Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/711E5D94F47011EFB0953C97762E951A.roa
File: 711E5D94F47011EFB0953C97762E951A.roa (raw, json)
Hash identifier: YuymwKdC2vWGbRE5JtwlNJuhG/kZx2yjJZ0Hy0w8Gs8=
Subject key identifier: 68:63:86:F0:35:F8:46:4E:86:BE:92:43:24:66:E4:1E:11:A4:2F:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016562
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/711E5D94F47011EFB0953C97762E951A.roa
Signing time: Wed 26 Feb 2025 18:35:24 +0000
ROA not before: Wed 26 Feb 2025 18:35:21 +0000
ROA not after: Sat 19 Feb 2028 18:35:21 +0000
asID: 17561
IP address blocks: 154.201.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91490 (0x16562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 18:35:21 2025 GMT
Not After : Feb 19 18:35:21 2028 GMT
Subject: CN=67bf5eec-ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:0f:c3:22:d6:48:7d:84:a7:fe:e1:a9:93:
bb:66:28:fc:24:6d:5d:db:d0:43:c4:b4:b6:07:40:
15:39:4f:b7:6c:1b:6a:1d:7f:0e:35:92:80:cd:18:
90:00:d7:47:14:ae:61:c6:e2:87:15:62:bb:ee:d1:
dd:34:ca:e0:de:b0:44:9b:1a:6d:df:2a:e4:43:56:
f3:4b:9f:50:bc:c1:00:ca:d1:26:1e:cc:46:f3:d4:
ea:de:5c:28:8c:a7:70:ef:31:72:0e:68:eb:73:af:
d2:63:4b:de:5a:65:9c:69:0a:c2:b2:68:8c:d4:d8:
72:9a:30:08:5f:e8:61:04:bf:1f:20:55:9b:6d:53:
a6:80:2e:61:ee:32:c8:ee:db:d2:4b:cb:b7:af:4c:
9f:94:9d:4c:ff:8c:ff:2b:56:64:6b:e7:2e:5f:5b:
d4:c2:93:75:85:1a:bf:c9:0a:ca:7b:65:fb:4a:62:
4c:d1:ea:74:b7:ca:73:d5:4f:b8:7c:ef:66:e9:5c:
c0:49:c6:37:ed:39:19:04:c6:b2:1b:94:f4:ed:79:
ec:06:45:60:3c:61:5a:8d:5d:8f:da:a5:d8:91:23:
74:b3:4d:01:e4:61:ac:6f:8a:9e:22:16:58:b3:cc:
f4:f9:3a:af:a1:53:d4:2b:48:49:0e:f5:72:0a:8a:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:63:86:F0:35:F8:46:4E:86:BE:92:43:24:66:E4:1E:11:A4:2F:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/711E5D94F47011EFB0953C97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.62.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f1:27:e7:89:84:8c:53:88:5e:2a:5c:a0:2b:6e:13:c5:be:
11:52:e5:5e:f2:08:58:06:bb:9f:e2:6f:66:03:7c:c6:69:68:
ce:bc:55:91:34:d8:50:35:9c:0b:da:5a:ae:09:33:5a:9a:c2:
8e:74:b8:ce:38:63:ed:04:6d:43:5d:16:8c:83:ff:dd:8c:bc:
34:63:84:a7:53:78:62:e9:41:59:3e:74:1a:fe:05:87:8e:7d:
82:e5:d4:cf:9a:a1:38:8b:c1:70:46:3e:b9:b9:3c:9d:11:ba:
8b:48:46:72:6b:9c:32:22:55:fc:ee:7f:7c:ea:fb:5b:cc:b7:
4a:ed:10:2b:0c:9f:ef:24:27:9a:ce:32:a9:7a:e9:c2:bd:39:
d7:3b:b8:b5:e9:66:f4:4b:64:00:2d:4d:42:e8:8a:59:51:f1:
dd:ea:b0:2a:d3:88:8e:98:5d:41:b3:dc:a5:1a:55:6f:79:61:
26:1d:97:d2:60:1e:db:6d:3e:06:62:e3:dc:14:cd:67:7c:e2:
82:0f:34:d3:f6:94:42:e1:6d:0f:71:a4:2b:cf:0d:9d:a6:ce:
9f:01:39:38:67:f7:c8:bd:b5:bb:e3:82:0d:48:c1:a8:c4:0a:
69:20:35:4d:aa:25:7b:3f:67:30:dc:06:22:4b:e8:cc:c5:fe:
16:04:2f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:49:34 2025 by rpki-client