Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72B8B9D40A1811F0ADB8A16A762E951A.roa
File: 72B8B9D40A1811F0ADB8A16A762E951A.roa (raw, json)
Hash identifier: 3kHK5q4DlKd3+pUrJWca1H8X9D5rej8tre4OahVJggg=
Subject key identifier: 7E:87:17:43:8E:21:40:6D:39:9C:4F:83:70:FE:F9:33:69:13:5E:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01765F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72B8B9D40A1811F0ADB8A16A762E951A.roa
Signing time: Wed 26 Mar 2025 08:00:57 +0000
ROA not before: Wed 26 Mar 2025 08:00:53 +0000
ROA not after: Tue 03 Jun 2025 08:00:53 +0000
asID: 138915
IP address blocks: 154.93.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95839 (0x1765f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 08:00:53 2025 GMT
Not After : Jun 3 08:00:53 2025 GMT
Subject: CN=67e3b439-98be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:f7:b1:a2:46:12:a8:26:b3:6b:ed:fa:4b:
a5:93:50:10:df:e8:a9:14:cf:b6:f1:54:e2:11:ca:
a7:f6:d8:45:8a:40:1b:2a:a2:f7:31:4f:50:bd:38:
f4:1c:be:ac:80:15:be:9b:65:40:a5:72:18:73:b4:
e2:d1:ec:80:59:96:a6:8e:59:e8:6b:15:c9:79:cc:
13:8a:c3:85:20:69:6a:04:a1:1b:2d:1d:36:44:57:
fd:2e:80:b2:b2:f7:3e:4f:b0:6d:13:04:66:17:48:
2f:9a:f0:c0:1e:7f:de:55:13:0a:0e:a5:03:b4:2f:
9f:55:13:3f:ef:1f:48:1d:e1:81:97:73:23:8a:69:
57:3b:4e:d5:e3:28:58:92:fd:20:ea:6c:95:16:52:
ae:9c:fa:e5:ae:26:ad:c4:40:11:f6:e8:6b:5d:13:
46:93:26:c6:eb:1d:17:c3:b8:e9:f0:3c:db:9e:86:
3a:1d:de:56:62:09:64:fa:0e:c0:f2:8a:fb:9d:b3:
58:80:cd:48:b6:76:43:19:49:e4:d0:d8:f4:49:d4:
03:c9:5e:83:d2:75:f5:f6:98:e2:a0:1c:23:07:1c:
0c:4b:14:dc:d9:0d:31:1e:27:ad:55:30:37:3e:46:
76:b7:89:fc:f2:e0:46:a3:63:3f:1b:2a:0c:75:2c:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:17:43:8E:21:40:6D:39:9C:4F:83:70:FE:F9:33:69:13:5E:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72B8B9D40A1811F0ADB8A16A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.86.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a3:b6:b1:63:15:1c:41:63:91:1d:86:bb:5b:32:bc:19:a7:
00:f4:b9:35:b9:e9:81:89:58:45:53:96:04:fc:b3:d0:84:7f:
f1:06:d6:2c:64:57:26:20:e6:c5:56:bb:52:d2:62:59:ce:91:
4a:3e:36:92:a7:73:da:69:97:fb:9c:bb:66:77:e1:f8:b0:d7:
0f:7f:83:3e:13:26:e4:a2:7a:03:64:df:b8:0d:d7:5e:2d:ae:
4e:aa:30:39:77:f3:aa:3a:e8:bd:30:58:51:7a:69:14:07:9b:
ca:2e:2a:04:ac:86:c8:cf:61:7c:61:98:91:dd:2f:6b:c1:f8:
72:a6:f5:5e:cf:c5:39:5c:41:28:a5:45:b0:c3:c1:da:5c:5b:
d5:20:86:fb:ff:6f:03:68:aa:f9:23:fd:b9:ba:5a:97:56:aa:
f0:c9:9f:ab:cf:e7:ea:8c:df:d4:da:db:42:be:40:6b:91:44:
e7:d6:f7:4b:f0:61:43:dd:da:58:1f:fc:03:10:37:da:7d:e1:
d2:f6:d4:30:2e:32:33:f3:3c:c0:9e:05:2e:f5:79:de:db:d7:
a3:0d:df:6d:28:46:39:9b:46:ad:82:9d:67:bb:6e:39:e2:29:
ec:0e:15:a3:6b:5a:1c:34:59:6f:b3:bd:56:3b:40:af:da:22:
f0:4d:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:45 2025 by rpki-client