Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DF1054F82B11EF8ADFC998762E951A.roa
File: 65DF1054F82B11EF8ADFC998762E951A.roa (raw, json)
Hash identifier: 7p0MColJYs0gK8XFckZFs22FdPyv0OGgnKYUdbiNzBk=
Subject key identifier: 58:18:69:EE:30:CD:08:FB:E7:D5:36:2F:EB:43:E0:31:AD:58:20:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01709B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DF1054F82B11EF8ADFC998762E951A.roa
Signing time: Mon 03 Mar 2025 12:31:15 +0000
ROA not before: Mon 03 Mar 2025 12:31:11 +0000
ROA not after: Wed 30 Apr 2025 12:31:11 +0000
asID: 136907
IP address blocks: 154.93.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94363 (0x1709b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:31:11 2025 GMT
Not After : Apr 30 12:31:11 2025 GMT
Subject: CN=67c5a113-ad36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:61:d8:30:f0:69:ea:4d:db:ba:ae:48:a0:
9b:9a:1b:f7:3d:c9:53:a8:65:49:9c:aa:3e:ee:ce:
2a:4c:84:37:d5:fa:a6:39:ae:a2:c1:92:f7:5a:7d:
52:1c:11:43:f3:21:e8:49:9d:62:33:72:e7:f5:9a:
da:17:f8:1d:b6:14:f8:12:76:36:f4:2e:6c:c9:cb:
fa:09:bd:0d:09:11:02:8e:0e:99:32:b1:e6:1f:31:
37:1b:7f:72:32:45:c6:b4:4e:d1:3c:c3:e3:33:fe:
73:36:c7:20:78:80:af:ac:62:bd:0d:71:9a:43:3a:
4e:e0:07:97:5e:f9:5b:bf:25:fd:61:85:e7:dd:2f:
81:4e:47:c3:0a:c8:44:af:99:a5:a9:59:8e:d3:c7:
08:cf:3a:db:97:39:4c:eb:2e:e1:7c:13:8c:03:6d:
d3:06:40:cf:13:d4:a6:b1:3c:c6:cf:cb:86:84:f8:
47:96:46:c7:b7:3a:a2:7a:52:a8:f3:5a:40:95:c2:
cb:ba:90:f7:d9:74:a5:08:a4:70:25:21:cb:ce:e3:
4c:83:90:b3:7d:2b:9a:cd:c9:f4:8c:85:da:76:76:
38:5f:99:26:bc:ba:ea:73:6c:26:76:f4:43:ec:73:
e9:8b:f0:0b:60:16:c5:e3:39:77:78:b5:21:8a:aa:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:18:69:EE:30:CD:08:FB:E7:D5:36:2F:EB:43:E0:31:AD:58:20:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65DF1054F82B11EF8ADFC998762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.100.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:51:6f:ad:2a:17:04:71:5d:c1:33:94:02:a0:91:41:8d:2a:
34:24:97:6f:ee:1e:41:c8:6f:01:10:77:ae:8f:06:1e:04:79:
88:af:c4:26:3c:44:87:fb:3e:68:48:9b:31:81:0b:9f:92:35:
56:71:35:e6:52:0e:b7:79:f0:63:40:72:92:a6:40:2a:dc:bc:
6e:6c:22:4a:bf:76:e9:6b:ae:d9:e6:08:f0:ba:47:43:df:ff:
db:99:4c:34:6c:78:a6:d4:76:0b:b5:31:95:33:2e:dd:9f:ee:
4f:18:02:11:d2:eb:65:13:e8:e3:39:2b:b7:fb:85:c3:ee:22:
f5:b4:59:a1:82:dd:60:52:fd:f5:70:6e:f3:6b:3e:06:83:f6:
1b:6e:0e:83:29:87:b1:15:da:a6:21:fc:44:5e:7b:ec:20:6c:
5e:82:39:5b:a8:7e:24:96:08:80:8c:fe:37:02:37:82:d9:f2:
98:67:87:f5:de:ce:b3:9b:9f:ad:9c:ac:5b:7a:c8:c0:27:22:
21:9a:bd:8e:36:ed:b1:d4:79:07:4e:6e:08:ea:0c:e2:b4:1c:
d8:1c:6c:60:a2:ea:2f:a6:ad:f0:7e:0f:24:01:ab:b8:0b:86:
b5:a3:40:5b:b1:d4:40:ec:9d:2e:ae:95:bb:e2:6f:e0:f4:d6:
0f:73:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:16:44 2025 by rpki-client