Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A412C20F81211EFA3A6AC72762E951A.roa
File: 8A412C20F81211EFA3A6AC72762E951A.roa (raw, json)
Hash identifier: lPB1EHPh9MEK4qWaUxgIUCQ1PMZeFjBRzggl7N81P/U=
Subject key identifier: 54:3F:D3:43:DD:95:9B:DD:06:F5:91:89:42:97:11:0F:06:99:C4:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A412C20F81211EFA3A6AC72762E951A.roa
Signing time: Mon 03 Mar 2025 09:33:19 +0000
ROA not before: Mon 03 Mar 2025 09:33:15 +0000
ROA not after: Wed 30 Apr 2025 09:33:15 +0000
asID: 63139
IP address blocks: 154.94.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94143 (0x16fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:33:15 2025 GMT
Not After : Apr 30 09:33:15 2025 GMT
Subject: CN=67c5775e-affa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:bc:45:49:3b:a5:9a:99:1b:e9:b3:82:bf:
9c:03:74:e7:c9:21:94:6d:91:61:af:07:74:ce:ad:
10:b5:da:d2:61:51:4a:9c:23:21:01:94:78:95:f5:
ef:f5:87:16:d8:dd:1c:d0:7b:17:31:b0:d7:ec:f2:
61:2f:24:94:fe:d1:5c:6b:fe:f6:0d:9e:a7:f2:6e:
8f:4b:fa:59:a2:3d:40:d1:22:52:5a:f0:d8:99:f5:
99:cd:2e:93:ff:3a:10:62:28:29:ae:32:93:73:f9:
6a:c7:49:51:c8:1a:13:de:46:fc:12:9c:f4:f1:55:
c1:4e:15:e8:71:bb:86:9e:37:b7:6b:41:34:23:55:
03:17:35:b5:1f:5b:ab:44:b8:06:46:92:1c:e1:a0:
ec:46:1a:f8:5c:59:80:54:63:f2:c3:2f:39:87:51:
e5:6f:81:72:a0:0e:67:13:72:6f:05:cb:e5:77:be:
66:a2:6f:59:3f:7f:a5:1d:c9:ce:4f:94:db:02:66:
a5:92:4a:f8:8a:9f:58:7d:0c:5c:49:ad:e2:1e:95:
c2:92:1b:ff:76:0e:c7:18:b3:55:3a:cf:d6:9a:3e:
10:9f:dd:20:23:dd:42:1e:cb:77:b8:b2:4b:a4:16:
57:b6:03:6a:ae:95:37:4d:80:14:be:6d:b6:b6:d1:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3F:D3:43:DD:95:9B:DD:06:F5:91:89:42:97:11:0F:06:99:C4:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A412C20F81211EFA3A6AC72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:43:f5:17:36:a0:aa:6b:22:19:c9:29:42:b7:1c:ef:55:81:
c2:98:d6:55:55:6a:76:21:96:14:eb:29:42:f0:9c:18:c4:52:
ad:8a:5c:01:9d:9c:87:f9:46:0d:26:83:11:cb:78:f3:fc:4d:
50:ea:8e:fd:db:33:05:81:76:61:ba:ab:d3:7b:f2:66:e4:c7:
ca:6d:5d:7b:f4:48:18:44:32:ac:13:ff:1c:09:7d:f9:26:21:
63:67:ac:44:a6:14:4b:43:a8:32:86:db:96:cf:f4:d9:b5:b1:
3f:50:1e:7b:8e:82:a2:c6:31:b5:31:fa:05:e0:bc:f6:48:e4:
0f:e7:cf:b8:ff:61:1d:7a:23:ef:d6:32:62:b4:73:87:c1:fb:
ed:4d:0c:48:1a:60:04:47:f2:1f:26:52:3f:58:37:9f:69:af:
16:e2:c5:84:0c:c8:fa:d8:0d:ac:39:f0:24:e1:5f:76:4c:87:
b4:3f:c2:1b:69:b8:19:07:21:2f:27:31:ec:5f:de:70:cc:f1:
dd:f2:29:64:a4:e9:99:5c:3f:7b:ae:b4:fa:25:a7:b1:0c:7d:
5d:bb:7c:0f:b3:3b:09:60:b0:c2:2c:95:06:3f:f2:58:81:b6:
73:c7:bc:31:80:e7:3e:a5:8a:fc:06:e5:50:9e:29:0d:99:a8:
c5:dd:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:29 2025 by rpki-client