Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B27894EABE11EFA9707367762E951A.roa
File: 69B27894EABE11EFA9707367762E951A.roa (raw, json)
Hash identifier: TRkc8ctvLXaq5wBgs+AzTv5JN1fZ3KZ60uDRe+DxNAE=
Subject key identifier: C4:B9:0A:12:16:FC:92:7C:72:7A:76:6E:4F:74:FD:F2:ED:F8:7C:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01570D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B27894EABE11EFA9707367762E951A.roa
Signing time: Fri 14 Feb 2025 10:28:21 +0000
ROA not before: Fri 14 Feb 2025 10:28:17 +0000
ROA not after: Mon 12 May 2025 10:28:17 +0000
asID: 135097
IP address blocks: 154.197.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87821 (0x1570d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 14 10:28:17 2025 GMT
Not After : May 12 10:28:17 2025 GMT
Subject: CN=67af1ac5-47ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:9b:a1:36:14:35:f2:18:8b:ea:64:26:93:
d4:ad:da:cf:0b:40:f0:3b:fa:e5:0a:a4:07:16:b0:
54:f4:88:f7:d9:45:f6:53:b5:9e:fb:65:37:a8:29:
32:57:f0:7d:30:0d:8e:3c:97:ce:eb:0a:75:4a:9b:
9a:52:b4:e5:94:35:e5:95:91:91:88:bc:ff:50:3c:
fc:bf:bb:03:67:8b:24:a8:87:f7:ad:8f:26:d2:2f:
3f:72:99:eb:25:20:75:c7:dd:db:f2:26:e8:b0:13:
30:24:e2:16:7e:db:b9:db:cb:90:73:e7:e7:e4:57:
70:df:35:36:57:c1:d7:d2:69:7c:e2:02:dc:54:2d:
9e:b0:94:1b:a3:2a:17:04:b3:37:02:ce:12:7c:65:
2d:ad:2f:09:94:6d:af:0c:80:81:e4:0e:a3:57:ab:
e6:e9:16:85:65:b6:be:f4:c9:24:51:e8:c3:c1:f7:
13:c1:68:86:0c:20:02:e8:9c:85:5b:a6:e6:0a:72:
82:5d:02:fd:4d:4f:8a:1a:55:2e:7f:ed:69:80:19:
d8:1e:6c:64:67:6d:20:cb:2f:d8:9e:c2:61:6e:b5:
01:21:10:63:68:38:e6:42:df:43:f5:4c:15:5e:fe:
f9:f1:1a:9d:6e:c4:26:ee:01:8d:06:9b:2a:c3:0d:
ab:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:0A:12:16:FC:92:7C:72:7A:76:6E:4F:74:FD:F2:ED:F8:7C:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B27894EABE11EFA9707367762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.128.0/18
Signature Algorithm: sha256WithRSAEncryption
09:88:e1:ca:44:f2:31:fd:67:bc:55:bd:cc:34:53:6c:3e:67:
f0:81:29:0c:ac:85:96:d9:72:0c:90:1f:65:47:fb:db:c8:2f:
ac:fc:b0:51:6e:bb:fb:83:d7:1f:ca:3b:56:f0:26:9e:2f:21:
4b:2c:8b:d4:79:f9:a3:ba:ff:05:80:db:cb:25:9f:ff:f3:58:
cb:f1:8d:a3:f5:e2:66:4a:76:b3:ed:68:6f:c2:e6:0d:56:a0:
76:8e:33:a5:c5:ff:f4:50:31:05:ec:5c:df:25:2c:8f:d8:66:
58:d2:60:93:6d:dd:d0:3b:f6:9d:e5:e6:a6:14:23:58:23:b0:
86:15:2d:01:42:82:69:b7:15:c5:1d:af:ee:2e:f1:03:02:0d:
19:97:2f:e8:6f:8b:4c:f3:5c:4b:19:99:eb:fa:0e:bf:83:2b:
eb:4b:9e:8a:10:5e:08:dd:c0:53:50:69:66:16:e7:17:77:d8:
f2:c8:ec:05:81:dc:07:3f:41:69:f2:84:18:5a:43:a3:2f:a7:
22:a1:09:42:8f:c8:61:3a:8b:59:40:fe:cc:38:11:d6:51:15:
7b:f0:2d:55:14:04:be:e2:c5:d3:0e:3c:30:ad:8a:a4:37:82:
c4:42:65:d1:ee:9e:1d:d9:d7:61:55:1a:3d:66:5f:63:c6:e1:
9d:ee:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:00 2025 by rpki-client