Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D8C0110F67F11EF9D746145762E951A.roa
File: 7D8C0110F67F11EF9D746145762E951A.roa (raw, json)
Hash identifier: 6sarvDnIfGisYXLm8bJsW+cJVJzFB7Lb+/LQ/lYo8x4=
Subject key identifier: 43:C4:5E:67:0C:E0:CA:5F:A5:37:AB:05:9A:A6:86:C6:71:90:64:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D8C0110F67F11EF9D746145762E951A.roa
Signing time: Sat 01 Mar 2025 09:28:10 +0000
ROA not before: Sat 01 Mar 2025 09:28:06 +0000
ROA not after: Mon 31 Mar 2025 09:28:06 +0000
asID: 48031
IP address blocks: 154.222.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93590 (0x16d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 09:28:06 2025 GMT
Not After : Mar 31 09:28:06 2025 GMT
Subject: CN=67c2d32a-da77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:4c:a8:45:65:1a:7d:46:6d:1d:38:02:a6:
e8:04:2d:9d:8f:a8:b9:30:e2:a7:4b:d2:89:ca:f2:
56:b2:21:ca:d2:f4:6c:d2:90:18:3c:7e:61:83:11:
21:db:ed:cb:82:90:e2:f8:ca:b2:c6:cb:03:22:53:
e3:f6:39:14:70:15:78:d6:cd:81:64:c8:c3:44:cf:
26:62:81:97:fe:dd:18:40:61:b3:18:0f:a0:00:92:
81:f2:d8:f1:ef:fb:22:3b:49:e0:cd:70:dc:76:68:
ab:a3:e6:0d:73:4e:ee:e1:71:a9:c1:71:be:47:ad:
a0:e9:c2:2b:32:56:e3:38:eb:61:77:d8:37:d0:17:
28:aa:5f:bd:bb:33:c7:8a:48:14:44:0e:20:8d:4c:
f5:c5:87:8f:78:24:ed:a7:0e:69:da:b0:0e:99:5f:
af:e2:2e:8c:37:f7:fc:5b:a3:36:f5:78:c9:04:b6:
8b:9c:6b:95:3d:37:2e:55:9f:9a:01:6e:07:b5:4f:
ab:0d:fa:1e:64:62:82:d5:43:df:cd:4b:dd:88:52:
f9:d1:e8:2f:36:f6:16:56:95:92:c8:92:a8:e9:3d:
90:75:73:60:03:94:9b:96:55:9b:bf:51:fc:43:74:
23:e8:99:7c:b1:e1:e7:5f:02:cc:42:7c:08:8d:2d:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:5E:67:0C:E0:CA:5F:A5:37:AB:05:9A:A6:86:C6:71:90:64:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D8C0110F67F11EF9D746145762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5b:be:0d:8e:5f:49:97:1f:0c:a4:27:dd:cc:7a:9d:36:34:
3f:a9:8d:fd:bc:b8:26:1e:4b:d8:24:7a:ac:d0:6c:07:12:f3:
9d:10:34:d4:9c:4d:85:bb:98:91:f5:9a:fd:46:82:88:77:5e:
62:13:8d:6a:1b:33:7e:65:c6:3e:ed:c0:96:36:35:a8:37:d0:
6c:95:96:2a:a3:4f:cf:7a:91:ed:18:9c:ee:e6:43:a5:84:59:
e2:44:2c:a8:ca:3b:58:f5:6a:a4:e5:9a:78:e0:f7:71:7b:b4:
b1:40:7d:c6:30:f0:ca:e0:76:df:ef:0b:1b:61:e4:4b:07:3c:
45:75:18:ea:e3:03:08:85:df:a6:9c:3c:88:c2:e5:8e:ac:b5:
bd:35:5e:57:59:48:67:bc:d4:40:03:a6:ad:d5:30:bc:1f:f3:
d7:8c:2c:0a:ea:96:c7:dc:57:35:c8:bc:26:f8:be:dd:82:dc:
bf:ca:cf:21:50:6c:2c:ad:0e:3a:dd:33:36:41:ef:7d:e4:16:
e5:c4:ff:25:22:24:ea:75:08:9a:22:a7:ee:cd:7a:bd:73:14:
91:10:5f:20:9b:2c:b4:3c:6c:18:87:fa:be:cc:75:18:2c:e5:
7e:89:80:78:a3:ce:f0:cb:c0:f2:b0:78:77:52:79:22:b3:6e:
d2:9e:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:10:18 2025 by rpki-client