Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D450D42F5C311EF8EFD5BBA762E951A.roa
File: 9D450D42F5C311EF8EFD5BBA762E951A.roa (raw, json)
Hash identifier: HXxwAVqNxlCoN3updkT8395Lp5M1FPBhU+v3JpS9jI0=
Subject key identifier: 6C:69:DC:11:B6:24:F5:E8:5B:7F:1A:D0:8F:3C:17:EC:51:6E:B7:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D450D42F5C311EF8EFD5BBA762E951A.roa
Signing time: Fri 28 Feb 2025 11:03:18 +0000
ROA not before: Fri 28 Feb 2025 11:03:14 +0000
ROA not after: Fri 11 Apr 2025 11:03:14 +0000
asID: 63139
IP address blocks: 154.203.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92871 (0x16ac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:03:14 2025 GMT
Not After : Apr 11 11:03:14 2025 GMT
Subject: CN=67c197f6-53ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:d1:ef:25:64:e0:3e:87:b7:b7:69:3c:3b:
17:8d:4f:30:11:e4:5f:32:b6:ae:31:6a:f7:0b:f4:
50:32:2a:87:b1:cc:9b:1a:96:cb:52:c5:e4:1a:a4:
58:07:1f:86:07:3a:40:74:9c:86:01:a1:3a:15:9e:
1d:41:94:57:97:5b:cc:ad:8d:3d:64:ea:06:b0:14:
12:f0:c7:e0:6a:6f:fb:86:02:9f:e4:c1:3a:03:02:
5e:78:36:fa:3a:d7:11:e7:8f:2d:20:8d:81:d8:ef:
87:b6:a6:3f:c4:84:2b:46:a4:df:52:69:98:d1:d3:
90:84:ed:da:42:87:3f:db:d3:07:7a:3a:af:2d:0e:
6c:bf:d3:48:a8:40:d4:6b:c0:84:4f:7a:0f:cb:7d:
38:bd:ac:80:bc:86:dc:bc:35:9d:86:6e:93:49:d0:
76:db:31:0d:dc:2c:83:17:4a:37:2f:a4:81:63:4f:
46:4a:df:c8:15:e9:46:ad:3d:a3:6a:1e:7a:29:d8:
9d:a3:17:39:ec:f9:b4:26:6b:d1:45:75:e3:95:c4:
9d:ee:84:8f:1f:86:e9:58:46:c3:47:6e:e5:72:3b:
ff:27:82:e1:c8:d8:3a:74:d5:6f:c9:c5:9f:7b:db:
13:e8:1e:5b:cf:2a:d3:20:40:9e:bc:03:35:5f:81:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:DC:11:B6:24:F5:E8:5B:7F:1A:D0:8F:3C:17:EC:51:6E:B7:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D450D42F5C311EF8EFD5BBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d8:53:99:05:84:d6:62:a9:9f:88:f1:2a:1a:46:f6:4a:dd:
58:3f:db:2c:c2:f8:03:db:af:c9:15:f2:22:08:4d:60:1d:d5:
3c:3d:51:76:b0:2a:49:f3:f1:44:6d:90:c7:7e:7d:b2:c3:4c:
db:98:71:e3:0d:32:57:ab:e6:d4:cd:92:b4:17:01:ca:7b:b9:
4e:1f:b1:a0:fa:29:ea:d8:39:bc:85:c5:44:7f:60:e7:56:00:
f1:d8:f8:b6:de:69:4e:0c:45:8a:6d:41:4d:dd:b0:36:8e:97:
ce:2a:a0:27:2c:09:bf:04:bb:88:63:31:b4:ca:db:39:81:98:
db:92:77:57:d0:80:c6:58:35:76:15:49:f3:6b:b3:3d:e4:db:
22:19:1b:bc:1e:85:ba:a1:50:97:d1:d6:1b:d2:58:3b:99:5b:
27:e9:c0:fc:d5:7e:e5:76:16:14:57:8b:34:77:72:eb:55:cf:
a9:24:7b:65:bd:81:b8:4e:83:a6:2b:1c:c5:e1:42:ef:d3:2d:
e7:93:35:4c:73:8e:32:49:d3:52:e8:53:0b:84:37:cd:3d:51:
a0:5b:e3:9d:9b:6a:67:f7:5e:68:ee:82:51:80:bd:66:72:96:
9e:1c:24:6f:a3:35:28:5d:42:36:b4:f4:29:03:05:01:34:56:
44:8e:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:34 2025 by rpki-client