Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66036544062C11F0947A9175762E951A.roa
File: 66036544062C11F0947A9175762E951A.roa (raw, json)
Hash identifier: rMDmdCkJrLByOch4drJ3/x3zJzBrJnZ7DUFWI7hUmhk=
Subject key identifier: CF:52:F8:69:E1:5D:46:D9:17:50:B4:61:62:24:DD:8F:E0:5F:F9:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01755D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66036544062C11F0947A9175762E951A.roa
Signing time: Fri 21 Mar 2025 08:13:41 +0000
ROA not before: Fri 21 Mar 2025 08:13:37 +0000
ROA not after: Sun 04 May 2025 08:13:37 +0000
asID: 140666
IP address blocks: 154.93.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95581 (0x1755d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 21 08:13:37 2025 GMT
Not After : May 4 08:13:37 2025 GMT
Subject: CN=67dd1fb5-5a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:00:2e:5d:a7:0c:55:20:4a:fa:41:ee:7b:
32:9d:42:c0:1d:a9:84:53:13:44:66:25:21:1e:e8:
67:51:4d:f2:e8:6e:fc:3f:24:a6:2b:61:bb:c1:2a:
12:c9:d9:4e:9b:dc:9e:5f:b6:88:a7:60:ab:44:49:
51:61:44:15:87:22:5d:dc:0b:8d:7b:23:f0:27:99:
76:10:71:ad:52:2e:82:92:f2:37:94:8c:44:b2:96:
63:fa:2f:53:c4:2b:71:07:28:7f:db:f6:96:94:93:
68:b4:bf:23:19:a5:31:51:72:fa:17:9b:22:10:67:
1e:06:ad:16:99:65:74:ec:45:78:76:a7:d8:52:0e:
94:3a:4c:54:04:e4:97:f9:e5:de:57:dd:3d:bf:07:
74:0a:95:3a:3d:d7:50:98:0a:bb:3e:ce:2e:bb:0c:
79:5f:54:27:0f:10:ef:26:0a:38:95:63:08:b7:7e:
55:82:78:57:0b:c8:59:eb:71:fb:42:4b:df:03:06:
3c:ad:2d:d0:ea:52:04:28:f9:3e:f8:2d:7b:92:0d:
70:33:22:e5:88:28:d7:05:bc:dc:28:12:98:2b:e7:
02:17:4e:74:36:e2:91:9c:47:c6:d4:62:52:ab:b6:
9f:9f:d5:db:cd:a1:7c:42:d6:23:92:31:69:ce:06:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:52:F8:69:E1:5D:46:D9:17:50:B4:61:62:24:DD:8F:E0:5F:F9:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66036544062C11F0947A9175762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:71:3a:80:2e:de:af:38:8c:e9:ea:d4:ed:67:23:98:38:1a:
b3:14:90:0e:5d:95:fb:36:08:b0:6d:da:36:ef:6f:71:53:48:
7a:0d:c5:89:64:7d:24:3c:8c:97:c7:55:43:5f:9b:10:a0:b8:
de:a9:99:f1:42:ec:26:14:6a:3b:69:4a:4a:22:12:9e:6a:2b:
78:e6:34:20:9c:b7:26:60:90:00:2b:8d:58:40:40:73:f3:0d:
30:19:3f:99:36:ea:2d:2a:e2:68:78:88:1a:49:a2:5a:f5:d5:
0b:23:ea:f6:0a:ce:86:f7:16:59:c0:b4:52:3d:fe:83:80:97:
e6:dd:03:57:c2:d5:8f:67:f7:46:61:28:97:06:10:5c:30:3e:
ca:7b:76:47:ea:c7:f8:44:7b:bb:41:fd:d3:01:db:fa:21:58:
07:66:91:a8:e5:88:ba:11:08:18:96:4d:74:e7:ce:0c:2b:d4:
87:77:34:e3:9e:e4:de:7a:e7:46:65:e3:b5:9f:f8:82:2f:4f:
e2:17:8b:16:55:5c:ff:85:69:65:dd:97:70:35:07:9e:57:0b:
57:7a:3f:78:6b:1a:26:5a:f3:31:45:ec:69:b4:94:b0:45:8d:
fa:24:63:86:e1:65:64:0f:91:ed:ba:01:3d:cb:b3:68:2e:ef:
d8:cd:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:19 2025 by rpki-client