Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E52A504F61A11EF92FB5285762E951A.roa
File: 8E52A504F61A11EF92FB5285762E951A.roa (raw, json)
Hash identifier: YBhTOQqH0hupKmJ8VPawQg9bAhRBwNpOn2WgHojZDy8=
Subject key identifier: 10:D5:2F:71:BA:32:18:4E:F7:22:25:6D:76:5E:A2:CA:7F:2A:1E:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E52A504F61A11EF92FB5285762E951A.roa
Signing time: Fri 28 Feb 2025 21:25:39 +0000
ROA not before: Fri 28 Feb 2025 21:25:35 +0000
ROA not after: Sun 13 Apr 2025 21:25:35 +0000
asID: 138915
IP address blocks: 154.206.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93247 (0x16c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:25:35 2025 GMT
Not After : Apr 13 21:25:35 2025 GMT
Subject: CN=67c229d3-b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:c9:a6:b7:40:f8:07:bb:4c:3c:5c:5f:17:
50:e6:3b:0a:2d:d1:fc:9d:e0:10:14:1a:83:ae:c5:
81:29:e4:60:5b:db:69:98:94:b9:41:2b:32:a6:15:
d7:f6:f2:da:2e:1e:77:52:d8:ac:7c:ae:73:73:ab:
a3:34:b6:26:6c:23:51:2f:26:42:b3:17:8f:72:d2:
d1:09:b5:e3:a8:20:3d:06:b6:b0:6f:b0:d5:a9:11:
d3:82:85:27:72:00:9e:8d:63:2b:11:28:ea:f2:5c:
9b:dc:45:e7:b3:ae:d9:b0:e3:f1:08:3a:68:4c:e9:
c8:2d:b8:a5:b5:c2:7c:af:e5:d8:93:5b:11:55:35:
7a:42:f5:a6:e3:75:6b:25:15:f6:86:46:bb:17:9f:
ed:9c:2c:78:50:f8:74:84:53:dd:91:9d:4e:ef:4d:
ca:5c:08:51:4e:ac:59:24:cb:68:1b:d2:cc:5d:73:
a7:82:39:14:fb:4b:32:b2:c7:fb:5c:85:57:43:12:
52:85:a2:8d:50:10:39:8f:14:18:ae:e0:27:24:6c:
a1:4b:87:32:a2:0d:02:de:25:b5:aa:10:17:40:ae:
d8:b9:b4:88:31:c5:dc:39:ca:8d:3a:0f:4e:4c:1b:
19:6b:de:96:e1:05:18:94:fc:da:53:17:a7:f3:61:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D5:2F:71:BA:32:18:4E:F7:22:25:6D:76:5E:A2:CA:7F:2A:1E:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E52A504F61A11EF92FB5285762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
24:33:33:6a:f4:f5:fd:78:15:0d:e1:05:67:0e:df:42:ed:d5:
ea:90:e9:ea:a9:c5:01:cd:c6:5c:ef:4b:6d:40:02:a6:64:d5:
5d:6c:a3:ed:df:e2:bf:8f:5b:c8:ac:b0:c4:0e:ed:14:c5:f3:
aa:82:bd:10:6d:4a:86:01:36:81:7d:f0:36:56:0a:4d:3f:24:
de:b6:2d:99:91:48:93:22:e5:79:7d:a5:1d:ba:89:43:e6:ec:
39:09:40:96:4a:0c:e8:ec:72:17:60:68:b3:b8:9c:c9:87:4c:
e7:a7:5d:43:c3:6c:f1:0a:5c:03:84:57:ef:a7:7f:4e:ae:a9:
61:70:c8:d2:72:93:e3:1f:2e:0e:2b:aa:17:33:12:c8:06:07:
08:c7:85:9c:56:0d:e5:9e:45:3f:18:46:b3:11:8b:04:25:4d:
4e:7b:3e:d3:87:18:05:b7:a7:35:b7:41:76:9b:ed:6d:f8:35:
e7:68:16:b2:bd:3e:0a:81:6e:c1:c1:08:0b:b0:43:14:5f:7c:
88:e8:cb:e5:bd:c5:fd:45:ce:33:64:0e:62:53:48:c3:b4:53:
86:35:4d:3e:cb:d1:74:8a:70:5c:47:dd:b2:02:68:ba:8d:86:
b7:0d:09:84:4e:b5:5e:48:f7:d0:4f:5a:d0:41:aa:6b:86:7a:
d5:41:c7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:25:09 2025 by rpki-client