Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DD209203DB11F0B405F5B7762E951A.roa
File: 62DD209203DB11F0B405F5B7762E951A.roa (raw, json)
Hash identifier: g+zjgEtejo5AfIXxUnTx6ATH3Gptx90973PFdr+j6Ug=
Subject key identifier: A6:40:3A:E4:FD:FB:EE:3B:F9:E6:C2:AD:C7:9D:9B:E8:64:29:1C:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017480
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DD209203DB11F0B405F5B7762E951A.roa
Signing time: Tue 18 Mar 2025 09:28:44 +0000
ROA not before: Tue 18 Mar 2025 09:28:40 +0000
ROA not after: Fri 04 Apr 2025 09:28:40 +0000
asID: 151419
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95360 (0x17480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 09:28:40 2025 GMT
Not After : Apr 4 09:28:40 2025 GMT
Subject: CN=67d93ccc-dafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:6e:07:e5:24:ff:7f:84:da:28:3b:6e:f0:
2d:bc:3a:d0:ad:12:87:3c:60:af:57:10:85:42:29:
00:d7:15:b5:62:47:2d:5d:57:dd:53:01:d8:32:5b:
4f:dd:41:c2:db:dc:7f:bd:a7:f3:4d:84:84:af:22:
a6:10:41:60:91:ac:a9:e7:b6:0c:f1:ce:6d:9d:a1:
2e:0c:72:05:26:d8:68:7f:5a:fd:e6:48:79:2b:ce:
26:35:bd:e3:9b:b1:cb:bd:74:95:b7:38:11:81:a2:
e3:9a:23:35:8c:bb:78:03:c6:bc:b7:22:88:c8:48:
21:43:73:40:47:ee:45:c0:73:4e:ce:4b:0f:ca:46:
d7:f7:d7:3f:82:00:1a:99:0f:0e:0e:b3:e8:1c:21:
bf:4a:4f:fd:2b:34:f0:41:00:45:52:8d:4e:8c:69:
d8:7e:55:10:1b:c2:29:b0:d3:f1:76:c2:27:a5:a5:
0b:81:a7:42:b8:1e:01:c6:75:5f:7e:77:56:8d:bc:
bf:8a:75:ec:0e:cd:f5:9a:8e:92:c6:a2:f2:a2:ec:
49:29:20:4f:08:f8:4f:7b:ae:fa:6f:35:df:e5:0e:
02:84:a2:75:54:67:5c:5f:e8:f5:9a:f3:ff:a5:93:
e0:ae:c9:25:0d:f0:8e:4d:aa:5d:2f:9d:db:8d:67:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:3A:E4:FD:FB:EE:3B:F9:E6:C2:AD:C7:9D:9B:E8:64:29:1C:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62DD209203DB11F0B405F5B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:35:24:a1:a1:4f:60:6d:af:6a:ac:98:55:c6:0b:df:08:61:
bd:08:81:df:8d:4e:39:ea:0e:f3:99:97:be:7d:13:17:14:68:
27:b3:5f:55:47:71:d6:1f:cb:c0:eb:01:ac:f7:b6:24:c6:40:
27:6e:ea:c4:cf:a6:2e:5e:96:dd:8b:be:87:fe:9c:79:25:9b:
65:df:97:ac:4c:02:db:4e:05:46:e8:28:f0:7f:fb:1b:09:bb:
ab:c5:4c:4a:46:50:22:5a:b2:3d:58:56:0c:61:70:98:f3:f5:
ef:7f:c8:d0:fc:95:d1:bf:04:49:37:ac:00:87:e7:64:e8:60:
17:7c:40:54:7e:2b:48:15:e4:07:90:82:c7:61:bd:9e:84:0e:
63:ef:99:aa:7a:f1:01:60:dd:1d:86:8e:61:c4:b5:41:ce:67:
6d:79:58:fd:a2:26:7a:19:7a:d3:0b:56:88:fa:58:53:bb:07:
32:a9:6a:22:2e:59:68:bc:d7:f2:f7:7b:ab:ea:60:b7:30:f9:
48:a8:eb:bd:85:89:a2:e3:19:11:e3:e0:9f:d3:d2:1b:93:75:
dc:2f:19:26:77:1e:0d:15:74:e3:e2:be:5b:ee:98:1d:13:ba:
4a:4f:54:e3:21:70:b4:76:be:14:27:42:d2:9e:77:d9:4d:a7:
d4:68:a7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:09 2025 by rpki-client