Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D285FB4F47F11EF883B0482762E951A.roa
File: 6D285FB4F47F11EF883B0482762E951A.roa (raw, json)
Hash identifier: +PGhz8j4PGDYx18AcJHCfXgJhprYhx/4wFhhlX+EPO8=
Subject key identifier: C9:7A:DE:9C:A9:1C:FB:FF:91:B7:56:D4:FD:CC:8C:91:4F:48:8C:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D285FB4F47F11EF883B0482762E951A.roa
Signing time: Wed 26 Feb 2025 20:22:40 +0000
ROA not before: Wed 26 Feb 2025 20:22:36 +0000
ROA not after: Sat 19 Feb 2028 20:22:36 +0000
asID: 17561
IP address blocks: 154.221.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91625 (0x165e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 20:22:36 2025 GMT
Not After : Feb 19 20:22:36 2028 GMT
Subject: CN=67bf7810-1844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:95:33:c7:c1:87:ef:b2:f0:57:da:8e:d0:
25:fb:03:24:52:92:ec:3a:92:b6:4e:15:a0:98:1f:
d1:cf:fc:9c:20:b5:a6:f8:e9:fc:63:bb:15:8e:03:
44:25:dc:41:82:12:90:ce:c5:bd:39:e7:c4:60:a1:
53:32:cb:3e:6c:a6:51:e5:27:ec:b0:8d:43:27:31:
41:d9:7b:5f:c8:02:da:83:c7:51:e7:7f:71:42:db:
53:8b:e8:2c:9a:6e:0e:65:7d:47:58:2f:4f:59:0f:
59:3f:28:75:ca:22:d1:a6:66:9a:94:57:f8:99:dd:
ab:7c:f0:51:52:ea:2f:85:5d:25:ca:47:4a:e7:c8:
1f:91:01:54:7a:27:c1:78:35:40:29:e5:f2:37:a9:
a1:19:09:d8:bc:53:38:27:54:b9:74:89:79:dc:fd:
bf:c8:ac:c3:ad:59:16:bf:67:8b:39:b6:84:96:bd:
2c:a9:63:af:c4:39:99:6e:0a:c2:d0:97:e5:69:7e:
a2:ab:90:d5:5d:5b:13:2c:a0:76:18:77:b7:24:5b:
fb:0d:c7:f9:63:4f:9d:e9:fd:aa:25:49:90:ef:5e:
30:19:ea:57:b3:69:17:28:13:26:6d:88:85:d7:0d:
bd:ee:9b:5f:c3:2b:81:21:d7:dd:01:68:8b:c1:2c:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:DE:9C:A9:1C:FB:FF:91:B7:56:D4:FD:CC:8C:91:4F:48:8C:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D285FB4F47F11EF883B0482762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.37.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:81:48:d1:dc:cd:cd:89:5b:2c:cb:9c:4b:3a:be:15:c9:9b:
05:b1:81:bb:8a:b8:d0:05:10:01:12:50:4c:9d:01:ba:96:74:
ff:11:1d:b8:d7:0e:53:1d:03:00:cc:d3:34:7e:e4:58:18:3d:
a6:ef:cd:4e:1f:b0:84:71:e7:9d:27:bd:7b:85:ba:3d:26:39:
15:58:74:d7:c7:03:79:4b:9f:80:8f:d8:94:9e:f4:59:f1:0c:
67:ea:70:09:23:e4:b4:c1:51:af:f7:6f:44:09:4e:48:85:7d:
8f:14:8a:89:72:61:02:e5:46:19:b1:55:13:89:ed:bf:ff:14:
5f:41:8b:af:54:4e:26:5c:33:57:70:67:86:ed:87:6f:f4:10:
39:85:c6:0f:66:c4:be:ec:ee:a6:ad:99:8c:d4:d9:eb:16:c2:
b4:76:85:26:d9:17:b2:31:f8:42:72:a6:9f:d2:6f:81:bf:b9:
3f:7f:a2:a1:ee:85:88:fd:aa:4d:bc:32:ac:63:50:b5:ec:3f:
b0:d4:0e:65:35:a2:13:b6:1f:13:ea:27:83:9b:c1:96:b9:3f:
50:cc:0e:f7:d6:c8:96:74:ab:7a:e2:7a:12:84:15:6b:b6:ed:
f1:51:fb:6e:e6:6f:19:8e:6a:47:cd:90:83:1d:a5:38:3e:57:
61:61:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:55 2025 by rpki-client