Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9B6326F5CB11EFBA17B86F762E951A.roa
File: 8C9B6326F5CB11EFBA17B86F762E951A.roa (raw, json)
Hash identifier: VZjE065P2EQFhyBq3WmVNmcyKdRYY04VqvwvHRbwyG8=
Subject key identifier: 5C:99:17:94:49:50:69:FF:2B:E5:FD:00:C3:71:98:61:B3:54:10:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9B6326F5CB11EFBA17B86F762E951A.roa
Signing time: Fri 28 Feb 2025 12:00:06 +0000
ROA not before: Fri 28 Feb 2025 12:00:01 +0000
ROA not after: Fri 11 Apr 2025 12:00:01 +0000
asID: 138915
IP address blocks: 154.203.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92940 (0x16b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:00:01 2025 GMT
Not After : Apr 11 12:00:01 2025 GMT
Subject: CN=67c1a546-8f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:27:1e:22:60:d0:0b:3f:b9:68:85:c2:7e:
f5:46:fe:94:41:98:39:bb:2d:c4:f5:1d:a9:4b:ba:
4d:4f:9a:9d:fd:84:bb:95:6e:47:c5:3e:8d:3e:74:
d4:b2:65:f4:85:1f:4d:bb:f5:ed:25:c9:b1:9d:57:
4e:5b:fd:01:f3:27:58:a1:5c:c6:9f:b1:50:87:f8:
3a:0b:0d:21:f1:82:3f:e8:ac:bb:88:c8:96:f8:8b:
4f:a0:b6:3d:9f:a7:82:f3:eb:a7:6c:47:ac:05:67:
54:e6:ff:3f:35:58:fd:c1:df:9f:c8:6e:cc:14:47:
d2:3e:a4:4f:3e:f6:0b:15:66:fe:16:ad:96:e1:1c:
1c:68:76:18:a3:94:c7:6f:17:1f:e1:7e:6d:b8:c8:
3c:3c:36:10:51:d6:3f:eb:55:20:37:41:af:45:57:
e4:ec:49:78:a8:27:03:4e:6b:21:88:bd:65:15:e7:
09:27:d7:52:ec:65:20:00:1b:8e:01:49:81:78:aa:
48:8a:20:08:ee:a5:c3:b0:dd:5f:95:92:1f:39:db:
84:b0:0e:d2:01:74:ab:b8:f8:d5:f7:00:6f:75:0e:
be:92:3f:6b:d7:9e:31:bf:be:15:42:82:56:04:a2:
e7:36:de:81:80:87:cf:f3:1a:c9:d6:47:67:b3:13:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:99:17:94:49:50:69:FF:2B:E5:FD:00:C3:71:98:61:B3:54:10:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9B6326F5CB11EFBA17B86F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:32:6c:24:b5:d4:bb:94:20:2e:9d:09:55:08:28:48:0b:74:
80:21:f8:86:31:4f:ae:5b:de:2e:a8:bc:00:f8:27:53:73:dd:
ab:1d:ae:74:66:e0:0e:db:1d:f9:a2:84:a1:c2:04:fb:4f:d8:
28:75:f0:cc:31:24:86:a9:c5:f4:3e:66:24:d7:d9:54:20:1c:
63:d0:e3:31:d2:f4:f6:1b:50:2f:79:ac:d7:59:6e:2d:40:28:
c1:30:cf:dc:c4:d0:5d:cb:e7:ef:f7:ec:25:64:14:fb:19:64:
55:8a:b0:ab:07:8d:a7:f6:0e:61:c6:61:f7:06:f8:5e:3d:5c:
0e:3c:6c:ad:d5:ce:33:2c:3e:c5:71:b8:fc:30:a7:db:b6:c3:
1f:cc:48:59:e4:a8:98:ba:5c:07:b7:1a:64:af:f0:2f:91:84:
50:34:9d:84:49:83:92:49:be:ab:9a:78:ef:13:b2:60:a9:56:
45:0e:03:f1:87:59:c9:10:50:6a:8a:1e:08:31:08:ba:16:1b:
fd:4b:a4:b1:f5:1f:eb:87:ef:7c:3a:cf:dd:1f:d9:2d:b6:0b:
52:f1:e3:17:37:68:d2:7b:19:9b:77:2e:9d:f0:91:e2:30:01:
66:94:5d:ae:60:75:7e:1d:96:68:6f:cc:4f:66:0b:f0:2c:58:
d2:a4:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:52 2025 by rpki-client