Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649269DC058511F092E5AA76762E951A.roa
File: 649269DC058511F092E5AA76762E951A.roa (raw, json)
Hash identifier: pELuoeS21b6zeT28a8odeBFyyisZN4hGapQVrRjJrFc=
Subject key identifier: FC:69:C2:17:45:1D:15:94:8F:48:0B:87:0D:F8:5F:9B:D6:6B:98:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017549
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649269DC058511F092E5AA76762E951A.roa
Signing time: Thu 20 Mar 2025 12:18:12 +0000
ROA not before: Thu 20 Mar 2025 12:18:08 +0000
ROA not after: Thu 08 May 2025 12:18:08 +0000
asID: 3320
IP address blocks: 154.91.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95561 (0x17549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 12:18:08 2025 GMT
Not After : May 8 12:18:08 2025 GMT
Subject: CN=67dc0784-20e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:a7:8f:3f:f9:c0:c4:7d:77:81:b8:1e:86:
d2:e8:aa:d9:41:bc:9d:ce:61:49:29:86:9b:ed:d6:
f0:9a:0e:59:7b:4d:91:1a:62:9e:41:23:ce:d6:19:
97:8b:ac:ae:39:0b:35:48:f0:56:08:d6:e7:f6:59:
d7:00:c9:30:6b:37:51:6c:b2:62:3b:fd:28:4a:e2:
46:2d:91:10:9f:ba:9f:0b:98:e9:b3:06:ab:31:f6:
df:75:e0:1f:9e:a7:a6:cf:97:61:7b:6d:54:00:88:
50:8c:74:76:9d:ec:91:e7:9d:48:f7:34:5e:f7:88:
e3:d7:9d:3c:22:11:62:0e:03:1b:7a:0d:28:e4:e8:
57:2c:b6:18:65:29:55:30:0d:92:f8:aa:00:4f:70:
59:f8:5b:82:82:6a:27:a1:e0:73:99:1c:36:92:98:
cc:33:5d:0a:7e:42:a6:7d:a2:9a:fe:5b:76:95:bc:
ba:a8:78:5c:ef:c6:71:a9:c8:d8:d3:36:04:1a:d9:
f9:b8:8c:37:b2:94:b7:3d:6d:95:2f:92:16:80:e5:
b7:f1:17:3d:db:b6:e9:b1:1f:00:1f:27:fa:3c:22:
6b:24:b8:41:4a:36:26:9c:cb:f2:e3:33:5a:52:b8:
54:c1:37:63:4d:8b:ba:74:f1:e8:a9:51:8b:4b:91:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:C2:17:45:1D:15:94:8F:48:0B:87:0D:F8:5F:9B:D6:6B:98:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/649269DC058511F092E5AA76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.148.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:d6:16:00:bd:d9:aa:bb:18:f7:3b:0c:91:f4:d8:5b:b2:51:
3b:aa:58:73:4e:28:aa:a0:ee:65:26:c1:a3:3e:13:a5:29:2e:
60:e2:06:3b:ba:c2:5a:a3:63:b6:2e:70:55:21:9f:55:89:93:
92:b8:59:89:2b:39:99:2b:72:f5:2d:9a:bf:6d:c0:42:27:16:
61:0f:e7:b4:2d:ff:b1:86:a9:3e:70:21:49:92:1f:eb:ba:46:
eb:1f:d5:4d:94:a3:bb:a9:d2:77:0e:c7:73:90:f9:64:d7:1a:
44:e3:58:a1:33:ec:d2:0d:7a:1c:3b:bf:51:b4:00:24:36:99:
00:5a:3a:e7:b8:1b:1d:34:69:35:16:7c:13:69:3c:09:37:85:
af:64:72:5e:3b:13:e5:ba:08:c5:1a:51:44:b7:90:44:7a:7d:
91:8b:0b:08:57:63:bf:26:de:1f:24:8f:09:5d:b4:d3:66:d2:
db:96:36:cf:2f:2f:e2:36:23:af:26:9c:90:96:7c:cf:e8:86:
40:94:ea:12:7a:9f:b1:3e:99:4a:be:d6:f9:b6:f2:39:c1:df:
b5:83:da:80:51:db:06:cf:23:7a:c3:39:49:09:d7:fb:c1:84:
b6:23:94:99:01:03:4a:a0:92:68:9f:25:84:6f:a2:d0:34:e3:
87:4c:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:57 2025 by rpki-client