Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91FAFF62F47611EFA4A6F242762E951A.roa
File: 91FAFF62F47611EFA4A6F242762E951A.roa (raw, json)
Hash identifier: Nu0Riv9WdfeWHaYHvEv8yUmuaOkqw9DQpgx0P8aOE9o=
Subject key identifier: 4E:97:17:FD:B7:1B:DB:40:C7:18:0C:04:F9:34:08:4F:47:18:EB:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01658D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91FAFF62F47611EFA4A6F242762E951A.roa
Signing time: Wed 26 Feb 2025 19:19:16 +0000
ROA not before: Wed 26 Feb 2025 19:19:13 +0000
ROA not after: Sat 19 Feb 2028 19:19:13 +0000
asID: 17561
IP address blocks: 154.218.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91533 (0x1658d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:19:13 2025 GMT
Not After : Feb 19 19:19:13 2028 GMT
Subject: CN=67bf6934-a3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:cf:b9:ce:73:d0:81:fc:6a:cc:0c:6c:b0:
f6:91:2b:58:e5:cd:df:92:7b:2b:44:c1:83:52:ab:
4d:c0:11:d6:e4:08:f7:c6:ad:5e:c9:7e:9f:3b:02:
d3:b6:2d:c6:ec:8b:65:7c:e4:2b:3d:ba:79:8b:0b:
9e:c8:4e:bf:ba:cb:c3:7b:c6:f5:8a:59:8a:a3:e5:
76:2b:8c:08:aa:e6:56:3a:7a:26:53:b4:c3:94:a3:
67:38:a0:7c:db:d5:2e:01:cd:09:bc:a7:55:91:7f:
b9:f0:69:0a:95:fb:83:23:52:a4:cf:d7:4a:27:32:
13:f7:92:1d:d8:be:49:e5:a3:a8:e2:da:f8:6c:fc:
e4:c0:f8:3b:9c:d0:e6:0c:d1:62:b6:95:53:dd:ff:
48:d8:eb:af:48:9d:91:79:2a:39:06:2b:73:07:08:
e8:e9:73:4c:d7:c0:9d:ae:5c:a4:fc:88:96:de:0a:
4f:e5:7c:95:3d:22:cc:b1:80:fe:4a:0e:62:6b:cc:
0e:d5:4d:ca:71:02:84:4b:8c:a8:79:4f:cf:44:60:
11:90:17:14:95:45:37:f0:8f:7b:62:e0:e9:1a:f6:
b5:7c:02:42:86:39:b0:fb:12:15:3c:99:b9:aa:61:
13:bb:48:21:0a:d6:cd:97:ac:bd:0c:b0:0a:04:7a:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:97:17:FD:B7:1B:DB:40:C7:18:0C:04:F9:34:08:4F:47:18:EB:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91FAFF62F47611EFA4A6F242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.41.0/24
Signature Algorithm: sha256WithRSAEncryption
81:69:f7:7e:3f:f8:01:bb:f9:9b:30:3e:d9:05:49:b3:04:44:
45:79:59:14:7d:45:9f:36:9e:4c:8c:4d:fc:1c:9d:79:b7:f2:
35:73:18:61:a9:4f:8a:16:25:6e:1f:c4:ba:af:98:56:c4:c6:
99:3e:97:ce:c9:d0:69:05:cd:c6:7b:0e:96:08:70:30:23:b9:
ba:5d:d7:34:e8:80:30:4b:f0:6d:0e:76:0b:30:d3:11:d8:7b:
4b:73:60:c4:b7:d4:98:fb:16:11:69:e5:35:00:ea:cf:b8:f7:
66:68:81:60:09:b9:db:11:5f:51:3a:a9:1d:cf:b5:61:ae:e8:
47:85:bc:2a:14:53:a9:ff:49:97:52:95:74:45:09:2b:f5:63:
7b:79:73:2d:66:1f:72:f4:8b:e9:f5:20:16:04:b3:94:5d:1e:
c7:99:82:3e:a6:2e:cf:b5:7a:78:da:39:6d:fc:5c:63:cb:eb:
43:ad:a0:98:27:99:31:7a:3f:ac:4e:7b:35:33:32:93:f4:0b:
ea:df:c3:42:07:bc:f2:56:7f:64:6b:71:92:f1:ba:37:89:ed:
30:a7:37:18:60:58:f1:1e:57:0c:f1:bb:52:a4:71:a0:b6:d3:
36:a6:7a:cd:8a:d7:ba:94:81:d6:d4:16:f9:fb:ef:cc:41:71:
47:39:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:06 2025 by rpki-client