Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88D408A6F67A11EFB8CDDCA1762E951A.roa
File: 88D408A6F67A11EFB8CDDCA1762E951A.roa (raw, json)
Hash identifier: X7vv2X2uqoA3+AO9VEXYksCcBcNuDllbAx3S8HA6p8I=
Subject key identifier: 17:DC:D3:3C:29:46:33:DC:15:7F:49:68:A8:95:35:E3:6D:EA:50:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88D408A6F67A11EFB8CDDCA1762E951A.roa
Signing time: Sat 01 Mar 2025 08:52:41 +0000
ROA not before: Sat 01 Mar 2025 08:52:38 +0000
ROA not after: Mon 31 Mar 2025 08:52:38 +0000
asID: 49505
IP address blocks: 154.211.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93551 (0x16d6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 08:52:38 2025 GMT
Not After : Mar 31 08:52:38 2025 GMT
Subject: CN=67c2cad9-0783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:f1:c6:80:99:55:f8:09:b0:b4:ca:07:1c:
cf:51:24:b1:e7:12:ba:2d:c0:e8:d2:45:f1:ab:43:
cd:a3:8a:16:63:9e:25:37:06:72:88:df:8b:79:4e:
3f:34:db:ef:73:b4:3a:b7:ea:ec:18:23:98:49:fb:
5e:62:4f:09:5b:af:a6:52:fa:28:c9:3e:c6:fb:8b:
9a:70:83:54:ec:31:37:09:0e:ce:ad:4f:07:7c:2b:
c3:f1:a5:aa:b6:fb:66:93:bc:28:e4:9c:86:3d:19:
60:40:13:8f:1b:cb:b6:2b:d5:8f:c6:26:2f:38:a3:
cb:c0:36:39:98:28:a7:6b:26:62:99:5b:b3:4f:06:
fc:76:d2:80:90:b9:af:28:27:24:ee:79:2f:bd:f4:
b6:0b:45:14:83:00:b6:1a:75:77:57:b5:54:da:2d:
c5:f2:91:b8:2b:1d:02:14:47:11:6b:0a:b0:44:f4:
2d:39:8a:e4:f5:8e:85:31:1a:aa:23:88:65:3c:3e:
c7:60:fc:9d:38:cd:da:65:35:38:11:39:1f:fe:a1:
2f:f2:bd:66:68:04:f8:bb:60:25:75:0c:21:6d:51:
30:53:1b:cb:c2:dc:d9:67:23:c0:a9:ce:cc:6d:09:
7b:64:60:ac:32:e4:02:62:ad:89:17:f8:81:17:50:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DC:D3:3C:29:46:33:DC:15:7F:49:68:A8:95:35:E3:6D:EA:50:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88D408A6F67A11EFB8CDDCA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.18.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:96:2b:65:b5:80:51:3d:f5:e0:ca:6f:4f:d6:6f:30:b1:4f:
db:ab:58:12:20:e6:48:6e:e9:c3:0c:b1:d9:4b:3a:f5:09:4c:
29:c7:10:99:13:d1:3b:05:c1:37:1e:c2:80:eb:54:f0:b7:36:
75:14:f4:3e:94:c9:ff:6a:b5:fd:0c:e1:03:19:6b:b2:9f:81:
9e:43:11:c9:9b:af:4a:00:25:d0:05:2d:19:f3:e9:b5:f9:4c:
45:37:39:d2:5d:78:85:66:4e:fa:06:21:48:f2:1b:d6:37:84:
9c:5b:54:94:e7:77:28:02:5c:07:91:f7:b4:b6:e2:52:24:de:
fb:24:d6:02:19:1c:09:44:05:4d:bd:cd:b2:97:6a:56:30:c7:
a6:30:c3:13:c0:86:54:e9:fc:87:a6:5a:76:1f:71:cf:19:7c:
97:07:a6:74:0a:de:f0:a3:32:c0:39:26:27:fb:f3:85:af:1b:
b5:fb:34:21:8f:d1:25:9a:d6:d8:11:79:ad:0e:bc:8b:29:43:
14:2b:dc:52:8d:e6:cf:1c:1b:67:2a:3d:ab:f5:c4:54:79:73:
cb:5d:ce:ee:29:33:c6:05:df:f2:31:db:44:b5:5f:61:da:e4:
27:e8:0f:68:fd:2f:2f:78:ca:01:e1:a3:42:27:a4:34:1b:50:
00:86:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:57:18 2025 by rpki-client