Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95E8CB6CF53F11EFB35410AC762E951A.roa
File: 95E8CB6CF53F11EFB35410AC762E951A.roa (raw, json)
Hash identifier: 828T6qeLC0FSgxe2zfmczx2IMBXgGIt5jlxsjKvkyJc=
Subject key identifier: A6:3D:92:79:B8:83:00:D8:1D:61:BB:28:1A:B8:FA:61:8D:EB:6D:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016996
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95E8CB6CF53F11EFB35410AC762E951A.roa
Signing time: Thu 27 Feb 2025 19:18:12 +0000
ROA not before: Thu 27 Feb 2025 19:18:08 +0000
ROA not after: Fri 11 Apr 2025 19:18:08 +0000
asID: 63139
IP address blocks: 154.203.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92566 (0x16996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 19:18:08 2025 GMT
Not After : Apr 11 19:18:08 2025 GMT
Subject: CN=67c0ba74-4e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:b0:0f:0a:cf:76:6d:e3:5d:98:c9:74:5a:
d4:4a:b3:33:73:0e:0c:14:f7:84:ac:6c:17:96:64:
a9:95:95:cf:e3:52:21:dc:35:1b:d6:cc:29:fe:e7:
fe:c7:7c:04:63:71:5e:6a:e4:07:82:0c:b2:56:61:
20:71:3d:bf:c6:e7:74:5e:1a:c5:02:9f:5c:2d:d8:
8a:94:ec:f7:16:61:44:70:89:ca:a7:91:ed:4c:54:
6b:52:55:1f:c7:af:a6:fa:e3:2d:7e:f7:31:bb:5b:
02:35:74:7d:82:80:45:df:88:94:2b:8f:e9:46:fd:
dc:71:d4:ce:ef:74:2f:ea:d4:b2:09:30:22:00:0f:
1a:34:53:f5:36:6a:62:d9:f6:ff:e4:1d:e1:46:a2:
23:95:46:3c:df:9c:ee:ad:da:79:db:06:fe:57:7f:
3e:2f:97:44:38:3f:c8:15:81:cb:f1:b1:67:24:8d:
62:5e:ce:de:36:cf:c8:83:c4:1d:5b:57:49:c9:6a:
71:04:70:f4:8b:23:4e:4f:a0:bb:9c:c3:ba:ac:d4:
3d:18:97:ca:8c:b7:52:36:d8:5a:01:0e:5b:e9:6b:
3c:3e:c1:8b:7b:eb:2f:5f:b9:2a:4d:b8:b5:3a:b5:
2c:07:0d:d4:f4:cb:5a:04:46:48:9b:3b:2a:4c:29:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:92:79:B8:83:00:D8:1D:61:BB:28:1A:B8:FA:61:8D:EB:6D:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95E8CB6CF53F11EFB35410AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.186.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:1f:d9:0e:38:c9:53:f4:14:00:0d:4b:28:90:69:e6:c7:10:
e4:94:03:b6:2d:85:00:18:a7:d4:5b:2c:28:60:32:cf:22:37:
7c:9e:a1:ca:5f:1a:fe:c2:5f:c8:a4:ad:b3:b7:45:76:ce:36:
e6:92:46:f0:c7:85:4f:e7:47:d1:3a:cd:de:32:e7:5a:10:48:
73:95:ee:7c:87:e8:e4:2b:e4:45:48:96:ef:36:f3:ab:97:79:
d8:2b:71:d2:8a:6b:20:4b:af:04:46:8b:ca:e1:a9:25:67:ae:
93:d8:1c:3d:5e:cf:21:83:20:0c:8d:86:f6:dd:cf:72:df:15:
65:35:bb:2c:0c:60:91:c4:2b:3d:94:63:d6:05:35:42:e4:53:
e6:d5:39:2c:5e:03:28:1a:ba:9c:96:13:41:9c:35:bb:73:f1:
e9:8d:0f:2f:18:c5:55:34:8e:b5:d7:e8:6d:b8:53:1b:be:ef:
1b:ee:27:54:74:86:5b:bb:2e:b9:87:47:8c:00:93:ee:cf:ae:
e3:67:1a:d7:0f:b0:0f:e1:c8:6c:55:d6:33:70:9e:34:54:4d:
7f:2c:57:1e:aa:5a:be:40:60:58:62:95:e9:d6:49:1e:e9:91:
67:dd:b6:10:8f:8f:38:e5:f7:43:be:ea:3e:ac:3c:f0:c5:40:
eb:bb:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:54:53 2025 by rpki-client