Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C989330062B11F090BFFF70762E951A.roa
File: 6C989330062B11F090BFFF70762E951A.roa (raw, json)
Hash identifier: Sn4YRiBdQ4qhZwDD8Lgqq4X1xRGdf2EizPQw0LfXWW4=
Subject key identifier: 59:F5:56:7B:5A:57:EA:A5:F7:98:05:34:AE:E7:11:20:60:02:17:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017559
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C989330062B11F090BFFF70762E951A.roa
Signing time: Fri 21 Mar 2025 08:06:42 +0000
ROA not before: Fri 21 Mar 2025 08:06:39 +0000
ROA not after: Mon 05 May 2025 08:06:39 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95577 (0x17559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 21 08:06:39 2025 GMT
Not After : May 5 08:06:39 2025 GMT
Subject: CN=67dd1e12-4018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:46:c6:ab:e4:0c:0f:28:2a:7e:69:8a:9b:
6f:93:ee:05:44:1a:a1:88:41:e7:2c:b0:c2:45:bb:
77:c6:94:51:9c:55:b0:57:6e:09:fe:cd:f9:89:67:
d3:50:f9:8c:f8:c1:b5:1b:0f:be:ec:f2:d3:aa:4d:
2c:f7:99:de:19:fa:ae:86:f3:f0:6e:a8:7e:bb:84:
93:b1:4e:3b:e3:03:75:b8:2c:f2:b5:08:d9:7b:f0:
74:d8:65:03:65:fc:58:6c:9b:e1:05:44:4d:3e:93:
9d:ac:ad:2d:8b:98:3e:51:e7:e5:89:5b:b7:f1:0c:
c9:b7:bb:db:6c:bf:37:57:6b:c3:89:21:27:f1:d0:
e2:60:e7:ba:20:a8:4a:ba:be:10:1a:7b:56:11:a0:
05:5e:b0:0e:1c:f4:60:0b:92:52:d2:59:c0:75:1b:
7b:de:5c:c8:be:65:57:df:a0:1d:0c:9d:b5:a8:0d:
e5:ee:ca:1c:3d:50:b5:e9:cc:ec:9f:2b:a2:08:c4:
53:7e:59:45:17:36:31:20:7e:18:bc:bb:81:d3:61:
91:4b:c3:9e:84:56:07:d6:17:1f:10:f6:55:49:76:
38:b4:24:58:7c:3d:b9:06:86:36:66:98:51:01:f1:
68:89:cf:49:88:c5:2b:c0:63:cf:72:fa:0d:c0:d8:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F5:56:7B:5A:57:EA:A5:F7:98:05:34:AE:E7:11:20:60:02:17:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C989330062B11F090BFFF70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0a:f9:9d:a3:47:9f:66:cf:99:9c:f6:c9:80:df:82:ac:e3:ed:
4e:6a:70:c1:13:7d:eb:ba:09:01:e5:81:88:53:6a:f9:cd:9e:
b7:28:49:74:2d:ae:76:1f:5d:36:c6:f5:2a:d2:c0:81:fb:6e:
71:32:eb:3c:4f:38:02:77:cf:de:9c:c4:29:6d:18:31:40:da:
fd:cc:27:ac:a6:5f:e6:2d:e0:ac:e0:05:0d:06:b2:28:41:04:
6d:47:44:ee:f9:2e:ea:cc:62:43:40:49:70:d2:92:34:80:a7:
17:e3:28:71:80:ca:ec:00:1f:6a:60:ed:7f:71:49:9c:f3:5a:
4e:90:89:37:76:41:ef:c1:66:88:04:0e:ea:78:8d:13:d2:08:
61:46:fa:2b:05:df:7f:a1:5e:e6:8a:94:e8:77:02:67:f1:0d:
b0:63:df:8c:02:6d:c1:96:79:7d:33:9a:61:51:59:7a:82:77:
6f:2d:e1:a3:3a:1f:ea:e6:9a:bd:b4:37:89:be:25:66:2f:65:
e6:a3:02:6e:41:86:f2:74:01:26:ad:97:59:3e:02:c0:38:67:
64:d1:15:06:41:3d:bb:06:7e:68:24:e3:31:83:86:a9:46:de:
c7:a7:1d:f7:e1:cd:74:9b:20:9a:14:31:c6:5e:48:a2:41:52:
d0:62:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:48 2025 by rpki-client