Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/697871C4F4CF11EF82AF65B0762E951A.roa
File: 697871C4F4CF11EF82AF65B0762E951A.roa (raw, json)
Hash identifier: 1Vpyc8KyGAIqdKJPB2hFONDRweBytW/1FifkOT6E8eQ=
Subject key identifier: E4:52:98:B2:01:58:C1:ED:92:8B:8F:B9:76:16:84:A6:5B:53:FB:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016638
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/697871C4F4CF11EF82AF65B0762E951A.roa
Signing time: Thu 27 Feb 2025 05:55:14 +0000
ROA not before: Thu 27 Feb 2025 05:55:10 +0000
ROA not after: Mon 12 May 2025 05:55:10 +0000
asID: 151804
IP address blocks: 154.197.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91704 (0x16638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 05:55:10 2025 GMT
Not After : May 12 05:55:10 2025 GMT
Subject: CN=67bffe42-bf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:59:b5:f2:93:30:99:68:78:d3:1d:d8:7f:
b8:b5:e6:22:bb:9f:ed:7d:86:68:89:f2:e7:e3:4e:
28:e4:77:7d:f7:c1:f3:57:83:90:f5:3f:a3:01:f9:
3a:d3:29:bc:95:f7:68:eb:04:4a:db:a7:80:49:23:
4b:1b:18:89:40:49:5c:0f:82:09:16:fc:91:89:c1:
b1:db:f5:d2:0f:82:98:2c:e9:1e:08:4e:7f:b6:14:
f1:a9:08:81:03:d7:47:ea:22:92:a1:e6:55:1c:bd:
d8:0b:dd:96:c0:64:2f:63:43:72:25:14:ea:5e:dc:
dd:8a:1c:6f:27:a6:48:0e:67:6c:23:3d:01:9f:38:
a9:11:3d:e3:49:b1:54:a5:85:96:3b:06:5a:02:5f:
10:09:0e:ec:bf:85:34:9a:cc:e0:ef:a0:74:b5:af:
ad:6e:9d:8a:f6:51:6a:53:ed:99:f2:50:cb:c6:07:
a0:d6:10:a7:bc:91:16:50:d8:81:89:9f:82:0b:e0:
7e:ca:b5:95:58:97:39:f5:54:b5:58:95:20:64:03:
c7:dd:09:05:fd:86:87:91:f0:9f:b9:c2:ac:37:73:
52:a3:cb:00:f3:a1:f1:17:d2:20:31:60:3d:7a:42:
8c:4a:a7:7a:df:59:31:27:50:29:6c:51:4a:b5:8c:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:98:B2:01:58:C1:ED:92:8B:8F:B9:76:16:84:A6:5B:53:FB:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/697871C4F4CF11EF82AF65B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f5:c8:21:d8:d6:03:ef:7f:9d:84:c0:41:78:28:54:65:76:
b4:2d:de:c0:fb:ab:cc:90:bf:9e:df:cd:16:de:93:7b:48:6e:
c3:2a:4a:34:2c:49:3f:15:5c:f7:53:ad:81:ef:98:33:85:2b:
02:41:87:63:4b:bb:76:a6:ad:a9:c0:ce:c5:fb:2b:0e:86:4e:
76:20:aa:3f:83:b6:f5:d6:40:f2:59:88:0d:ed:71:11:0e:78:
1e:2e:7a:32:87:0c:41:50:ec:6f:f3:bf:c2:62:d5:dc:4f:61:
1b:b3:92:67:7c:ce:92:15:e1:12:a7:b0:fb:36:ae:17:d4:7f:
d5:7f:d4:50:97:a9:0a:74:ef:ea:0e:53:72:01:4d:7b:78:78:
cb:8d:6a:79:75:cf:24:e0:e4:a1:6d:4e:4c:60:22:1d:b5:11:
56:52:cc:68:01:69:55:9a:ef:50:38:1a:b4:7a:31:11:fd:81:
6e:46:c5:67:85:40:da:50:c5:da:7c:38:df:89:46:3f:df:3b:
a2:a4:f8:76:b9:d2:ae:dc:66:8a:ba:e7:d9:ea:bb:0e:fe:ea:
74:2f:b0:33:cf:1a:8a:bc:c9:e6:d2:0e:d0:f0:99:43:7c:6b:
a6:1f:bf:bc:7d:1f:7f:5b:6e:93:e5:44:a6:31:1b:e4:36:0a:
1e:f4:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:43 2025 by rpki-client