Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9869D5D8F81F11EFA557154B762E951A.roa
File: 9869D5D8F81F11EFA557154B762E951A.roa (raw, json)
Hash identifier: dvpBVenQqzA1NEQmYs0x54vFrRiMEsC5+e8MG+fiOY8=
Subject key identifier: E3:FA:9A:86:3B:27:07:12:F9:90:8F:E7:33:82:22:49:45:03:18:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017055
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9869D5D8F81F11EFA557154B762E951A.roa
Signing time: Mon 03 Mar 2025 11:06:46 +0000
ROA not before: Mon 03 Mar 2025 11:06:41 +0000
ROA not after: Wed 30 Apr 2025 11:06:41 +0000
asID: 63139
IP address blocks: 154.93.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94293 (0x17055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 11:06:41 2025 GMT
Not After : Apr 30 11:06:41 2025 GMT
Subject: CN=67c58d46-b7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:98:5a:cc:e5:62:56:c3:bc:e1:0a:41:ea:87:
f8:f7:61:15:3a:9b:28:bd:99:cf:34:41:54:3d:06:
cc:54:19:a1:09:00:12:d4:77:7b:a9:52:31:10:3e:
5a:4d:ee:96:73:e7:21:39:b1:06:0d:48:fc:52:ca:
d5:c2:ea:fb:6d:dd:3d:d0:72:39:9d:83:58:ba:6f:
a3:45:19:bb:2c:93:f8:76:f4:aa:23:0f:12:d7:9b:
a0:20:2b:66:07:c0:8c:2b:ed:2d:c9:84:3e:f9:51:
b6:c6:d3:66:38:5d:f6:9c:e6:c8:d7:cb:05:9a:7e:
64:2a:9a:85:81:66:aa:f4:6a:05:76:3d:21:b9:96:
9c:d2:20:a3:76:d5:5c:e5:14:05:42:f2:90:26:66:
40:37:c9:60:71:03:d0:a0:43:78:fd:61:cb:a5:e2:
7e:fa:60:2d:0c:60:3b:ce:c5:18:30:d8:b7:e5:23:
22:c2:68:78:42:d6:43:95:40:b5:0b:7e:f7:7d:11:
a9:e8:2d:33:5a:39:4d:73:90:98:3c:8b:d9:bb:5f:
0b:78:d0:0b:70:b1:5a:3a:02:59:77:49:4a:b5:57:
06:5c:dc:98:4d:13:e6:04:18:cc:56:27:9e:f5:68:
64:df:4e:dc:13:15:9e:2e:27:67:8d:b7:0e:cd:1a:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:9A:86:3B:27:07:12:F9:90:8F:E7:33:82:22:49:45:03:18:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9869D5D8F81F11EFA557154B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:63:fb:dc:af:81:0b:02:cc:4a:0a:79:72:cf:4c:e8:49:0f:
9e:5a:df:6c:68:88:6b:52:9e:53:13:fe:2b:93:12:8b:75:57:
d9:cd:d6:f9:a9:2d:f2:89:48:e3:10:7c:dc:de:66:ca:0e:59:
80:20:60:f3:69:fe:aa:8e:dd:d3:ac:f3:ba:ad:59:e9:53:12:
f5:c6:f0:0c:7a:fa:e9:e1:0d:b1:46:cf:51:44:73:55:5f:bb:
0a:e1:b4:92:bb:5b:a3:65:9d:8f:48:80:63:71:04:02:9e:93:
d1:87:3b:53:10:3c:7b:da:99:69:2b:74:7f:58:25:03:33:6b:
6e:2e:5d:36:41:1a:8d:e1:6c:77:58:c7:d3:89:43:b1:61:81:
de:7d:fc:33:37:6d:90:73:5d:7a:e4:a5:c6:af:e4:7b:4d:0f:
a1:dd:c8:68:b7:00:a6:6a:74:60:0b:04:da:d2:9c:f8:4b:35:
ee:ae:d6:dc:a2:97:85:98:92:fb:17:ef:a6:58:0a:41:ac:46:
f2:c3:16:b2:89:a2:28:8e:91:19:a8:d1:73:31:33:89:e4:36:
0c:75:26:15:43:ad:aa:db:b5:3b:e1:43:ab:67:aa:17:90:52:
f1:11:f5:6a:cf:42:42:33:b1:e9:56:36:b5:2d:1b:80:21:4b:
99:6a:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:23:59 2025 by rpki-client