Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D6469B4F53E11EFAEA4D3A1762E951A.roa
File: 5D6469B4F53E11EFAEA4D3A1762E951A.roa (raw, json)
Hash identifier: wyricf+wwtVvD5Gv1nx7LkSnnwXoVt2D/e5Fg0PZq1E=
Subject key identifier: E7:0D:AD:1F:1D:06:76:F0:67:15:2D:7C:DA:D7:63:0C:D0:61:48:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01698A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D6469B4F53E11EFAEA4D3A1762E951A.roa
Signing time: Thu 27 Feb 2025 19:09:28 +0000
ROA not before: Thu 27 Feb 2025 19:09:24 +0000
ROA not after: Fri 11 Apr 2025 19:09:24 +0000
asID: 63139
IP address blocks: 154.203.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92554 (0x1698a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 19:09:24 2025 GMT
Not After : Apr 11 19:09:24 2025 GMT
Subject: CN=67c0b867-354d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:96:61:fe:b5:6b:47:f3:b2:6f:e0:f8:c5:
75:5b:81:b3:16:ff:44:0c:9e:3e:7c:2b:cd:a3:ea:
2b:c7:a8:0c:57:3c:09:38:29:8d:c5:d1:3a:9b:3b:
a7:38:8d:9f:6c:d3:dd:16:9e:38:69:20:85:8e:d8:
a4:ed:ae:3c:9f:9a:97:c3:ce:ea:99:a8:fb:d4:b0:
e3:d4:35:e2:d1:5d:d7:3c:76:8e:29:70:8d:f5:ee:
ec:fb:66:26:04:bb:05:af:bd:7f:6f:9e:b1:5c:75:
73:9e:d5:aa:a2:65:4f:44:ad:15:d8:12:49:02:a7:
23:f6:70:aa:1c:38:ba:d9:ce:58:9f:a8:6a:98:4e:
ce:cb:56:5f:75:31:f1:ea:9d:6b:56:48:2c:fb:ee:
05:f9:22:da:c7:1f:22:66:30:e4:3b:52:a7:57:9c:
20:ec:42:77:b7:12:4d:bb:cf:13:23:77:23:03:61:
ef:4e:56:a7:00:b7:56:44:b4:97:12:93:d9:c9:6f:
bc:58:19:21:af:74:bc:94:2a:9f:f9:93:0b:5f:de:
d2:50:82:73:31:60:12:cc:a9:36:6a:2f:66:5e:02:
16:0b:37:0f:a4:0b:50:4c:fb:0d:47:fa:e9:ab:dc:
84:2e:82:2d:70:7e:3e:19:83:c0:bb:aa:50:9e:5f:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0D:AD:1F:1D:06:76:F0:67:15:2D:7C:DA:D7:63:0C:D0:61:48:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D6469B4F53E11EFAEA4D3A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.189.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9b:b4:5e:59:42:79:ff:9b:74:f9:b6:9b:94:4d:39:0b:11:
a4:1c:5c:7b:dd:65:31:56:8f:cc:07:7e:89:a4:53:22:1e:44:
83:54:de:4d:03:73:a1:67:4c:cc:24:7f:6f:4c:55:57:e7:a9:
2d:43:98:92:60:40:4b:9c:3d:41:af:a9:20:ef:8c:60:80:11:
59:1c:d5:a8:57:00:84:de:f0:98:55:e9:ed:10:c5:1e:5c:33:
2f:a4:61:f0:e3:e0:3a:24:f8:e3:8d:e0:9b:f2:15:55:1c:7d:
06:64:58:f8:79:4b:dc:d6:d5:b5:1d:16:ed:a9:22:bb:c7:f0:
bd:2b:1c:a6:f9:be:c4:2e:5b:5a:93:5e:c8:bc:ec:3d:04:b0:
95:9c:6c:60:2b:b7:ce:2f:33:2f:1f:fe:e8:a9:ba:e7:09:6e:
75:42:0b:81:5f:e2:e2:ff:7b:a1:14:26:94:1b:58:10:bc:59:
35:03:53:9f:6a:08:84:aa:b7:29:6c:71:b8:52:8d:d3:d7:19:
15:7c:b0:01:2d:bf:86:fc:0d:0c:8f:db:56:48:b3:c4:8d:e2:
b7:70:fe:56:24:38:be:d5:1d:bd:81:62:18:2d:c0:0e:7e:0f:
01:7f:99:e5:84:e0:a3:f0:8c:7e:e9:49:1f:61:ce:aa:9b:78:
ce:02:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:55 2025 by rpki-client