Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72043116FB3711EF842690B9762E951A.roa
File: 72043116FB3711EF842690B9762E951A.roa (raw, json)
Hash identifier: RjqP6/kJ1jopUo6kzgIgsO3FtsCcdlP8KjFfz9RcNTc=
Subject key identifier: 42:78:07:E6:64:85:57:BE:82:6A:7A:E6:4C:D4:88:46:08:FC:E6:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72043116FB3711EF842690B9762E951A.roa
Signing time: Fri 07 Mar 2025 09:35:03 +0000
ROA not before: Fri 07 Mar 2025 09:34:59 +0000
ROA not after: Thu 24 Apr 2025 09:34:59 +0000
asID: 140570
IP address blocks: 154.91.5.0/24 maxlen: 24
154.91.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94953 (0x172e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 09:34:59 2025 GMT
Not After : Apr 24 09:34:59 2025 GMT
Subject: CN=67cabdc7-ac6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:7d:bb:f3:07:a0:1f:95:2c:2f:8f:42:2c:
f9:77:73:db:e3:4a:c1:ae:02:7d:1b:7f:ee:73:51:
55:c3:0f:f0:04:ca:14:4d:a0:21:9c:a4:1d:8c:c9:
eb:e9:5d:4a:69:23:8c:78:3d:cd:d2:48:99:af:3b:
f1:46:93:94:87:46:55:24:7a:e6:e2:75:7b:fd:f5:
24:f3:d1:f6:56:a5:b4:5a:8f:2b:b9:5d:b4:4e:10:
84:24:3e:6f:08:ca:35:f8:2c:7a:e1:96:da:60:40:
be:e3:a1:28:e9:7e:f8:97:77:f4:02:15:c8:54:e7:
f5:ef:7f:b0:03:8d:40:01:e5:1b:bf:57:1b:3a:b1:
24:8e:a6:bc:4a:12:44:4e:85:dc:88:ad:79:c8:c9:
d8:c5:03:8a:99:2c:62:ff:4b:06:48:f5:da:d0:44:
11:b2:2c:73:bf:4c:3e:84:c5:42:f3:8e:ab:e7:2a:
a1:8d:0b:b7:34:b9:9b:0e:81:24:96:1d:b9:6f:f9:
29:aa:56:76:83:1d:d5:41:bd:5d:2e:11:2a:2d:3c:
31:2d:09:15:83:8c:74:8f:37:ad:af:df:bd:ed:b3:
4f:6f:84:27:67:53:8a:f0:d4:61:00:25:d9:b3:97:
79:77:c4:f7:02:ea:38:d4:d4:8b:c4:e2:da:31:49:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:78:07:E6:64:85:57:BE:82:6A:7A:E6:4C:D4:88:46:08:FC:E6:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72043116FB3711EF842690B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.5.0/24
154.91.7.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8a:8a:00:21:bf:05:35:e7:0f:b2:e1:13:e1:71:bd:be:40:
a3:bc:ce:63:06:09:ee:9e:f0:ff:01:8e:50:ef:a7:d8:6c:b2:
6e:aa:bc:38:09:a8:64:7a:cf:92:32:78:00:04:65:63:4e:8d:
fd:7c:31:34:96:43:73:89:1a:f8:1a:c0:b5:78:9f:85:da:27:
31:9c:a3:56:63:98:6a:43:b0:87:a8:87:95:15:03:7d:05:b9:
49:8f:29:d1:48:ad:42:0e:50:d0:e3:4b:64:f4:fa:dc:fa:f4:
d3:f0:4d:bf:23:0c:67:8c:85:c9:1a:4d:c9:15:f5:e6:64:89:
96:40:55:51:37:4e:93:cc:47:e5:36:69:62:a1:dd:7f:46:8a:
54:e7:dc:bf:1b:6f:b2:f0:1c:f0:ac:12:26:f7:d2:2d:ad:1f:
3f:a6:5c:8d:fd:73:3a:51:4b:bf:cd:d6:08:b5:f3:9b:ae:2f:
f3:89:a8:1d:e6:24:3c:14:22:a5:f6:ba:f7:14:dc:9c:f2:56:
49:2c:a3:84:13:05:e4:69:6f:67:e8:d4:53:33:c7:06:9b:52:
02:76:bd:42:3c:67:d0:77:bc:15:b4:83:cd:e1:80:7f:6c:93:
66:29:f6:cc:5d:0b:11:91:eb:c8:0c:e4:8f:28:5b:3d:37:50:
86:14:29:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:07 2025 by rpki-client