Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C1FF7CF5C811EF9799B95C762E951A.roa
File: 99C1FF7CF5C811EF9799B95C762E951A.roa (raw, json)
Hash identifier: E9EeqpUihvRjPD6H7kSiUNDtdsrHSBTG8P2KxTItQ7A=
Subject key identifier: FD:75:D5:14:96:58:7A:AD:A0:8E:70:52:B1:C0:5E:68:89:F3:CE:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C1FF7CF5C811EF9799B95C762E951A.roa
Signing time: Fri 28 Feb 2025 11:38:59 +0000
ROA not before: Fri 28 Feb 2025 11:38:51 +0000
ROA not after: Fri 11 Apr 2025 11:38:51 +0000
asID: 138915
IP address blocks: 154.203.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92922 (0x16afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:38:51 2025 GMT
Not After : Apr 11 11:38:51 2025 GMT
Subject: CN=67c1a053-6ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:08:bc:a0:61:ce:13:e3:60:42:f0:f1:6f:
bf:a5:4c:25:6e:53:67:e5:3a:f4:83:0f:74:32:80:
d7:16:71:bc:3e:27:ea:63:5e:f6:8c:43:92:7a:e4:
90:82:b0:cd:b9:bc:b8:94:54:85:53:89:c0:ff:8c:
0d:b5:ea:c6:49:3c:7d:3a:bc:c7:e1:f5:46:06:c1:
3c:7c:3b:d0:cc:c0:c5:23:e4:9d:ee:0b:ed:fb:c2:
4c:14:7a:e7:4d:bb:a3:b8:32:f6:3f:c4:d2:1c:12:
d2:35:9f:1a:34:3d:e3:f7:7e:8a:17:e0:3f:6f:25:
38:06:71:47:c6:d6:4e:26:be:de:4d:3a:71:5c:75:
7b:6e:84:36:79:70:3d:b1:cd:93:48:00:3d:a2:28:
ca:76:c4:46:2d:a4:50:5c:2a:28:b0:21:bc:71:6f:
1a:c0:c7:ab:8e:f2:28:db:1f:9e:1f:00:1f:20:f6:
e6:09:08:86:07:d1:d5:69:3a:a4:ef:a1:1c:11:17:
e5:fa:37:fc:f8:91:60:78:b3:14:4a:a7:55:99:98:
d4:c9:2e:eb:1e:b0:bc:c8:5d:a1:81:0c:99:80:8d:
39:9f:76:c3:13:18:e5:76:38:9b:da:b4:ae:8c:76:
14:e0:18:03:c7:c0:80:89:77:a3:5f:c6:9c:1f:36:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:75:D5:14:96:58:7A:AD:A0:8E:70:52:B1:C0:5E:68:89:F3:CE:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C1FF7CF5C811EF9799B95C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:29:bf:26:07:ad:c8:b6:de:fe:e8:cb:de:67:b2:ae:8c:c3:
20:51:18:97:8e:4f:43:35:37:b4:03:c9:f9:62:a4:74:fd:ac:
80:c5:b5:9c:8f:ea:9f:a7:97:fb:4f:e7:06:60:45:d8:c9:7b:
79:12:b4:b1:5f:b1:12:5a:bc:2f:00:02:b8:ee:39:a0:1f:c7:
54:e7:d0:29:fc:79:a9:e3:b7:d5:36:72:97:91:6e:62:c7:59:
63:d4:3c:ea:a6:8b:be:00:ee:e1:51:83:71:ac:32:28:13:c4:
be:f2:3f:71:20:a0:2f:e7:d2:6f:e2:f7:91:3a:ae:3e:07:1b:
fe:ae:30:9c:63:a3:a7:4d:d8:1c:4e:29:58:bc:14:08:9e:2d:
30:de:8d:52:6b:17:a6:f3:f1:dd:6e:f4:02:d9:4e:a0:7d:c8:
62:4a:1a:59:24:82:ef:8e:39:f4:88:3b:da:29:2d:18:bf:ed:
b8:ec:a9:c5:e9:e2:32:7f:0d:ff:6f:06:12:4c:3a:09:45:77:
5e:90:7b:1e:ba:1d:ba:db:8a:73:2e:73:79:37:74:dc:bf:65:
f7:2d:bc:74:8f:4f:05:02:24:f6:f5:88:72:e2:93:31:68:e7:
5d:e3:39:27:74:25:b5:1f:50:4f:47:a2:b2:68:18:2d:07:44:
63:3b:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:20:12 2025 by rpki-client