Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8332C584F42E11EFA209694B762E951A.roa
File: 8332C584F42E11EFA209694B762E951A.roa (raw, json)
Hash identifier: OAB/N/YMU+fbdS7OZVSAk0YrNNh0rlpPndSaeRlVRmA=
Subject key identifier: E4:F5:0C:44:F3:B2:D3:F4:32:17:BA:10:A3:92:6F:25:8E:9E:1E:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016246
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8332C584F42E11EFA209694B762E951A.roa
Signing time: Wed 26 Feb 2025 10:43:28 +0000
ROA not before: Wed 26 Feb 2025 10:43:24 +0000
ROA not after: Sun 20 Feb 2028 10:43:24 +0000
asID: 17561
IP address blocks: 154.84.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90694 (0x16246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:43:24 2025 GMT
Not After : Feb 20 10:43:24 2028 GMT
Subject: CN=67bef050-bf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:df:9f:f7:97:80:ea:b6:ba:07:c7:bb:8c:
f2:06:23:ba:0a:67:1b:68:be:d1:24:4c:0a:e8:c4:
49:a2:2a:e8:e3:a1:99:48:13:63:6c:fd:ad:47:cd:
5b:5a:a5:65:b4:8f:59:33:0d:c0:c6:4d:2a:c9:a1:
b2:25:c0:8a:3a:24:3c:79:ae:3d:98:0e:88:e4:98:
88:74:b3:2b:d7:4e:40:b7:cf:57:c7:0f:f7:c6:a8:
07:bf:74:12:14:8e:78:d7:6b:3f:cb:c2:27:93:21:
be:ed:3a:c5:b1:33:ec:55:42:75:c3:f7:5d:1b:42:
78:b7:09:30:2b:5b:5f:f5:d3:44:5d:72:4f:01:d0:
5e:cd:71:aa:30:73:9e:05:e5:ec:0d:93:ed:b5:8c:
7e:80:38:20:f3:8e:70:69:58:69:95:f0:ad:86:3a:
51:92:c7:ec:44:6a:65:59:d3:ce:c5:92:36:4d:3e:
3d:15:c4:2d:98:8d:bc:6b:09:32:43:59:a8:35:b4:
43:7f:e2:26:a4:06:8e:88:b1:03:71:5f:5a:28:5e:
9f:2d:54:78:66:2f:35:8d:e9:4a:83:06:85:ad:aa:
7f:53:89:9e:59:9a:bd:c3:f6:0a:85:03:90:7d:47:
ba:ba:f8:e6:68:a5:c9:09:e2:86:52:17:ba:b3:96:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F5:0C:44:F3:B2:D3:F4:32:17:BA:10:A3:92:6F:25:8E:9E:1E:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8332C584F42E11EFA209694B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.0.0/24
Signature Algorithm: sha256WithRSAEncryption
17:85:ad:02:3a:65:ac:1b:36:10:f1:6a:05:f2:39:e6:33:cf:
27:ae:5a:5a:9a:2c:b5:ff:e8:2c:f4:27:e4:27:29:ec:0a:a2:
c0:eb:93:81:24:7f:f6:72:06:aa:78:cc:d6:67:36:56:9a:63:
66:38:20:3d:b0:ad:d0:fe:b1:ac:70:20:10:7e:9e:89:87:83:
99:12:ee:3b:52:dc:86:da:60:90:58:57:ba:84:c2:d2:1f:f3:
70:8c:da:c3:8d:1d:4b:5f:f4:cc:11:81:a2:ad:ee:cb:47:81:
2d:de:91:a9:86:e9:1a:20:d0:a1:a3:09:f9:c7:39:4e:76:16:
67:1d:23:63:ce:10:37:65:99:18:b6:dd:da:bf:d4:f0:36:67:
7f:d0:85:6b:79:21:6a:30:e9:46:bb:33:08:d5:e9:90:a9:f8:
42:00:f4:89:c5:0e:70:f6:12:fe:26:fe:d8:6b:22:9f:47:f9:
8b:6b:6e:c1:80:b0:85:f2:6a:b1:f2:dd:68:f4:9b:c0:7c:db:
fd:fe:3f:bd:00:76:a6:11:19:0b:d4:43:e2:84:a5:c5:5b:67:
d8:b0:f7:eb:5b:3b:2e:b4:2b:a5:b8:48:90:2b:a1:ec:f9:2d:
e9:56:1d:7f:ca:1b:40:fd:7b:69:03:c6:52:dc:0f:9f:9e:6c:
3e:b8:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:32 2025 by rpki-client