c:
81:ae:a5:72:75:e0:8e:c3:14:4b:01:69:ba:22:df:92:ca:99:
76:05:f7:b3:c1:48:23:f0:56:34:98:3b:04:09:5a:2a:be:3e:
54:90:ac:6e:c6:cd:78:3f:15:30:55:6d:e6:8f:54:58:51:d3:
fc:b5:46:4c:0e:a0:51:0c:3c:1d:6b:78:47:cc:5e:d0:ef:d3:
14:e0:a3:84:f7:de:2c:e5:f3:27:8a:82:12:f2:30:dc:48:f1:
5a:d9:a0:3a:02:3e:bf:2b:38:f2:c1:66:15:c6:f6:5e:51:49:
67:98:ff:a5:ff:db:fb:df:ac:17:e4:1d:f7:cd:eb:0c:a9:c3:
a2:7c:57:06:bd:d4:38:2f:81:e2:5f:48:31:75:51:e9:9f:19:
1f:3c:6e:21:32:27:10:06:27:64:90:ca:4a:67:5d:05:c9:cd:
49:c9:9f:00:96:e2:a5:4e:e9:33:95:d3:75:76:8e:ef:9b:4e:
e7:90:b4:d0:02:bb:0a:7b:10:b5:35:bb:a0:e6:6e:5d:6a:18:
4f:d3:38:51:f6:0f:03:17:40:db:29:de:9f:29:69:9c:ca:42:
4e:4f:1d:38:e7:3e:ad:b9:b0:5f:e7:6c:93:a3:89:ab:c0:7a:
05:88:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:55 2025 by rpki-client