Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85CB7676F46311EFB8A574BE762E951A.roa
File: 85CB7676F46311EFB8A574BE762E951A.roa (raw, json)
Hash identifier: mtHMzwG+JScsSNX4oP+UeSZ2343Iiknw0Pgmj1BER/g=
Subject key identifier: FF:E8:0D:8F:02:CB:5F:81:08:D6:4B:D1:A2:D5:70:3D:6F:70:D0:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016538
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85CB7676F46311EFB8A574BE762E951A.roa
Signing time: Wed 26 Feb 2025 17:02:56 +0000
ROA not before: Wed 26 Feb 2025 17:02:52 +0000
ROA not after: Sat 19 Feb 2028 17:02:52 +0000
asID: 17561
IP address blocks: 154.197.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91448 (0x16538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:02:52 2025 GMT
Not After : Feb 19 17:02:52 2028 GMT
Subject: CN=67bf493f-ceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:04:86:85:20:3d:0d:b5:be:41:4f:b7:dd:
cf:a6:12:ba:1e:b9:52:a2:04:0e:5c:a3:8c:6c:ef:
8b:e7:fb:e9:85:6f:f9:b8:91:f9:35:96:d7:79:45:
92:1d:5e:76:e2:10:3e:a6:d4:11:0e:5a:2a:4c:48:
67:13:84:2f:13:3f:db:07:1a:68:95:cb:8b:25:45:
b0:3b:93:4c:b8:96:17:a2:a2:e6:03:78:c5:6a:31:
f1:5a:d9:51:08:56:fa:9e:71:45:f3:5a:08:15:49:
11:9c:3d:d6:ef:4a:f3:e3:6c:f9:ea:74:e4:2f:c4:
28:c5:42:f4:98:28:9e:31:04:e9:dc:1d:69:96:d4:
bd:da:62:5a:77:86:58:ee:a0:a2:1f:1e:96:96:fa:
5e:a7:8f:97:dd:ae:da:cc:a9:c5:d6:22:3b:47:66:
07:a7:da:71:5b:d0:1f:35:79:cd:94:ae:21:cf:47:
fd:0a:bd:ed:7a:ad:6e:68:63:e6:b1:46:c6:d6:df:
d8:6b:30:10:27:d4:a6:7c:98:1b:ea:ed:f7:2a:d5:
ec:c9:4a:3d:54:71:37:51:b2:13:15:76:67:eb:31:
31:21:80:e5:d9:d2:a1:80:06:ad:bb:80:af:6e:90:
e6:69:8d:8e:cc:83:03:2e:00:bc:ce:97:07:93:c3:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:0D:8F:02:CB:5F:81:08:D6:4B:D1:A2:D5:70:3D:6F:70:D0:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85CB7676F46311EFB8A574BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.68.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e8:52:62:06:86:a6:78:e8:9e:dd:77:92:4a:51:2d:3c:dd:
96:be:d5:18:be:98:7f:cd:bc:55:a9:75:5a:05:16:75:50:5c:
ee:21:d8:ef:be:ba:fd:34:28:f8:bb:43:8c:ee:33:75:62:d2:
e5:a6:38:a9:43:56:04:33:2d:6c:4c:4f:ae:55:2a:26:62:d1:
05:c2:ec:db:60:63:1a:f9:72:63:45:4f:cf:b6:76:c9:e8:3c:
93:9c:c0:e0:8d:2b:bb:87:50:a7:a9:a5:af:69:1b:bb:61:db:
f6:be:fb:73:46:78:e9:f1:a2:d8:6b:c2:ea:c6:d7:6c:24:ef:
62:68:6c:21:d5:1f:91:aa:e6:42:54:5b:ec:db:ea:af:9b:b7:
a2:a7:ac:cc:ec:8c:ac:91:7a:be:cd:4f:42:7c:9d:94:8e:39:
4b:e5:d0:39:14:43:98:5c:a4:bc:17:d8:5b:fa:c6:bc:3d:2f:
22:d6:d9:49:29:26:63:6f:08:f8:0a:d9:b8:3b:51:8b:93:4d:
21:89:13:5c:38:9c:56:55:20:f2:fd:0b:07:17:08:41:ad:cb:
3c:07:25:68:e6:75:77:5c:bf:a4:a1:b6:ff:ab:52:9b:a0:19:
77:f7:ab:92:ef:35:c0:88:2a:6d:0d:78:1c:a7:2b:9b:b4:9b:
7e:ef:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:49 2025 by rpki-client