Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91827284023811F0A9608ABC762E951A.roa
File: 91827284023811F0A9608ABC762E951A.roa (raw, json)
Hash identifier: 56SJ4VwSgiEMCkkfgJcpOrYjiWM2ZMcwkhPIQxz28Ys=
Subject key identifier: 8C:3C:45:04:93:7A:FB:67:B0:7C:8D:B1:2E:BD:85:DF:D6:80:D0:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017476
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91827284023811F0A9608ABC762E951A.roa
Signing time: Sun 16 Mar 2025 07:30:43 +0000
ROA not before: Sun 16 Mar 2025 07:30:39 +0000
ROA not after: Wed 25 Mar 2026 07:30:39 +0000
asID: 139339
IP address blocks: 154.197.46.0/24 maxlen: 24
154.197.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95350 (0x17476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 16 07:30:39 2025 GMT
Not After : Mar 25 07:30:39 2026 GMT
Subject: CN=67d67e23-7212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:10:03:d1:05:c8:d6:85:cf:85:ba:78:fd:
ea:45:8c:46:37:40:b6:9c:82:4c:ad:d5:9f:d8:d3:
a2:a5:3a:06:db:f3:b7:c7:ff:95:06:0b:48:8d:4c:
71:e2:89:58:b8:ed:af:9d:bb:10:42:86:e7:fd:05:
ec:06:5d:3f:61:cf:20:6b:c6:5c:29:ff:56:20:ab:
71:2d:47:13:04:a1:1f:74:a8:89:c3:af:eb:15:7b:
5b:cd:57:0a:a9:e5:c5:cf:76:75:65:2b:cc:68:86:
6b:ae:11:16:c1:6a:db:be:6c:79:48:51:95:2b:d1:
77:a6:c0:a5:a7:11:4d:24:2a:01:11:66:fb:72:0e:
6f:fb:73:f6:02:b5:3f:63:b8:68:33:2f:69:e9:d8:
54:d4:fb:d7:7b:59:11:e6:95:4f:c0:f0:1a:1a:31:
e4:ca:df:fc:14:d5:31:3a:22:67:50:40:ba:c0:52:
48:e9:1e:82:bb:59:61:a7:a2:00:60:d8:7d:fb:ce:
a1:4b:b0:04:67:d5:eb:2c:b7:fe:a5:bf:52:10:32:
8d:ec:57:79:e9:c2:ad:c3:9b:25:fb:bc:12:c8:d8:
cc:05:7e:64:4e:87:c9:0b:40:5a:e6:2a:c3:99:4b:
69:85:b2:17:86:d3:8c:18:5f:ff:37:1d:6b:17:30:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3C:45:04:93:7A:FB:67:B0:7C:8D:B1:2E:BD:85:DF:D6:80:D0:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91827284023811F0A9608ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.46.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:69:bc:83:ab:29:23:9c:c4:10:f7:53:2a:53:df:4c:bd:5a:
f3:ef:fd:40:de:36:d7:7c:4f:01:04:7d:99:1f:da:c0:54:9a:
af:63:d8:eb:6c:42:5e:40:db:fb:b0:43:e1:71:8e:fa:20:42:
11:b5:4e:27:f0:d5:a8:18:f9:30:9e:5d:e5:6f:db:e6:94:ad:
e2:62:c4:9d:91:ae:7c:12:19:0b:01:27:b0:41:af:2d:53:65:
16:95:a7:7a:ea:ae:09:63:3b:80:5d:87:96:4f:da:5e:ad:67:
04:5f:ce:b0:ea:69:99:b3:a8:39:a6:9b:9b:a2:54:9b:4f:3f:
a5:1b:5c:c3:df:90:30:a0:af:53:5c:b0:02:bb:cd:fe:40:45:
9e:d4:aa:37:6d:16:a8:64:3a:72:e5:95:8b:47:b4:42:c8:f5:
4f:dd:70:3b:89:2a:7e:20:bb:d5:8d:99:e1:56:da:54:f8:9f:
83:bb:be:c9:41:2c:b6:1c:d8:32:ac:f0:f9:21:3f:70:9e:3f:
6a:51:c5:ad:9c:11:7d:c6:ee:0b:d8:77:14:73:1c:d4:10:78:
ab:6b:60:a9:dd:8d:22:b7:12:42:86:73:79:e1:21:d9:bb:10:
bd:16:39:23:eb:7b:39:2d:1b:bf:67:c3:d4:a5:76:4b:53:71:
0c:11:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:14:52 2025 by rpki-client