Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86657370F2E211EF893A6B6B762E951A.roa
File: 86657370F2E211EF893A6B6B762E951A.roa (raw, json)
Hash identifier: p4N4g2u3eq83PLE4zODZXtgscI4Ebcs6ghqIQBkc8tY=
Subject key identifier: 2E:89:1A:76:0D:8C:A0:69:63:C2:40:C5:05:CA:97:12:4C:5A:25:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86657370F2E211EF893A6B6B762E951A.roa
Signing time: Mon 24 Feb 2025 19:07:00 +0000
ROA not before: Mon 24 Feb 2025 19:06:57 +0000
ROA not after: Mon 07 Apr 2025 19:06:57 +0000
asID: 138915
IP address blocks: 154.223.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89300 (0x15cd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 19:06:57 2025 GMT
Not After : Apr 7 19:06:57 2025 GMT
Subject: CN=67bcc354-600e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:bd:e2:4c:54:d2:8a:7e:5b:68:1c:38:f9:
ab:fc:a3:f2:ea:72:05:66:3a:a6:f2:8e:24:06:05:
ac:7f:47:c8:1c:70:e5:0b:07:5c:4a:26:3c:07:02:
99:0d:f1:76:af:b2:13:36:cd:6e:c4:dd:83:2e:96:
ad:73:35:27:10:bd:cd:16:e3:0a:3f:25:eb:a7:09:
e1:fc:7c:4f:6a:3a:1b:24:f3:15:79:80:c8:e0:3e:
95:4f:4b:99:2d:b8:a4:65:d7:60:99:bf:b7:92:94:
13:28:29:26:1f:49:6f:d5:ea:89:b5:fc:bf:1b:39:
18:22:db:d3:a2:37:54:7e:c7:64:09:b8:81:b8:0c:
b9:45:9c:3d:16:00:ba:09:b8:11:b6:8d:81:05:2e:
3f:1e:fa:a6:e9:28:bd:0a:3c:1c:d0:a8:b9:c4:b9:
90:c3:7b:4b:28:90:9c:4b:e6:d4:5e:b2:2e:03:c5:
db:fc:9f:ea:db:6d:c5:61:dd:9b:a1:0b:f3:a7:3c:
fc:22:c2:8a:70:93:92:7b:45:72:9b:31:65:e8:80:
4b:b2:f4:56:48:e4:c5:43:53:6d:2f:ce:b9:58:f0:
d3:76:ad:db:17:b1:89:9a:b6:a6:fe:3b:7e:0f:4a:
ec:14:0c:c4:6b:a2:df:67:fd:6a:12:cb:93:03:08:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:1A:76:0D:8C:A0:69:63:C2:40:C5:05:CA:97:12:4C:5A:25:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86657370F2E211EF893A6B6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:53:eb:fb:bf:5c:a1:6c:4b:de:d3:94:9e:61:55:6c:e6:b3:
c7:0a:8f:83:08:67:a9:38:4d:70:cc:c6:d2:8e:9a:ed:75:40:
9d:3b:be:01:5e:ee:c6:89:8c:be:a5:be:5d:8c:6f:2e:16:d3:
ce:21:f6:97:ed:99:aa:c3:86:9c:5d:52:73:4f:9a:c1:ca:79:
b6:60:5f:4d:41:d7:03:1d:1a:0c:a4:9a:55:31:89:dc:e0:31:
66:c4:66:96:32:2a:95:fc:3f:83:b0:3b:2a:77:16:42:a6:39:
8d:1f:2f:b6:cc:7f:56:8b:91:16:55:98:ca:f1:f5:10:96:77:
fe:84:78:1f:d3:70:fc:d4:df:b3:59:0d:40:fe:4c:74:2c:6c:
d3:b1:b9:8c:05:08:ae:e6:11:28:6a:7e:ce:e4:df:85:e1:c5:
01:ca:bf:5f:e2:31:4e:b2:1b:d3:82:d0:c4:12:d4:b2:ca:76:
4e:5d:9c:0d:a7:0e:2a:2b:da:fd:59:bb:c1:b4:fb:34:1b:bf:
4d:ca:c2:ac:b4:ab:55:95:f6:51:a5:5a:25:2f:ee:0c:f4:2b:
bc:06:24:7a:11:1c:7e:be:15:7f:b3:e0:72:86:ae:0a:ae:cd:
0c:7b:64:4f:91:28:1c:b1:92:94:89:fb:19:fc:ab:73:80:e6:
9f:38:1d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:48 2025 by rpki-client