Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72722AE6094611F0A41A1567762E951A.roa
File: 72722AE6094611F0A41A1567762E951A.roa (raw, json)
Hash identifier: 1kIxuaAnCkOC+sFIK8/CdJwyfQE/55LUKtNEqn2YANA=
Subject key identifier: ED:CF:47:0E:A3:1C:3E:E3:3A:18:27:8B:BF:3E:1F:EF:72:8B:DA:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72722AE6094611F0A41A1567762E951A.roa
Signing time: Tue 25 Mar 2025 06:57:42 +0000
ROA not before: Tue 25 Mar 2025 06:57:38 +0000
ROA not after: Thu 01 May 2025 06:57:38 +0000
asID: 5068
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95727 (0x175ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 06:57:38 2025 GMT
Not After : May 1 06:57:38 2025 GMT
Subject: CN=67e253e6-4a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:7c:9b:bf:0e:1e:c8:d0:1d:da:96:7c:3d:
eb:5e:ed:9e:44:25:19:23:2e:4f:af:3b:c7:76:20:
86:69:92:4e:5a:bc:cb:06:92:94:12:44:be:62:1b:
ec:5c:07:0e:b7:af:8a:d0:04:80:04:90:24:49:9f:
b8:6f:a5:8d:79:f3:5c:47:e8:26:f8:60:45:0a:dd:
7a:eb:49:26:9c:a7:36:10:b6:d5:ea:94:2d:0a:03:
17:b3:f8:a2:5d:dd:d6:c3:23:92:34:78:9b:62:34:
61:a1:e3:54:01:46:97:34:31:f0:7d:41:a9:fa:ca:
89:fa:5d:ea:ed:b4:b8:5a:f7:9e:41:ee:69:db:01:
38:0e:82:02:ae:4e:e6:09:a0:38:eb:43:d7:d3:8f:
fe:c3:51:b0:31:d3:29:dc:c0:2a:15:6d:ad:9d:0c:
c0:0d:8d:36:f8:85:a5:c9:5f:2b:1d:1f:28:47:ff:
09:3f:e9:9a:2b:4a:9c:86:89:e8:24:03:0f:1d:c8:
74:1c:98:e3:81:0e:70:e7:81:3b:02:4e:80:cd:d0:
b3:06:88:a4:ea:01:2e:cd:63:ac:c1:f0:fa:2a:cb:
18:90:1b:b0:98:b2:b1:94:a1:66:38:d9:9f:ec:66:
f1:3b:8d:16:c0:a5:0f:3a:06:ab:97:8e:e0:65:1e:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CF:47:0E:A3:1C:3E:E3:3A:18:27:8B:BF:3E:1F:EF:72:8B:DA:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72722AE6094611F0A41A1567762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:f0:78:3a:84:37:f8:23:fb:da:12:57:67:8e:03:d4:1d:a2:
e3:32:3b:e9:e1:97:b3:26:6f:9d:90:17:d7:48:12:ae:93:f4:
32:04:7a:0b:74:34:df:13:4b:f7:48:25:95:5b:a1:e3:1b:bf:
8e:19:a8:ac:5f:1e:c7:57:5c:2f:0b:3c:ff:97:a6:36:bc:49:
80:8f:dd:88:41:f2:62:f2:f4:ea:83:d8:5a:67:04:71:1d:f8:
e2:ed:5a:d7:fe:9b:36:70:ce:4e:fc:6e:90:ee:57:1a:91:ba:
d5:03:4e:2e:11:bd:4e:1e:91:00:fd:b5:ef:e0:34:5a:eb:0b:
30:6a:4e:42:97:4f:16:12:d1:42:57:c7:f7:53:da:1a:ad:a7:
f6:a5:6d:67:da:1a:99:da:4d:76:a0:eb:2e:01:87:19:7d:2c:
e3:cb:be:2c:1f:dc:c4:17:77:84:46:9d:a2:ed:03:cb:7c:e5:
ec:75:e2:ec:65:ba:d4:c3:dc:ab:fd:d9:ce:94:66:78:51:f2:
f7:07:3e:81:8f:45:6c:bb:42:b3:74:01:3d:75:27:df:ae:c4:
6b:dc:3b:22:c6:32:0a:1a:28:1b:08:4d:54:09:84:13:2e:59:
69:dc:9f:2f:32:78:23:43:23:a6:9e:d9:d7:53:55:2d:a5:88:
60:99:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:58 2025 by rpki-client