Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E23924F45611EF9A124D64762E951A.roa
File: 92E23924F45611EF9A124D64762E951A.roa (raw, json)
Hash identifier: EsdiVG/1NnmCokLoTrEy9RrQE+DMsS4ipQr47go9cyI=
Subject key identifier: 63:ED:CC:0D:F4:29:9C:16:75:69:00:A5:42:95:51:75:20:3D:85:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E23924F45611EF9A124D64762E951A.roa
Signing time: Wed 26 Feb 2025 15:30:14 +0000
ROA not before: Wed 26 Feb 2025 15:30:10 +0000
ROA not after: Sat 19 Feb 2028 15:30:10 +0000
asID: 17561
IP address blocks: 154.82.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91349 (0x164d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:30:10 2025 GMT
Not After : Feb 19 15:30:10 2028 GMT
Subject: CN=67bf3386-d980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:2f:83:12:6c:ac:59:0e:95:ad:98:37:c8:
48:19:be:96:87:20:95:73:c6:1d:17:f6:56:81:aa:
eb:4d:57:ff:b9:96:0e:22:60:b3:6c:29:34:8f:e4:
68:64:8f:4a:b4:ce:16:6d:e6:75:3a:86:7a:81:39:
b8:63:af:22:72:d9:e5:53:32:c0:a5:ec:65:19:85:
96:22:16:2d:7e:76:12:8c:68:14:ce:8d:aa:22:74:
7a:e8:6d:b4:6d:bf:6d:77:89:d5:aa:71:f8:ed:a8:
72:d7:aa:4a:d0:cb:f1:fa:60:b4:2e:6f:04:3a:40:
32:70:6b:2d:0d:3c:f0:24:d1:69:1b:26:af:02:66:
5f:35:f5:40:0a:c9:e5:cc:39:f4:64:ec:0e:c1:15:
d1:ec:e6:63:dc:af:c8:d8:ab:7d:95:33:b0:7e:c8:
44:3f:84:f6:e7:97:f2:d8:a3:d4:c3:80:c7:54:6c:
2e:64:ed:e3:6a:4a:c4:61:bd:af:30:72:46:f0:88:
2a:0a:16:b9:14:64:ea:5c:a7:bf:af:01:ce:01:8f:
71:3f:f3:d7:f5:dc:79:a4:1f:99:c9:4f:c3:f7:80:
ce:9d:7f:6a:76:1b:dc:95:95:c9:a0:51:46:21:9e:
e7:5e:0c:80:5f:40:1d:3f:a7:51:85:64:14:de:6e:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:ED:CC:0D:F4:29:9C:16:75:69:00:A5:42:95:51:75:20:3D:85:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E23924F45611EF9A124D64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5f:5e:7c:42:d0:d0:36:80:d8:bc:a8:b4:14:25:ff:86:a4:
8c:2a:e1:23:fa:e1:11:90:13:e3:4b:fc:a0:da:1a:f7:37:2d:
6d:32:f1:3f:7a:d3:4d:88:50:92:f6:67:34:29:57:c1:4b:a6:
3b:c4:82:e1:39:a8:41:22:41:71:94:e3:20:c1:42:5b:65:64:
b6:c0:61:8f:68:84:b7:7d:aa:50:26:e4:5b:6f:4a:62:70:de:
de:0c:df:a9:3a:69:d7:9e:08:fa:42:07:a3:1b:73:80:1e:07:
41:5b:b1:a9:68:17:00:23:70:bf:1c:0d:ad:c7:d4:72:60:e5:
52:3a:ac:80:f3:35:f3:3b:10:50:3d:2c:d4:fb:5c:f5:75:24:
36:f4:f0:0f:17:11:51:d5:70:94:a3:a2:bf:f7:c2:92:9b:c0:
00:fb:bc:ff:c5:a5:80:42:ba:5c:77:50:a7:91:50:c3:05:c1:
e5:f4:99:6d:8b:20:a0:6b:53:35:2a:6d:06:22:d5:54:88:13:
bd:7f:61:b0:61:83:9e:31:c3:59:34:6f:7c:47:f7:5b:93:37:
89:78:d1:1b:50:bd:15:29:58:b5:e3:33:9f:8c:b0:30:2e:bb:
98:a1:69:cb:f5:c8:76:33:5b:c0:55:a5:ff:8e:4f:bc:d1:09:
3b:c4:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:45 2025 by rpki-client