Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80D0D3C8F5D011EF861CFD90762E951A.roa
File: 80D0D3C8F5D011EF861CFD90762E951A.roa (raw, json)
Hash identifier: SkqsuO7mZBUJ6jOpJkicfnRYA70oi7Id6E3goLetkO4=
Subject key identifier: 5A:8E:10:60:73:D3:CC:5C:4F:19:3E:DB:72:E6:69:68:BA:0E:58:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80D0D3C8F5D011EF861CFD90762E951A.roa
Signing time: Fri 28 Feb 2025 12:35:34 +0000
ROA not before: Fri 28 Feb 2025 12:35:30 +0000
ROA not after: Fri 11 Apr 2025 12:35:30 +0000
asID: 138915
IP address blocks: 154.203.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92972 (0x16b2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:35:30 2025 GMT
Not After : Apr 11 12:35:30 2025 GMT
Subject: CN=67c1ad95-b471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:4c:d6:91:68:d5:22:2d:e0:c1:0c:4a:30:
67:1f:20:25:a4:5d:7e:db:cf:8e:33:d9:ba:e6:f9:
d3:a4:01:64:39:96:ed:2e:a0:69:13:a1:79:d3:0e:
fd:ed:31:18:67:a5:b9:61:dd:11:53:33:97:06:49:
33:91:e5:12:e2:ea:63:e5:21:56:8a:1b:9c:2f:4f:
39:12:36:6c:99:43:c0:51:fc:84:0e:13:09:17:00:
84:d2:54:ec:e3:1e:59:b6:ff:04:af:d2:65:49:97:
50:f2:b4:27:a4:ba:c6:7a:6f:81:dc:8e:05:ef:08:
fc:83:38:73:d1:89:da:c3:ff:73:15:71:48:e7:b2:
60:3d:a1:4f:c0:e1:ba:59:ad:36:f0:e4:99:a0:4e:
f2:52:6d:46:b6:c0:bf:b7:ba:00:d0:96:1d:55:26:
d3:04:9b:7b:8d:9c:3b:96:75:61:a1:7b:22:ea:20:
b6:4e:d2:2c:e8:c3:ba:cf:0e:a7:a9:98:fb:a5:a1:
8d:23:9e:08:cb:62:0f:3f:32:5d:94:a4:48:81:ea:
1d:22:a7:28:3d:88:4b:4e:c0:76:5d:6e:71:0b:66:
0d:72:35:ab:f7:3c:41:55:89:80:6c:96:84:c9:83:
1c:da:82:39:a4:6e:f5:37:3b:be:92:de:86:fd:83:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:10:60:73:D3:CC:5C:4F:19:3E:DB:72:E6:69:68:BA:0E:58:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80D0D3C8F5D011EF861CFD90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b3:9f:a5:2a:4b:1e:87:63:fc:59:47:20:99:e9:a1:85:15:
1c:56:50:18:4c:8f:d6:c6:5a:6a:87:25:19:df:8a:1e:19:38:
cd:97:23:22:12:0f:bc:a9:1c:23:7c:b9:a8:2b:70:a9:bf:51:
00:26:5c:ab:fa:71:ef:64:8f:3d:35:32:4d:5f:89:e4:fd:fc:
98:19:52:64:d8:d9:ab:b4:b1:99:38:84:da:4d:97:e6:f9:1a:
2d:c2:18:f4:71:a4:61:05:3c:38:0a:35:08:c1:b7:58:96:3c:
73:b1:0b:ee:a2:e3:63:5f:7d:e0:c0:48:23:10:fa:c7:fd:a2:
5e:bd:83:22:ac:fe:47:b3:e3:4e:e5:2f:2f:f6:6d:66:0f:e9:
30:a9:b0:f6:cc:f1:2b:0b:85:e9:fb:db:a3:59:95:eb:61:62:
2c:6a:4a:37:07:dc:0f:4e:7e:e9:39:a6:6d:4c:01:6e:5b:45:
5c:79:7c:07:9d:3c:11:5c:1d:46:50:5c:0c:34:95:32:f7:06:
b4:79:a8:80:a7:b2:cd:14:5d:8f:18:fb:ae:ba:84:78:42:26:
a1:87:d9:29:aa:c3:52:c8:4f:8a:64:79:29:55:e7:1d:f2:d0:
58:54:58:c3:61:ae:c5:d5:06:f6:5f:94:e7:7d:7e:f8:14:d8:
3c:ae:88:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:26 2025 by rpki-client