Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88DCC872F35711EF9810508D762E951A.roa
File: 88DCC872F35711EF9810508D762E951A.roa (raw, json)
Hash identifier: 56TBu0qyz8K9OQWwUnhzCB46jbxUPHP/XZHjeOOtB0g=
Subject key identifier: 39:FB:4E:92:65:44:C1:ED:00:24:B3:48:A8:D9:D5:96:E6:A6:8C:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88DCC872F35711EF9810508D762E951A.roa
Signing time: Tue 25 Feb 2025 09:04:36 +0000
ROA not before: Tue 25 Feb 2025 09:04:32 +0000
ROA not after: Mon 07 Apr 2025 09:04:32 +0000
asID: 138915
IP address blocks: 154.223.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89562 (0x15dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:04:32 2025 GMT
Not After : Apr 7 09:04:32 2025 GMT
Subject: CN=67bd87a4-c54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:be:f3:00:03:a0:98:72:f9:1e:c7:d3:65:61:
35:42:5c:f5:76:e6:3e:1a:92:3e:42:69:8c:bb:66:
ae:18:9b:b3:07:99:3a:b0:38:7f:5b:f9:a1:4f:78:
b0:28:86:6a:66:ec:8f:6c:1a:75:11:50:a0:c5:f4:
3c:63:6d:6d:3a:c0:3f:5f:09:9d:64:09:19:35:9c:
a9:66:ee:41:be:ab:81:8a:05:a4:69:3d:bf:3b:d8:
a4:51:36:4c:76:79:31:04:5d:71:06:38:17:a8:42:
2b:07:50:8e:a8:4f:a9:ed:c8:e9:b0:26:74:29:af:
41:fd:dc:cb:0f:ce:fc:09:7b:04:5b:0d:ca:42:a9:
2b:35:8e:06:ac:71:bf:f7:31:d5:3d:9e:2e:dc:1a:
36:d7:c2:84:1a:28:3d:0a:fb:bd:36:72:61:ff:d8:
ca:c3:06:f3:68:44:ad:b6:80:bb:e9:18:6c:ed:2c:
12:71:d8:86:8a:5e:61:35:a5:d6:94:91:ab:0f:f6:
8f:42:ba:d2:69:46:74:6a:d3:a0:fa:f8:0a:04:bc:
7a:b3:ee:7b:ad:73:ea:d1:6a:02:8d:52:00:0f:17:
36:8d:fa:14:3a:71:02:bf:c6:2e:96:e4:33:42:78:
a0:f5:3f:8b:00:7d:8d:46:f6:87:69:5f:11:74:d1:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:4E:92:65:44:C1:ED:00:24:B3:48:A8:D9:D5:96:E6:A6:8C:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88DCC872F35711EF9810508D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.20.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:8a:dc:ac:a4:37:93:c6:b4:a2:53:8d:cf:ab:cd:02:19:7e:
1e:70:bb:7f:a7:0f:b8:db:d3:32:8b:bf:c1:b7:42:0a:7d:d7:
37:61:12:e7:27:49:20:a1:83:d4:fb:1b:9c:de:04:dd:5a:d2:
ca:5e:1c:4a:d7:c6:d4:0c:54:83:92:c9:66:00:19:97:60:d7:
88:68:45:1f:06:65:25:a3:0c:d3:05:0c:c7:04:cd:f7:c5:e5:
7d:75:18:48:2d:2f:d9:b8:99:e6:96:75:a8:22:42:95:5c:ae:
2e:ba:d8:21:1f:55:7c:25:4c:74:27:79:ca:85:a3:f0:73:dc:
fd:91:3a:88:53:7a:50:4d:87:9c:86:b6:8d:bf:d9:bc:10:9a:
8c:40:f0:8a:82:17:3e:4a:84:25:70:fe:bd:ee:42:63:f7:47:
29:5e:90:4e:6f:d4:c8:8a:3e:20:e1:2f:73:ed:4c:58:fa:4f:
2c:ce:8a:4d:6f:0e:8f:5f:f6:90:bc:88:9c:62:5c:f5:36:4e:
4a:4a:47:87:ca:8d:62:9e:4e:4e:f9:d0:1c:16:90:9d:a3:9b:
aa:38:b2:b3:aa:8a:c4:e3:69:17:5d:7a:d6:da:e2:71:73:87:
ed:a3:ff:9e:63:49:3f:c6:69:e8:01:42:57:eb:4e:76:41:83:
31:4e:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:02 2025 by rpki-client