Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72034A94DB1611EF88AA7F94762E951A.roa
File: 72034A94DB1611EF88AA7F94762E951A.roa (raw, json)
Hash identifier: H+Mpk1rIjcYv/Yx8Yi4QbGtL+DXs0tP15z5IYLtJss4=
Subject key identifier: 91:6B:16:00:78:C7:49:EF:7B:05:84:9A:0E:ED:6E:7E:DE:F8:E2:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01493C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72034A94DB1611EF88AA7F94762E951A.roa
Signing time: Sat 25 Jan 2025 12:18:12 +0000
ROA not before: Sat 25 Jan 2025 12:18:08 +0000
ROA not after: Mon 02 Feb 2026 12:18:08 +0000
asID: 132839
IP address blocks: 154.92.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84284 (0x1493c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:18:08 2025 GMT
Not After : Feb 2 12:18:08 2026 GMT
Subject: CN=6794d684-774d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:6b:d4:6f:e9:d8:a9:8a:e3:af:d9:4b:da:
b0:92:4d:b3:86:31:04:41:6b:9f:6d:d4:71:73:ce:
95:aa:03:0b:db:be:a5:d3:58:9c:7d:20:e9:73:94:
c4:76:d7:38:fa:d5:59:d8:7a:26:2d:cf:db:03:7d:
7d:8c:a0:8e:19:9a:90:fc:84:e5:b4:9f:ad:8e:d6:
dc:6a:6a:f9:a7:85:15:97:bf:28:42:40:cf:c6:37:
ff:ad:7e:44:a0:a9:f7:c7:90:e6:0b:a5:7a:de:69:
31:b5:e7:c6:6d:7f:7b:de:1c:0e:94:1f:9a:ec:db:
79:b6:f9:4c:f9:66:7c:bd:a7:40:ff:19:d2:7c:ed:
37:9d:0b:7f:bb:c4:cb:8c:1c:23:cb:d2:fa:c7:c6:
b6:bc:fa:ed:da:13:c5:ab:e9:bf:01:a1:57:63:d4:
78:f6:02:99:25:4d:08:62:a3:77:9a:23:e5:d0:ce:
0c:82:d8:d4:c0:2e:b3:8c:0f:a6:2a:4c:28:67:31:
ec:4a:7e:71:ac:a1:b7:33:6d:a9:ec:e0:c0:73:5a:
f2:be:07:43:9a:59:3d:34:da:19:3c:4e:da:f1:23:
60:89:95:6c:2f:62:c0:ef:d0:02:a3:07:fb:50:4b:
7e:db:68:d8:96:90:ab:3d:98:e2:a9:10:d2:94:77:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6B:16:00:78:C7:49:EF:7B:05:84:9A:0E:ED:6E:7E:DE:F8:E2:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72034A94DB1611EF88AA7F94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.64.0/19
Signature Algorithm: sha256WithRSAEncryption
cc:d2:b8:60:ab:84:c0:fb:98:19:5b:32:27:9c:e6:7e:af:62:
6b:b6:81:31:25:ad:e9:e2:4a:45:7d:f4:e4:db:7c:a0:0d:a1:
ea:79:2f:c3:d2:5e:61:41:8d:79:a7:01:67:0f:d0:a7:9b:a1:
05:bc:17:36:25:8b:de:9f:d0:1b:1c:7a:25:7d:b9:2c:6b:95:
f7:ba:ae:16:2c:48:52:15:01:40:7d:73:03:bd:12:f6:99:4f:
6f:c3:1e:7f:c2:f3:ae:46:0a:00:26:d3:58:b9:8b:9e:a0:9c:
9b:0c:4b:e2:41:f6:fa:c5:a5:c0:13:00:a4:3b:70:97:c1:49:
cd:b9:cb:40:c7:6f:68:8f:f8:8f:72:3b:93:e8:a8:ff:36:36:
81:e6:d0:f5:82:a6:67:30:ce:fc:11:32:75:be:7b:c8:35:62:
08:6c:1f:f3:07:e2:81:a5:33:89:26:fb:66:b3:34:5a:fa:b3:
a8:1f:80:82:4a:ae:0c:f1:f4:d3:27:84:d6:ea:de:77:c6:27:
15:e3:7b:cb:47:0b:93:8a:b6:e3:a4:bb:ca:46:d3:0e:c7:54:
f5:a0:a3:24:56:dd:81:e3:30:ce:18:40:84:51:ec:06:c0:82:
e4:48:3a:6a:50:c5:62:6b:40:76:21:85:2a:bd:da:aa:ef:ed:
2c:a3:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:57 2025 by rpki-client