Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F538E1EF06011EF8F7C428C762E951A.roa
File: 9F538E1EF06011EF8F7C428C762E951A.roa (raw, json)
Hash identifier: 5xDwNROp1Nr6Uix1JY6WkGe7+X06qGD/kZQmthjVi6o=
Subject key identifier: 43:33:82:70:EA:7A:6B:94:AA:D4:75:36:75:CB:0F:32:EF:F9:E4:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0159B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F538E1EF06011EF8F7C428C762E951A.roa
Signing time: Fri 21 Feb 2025 14:32:05 +0000
ROA not before: Fri 21 Feb 2025 14:32:02 +0000
ROA not after: Tue 17 Feb 2026 14:32:02 +0000
asID: 262191
IP address blocks: 154.197.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88502 (0x159b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 21 14:32:02 2025 GMT
Not After : Feb 17 14:32:02 2026 GMT
Subject: CN=67b88e65-0f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:3c:d2:59:08:59:5a:98:61:ea:1a:78:e7:
de:a7:22:04:cc:80:ec:06:79:12:5d:7f:c0:09:5e:
86:15:24:27:a8:83:70:93:b1:8d:ff:81:8c:ea:ea:
1f:d3:58:03:01:4a:7b:65:b0:93:fe:04:71:48:35:
65:82:51:dd:55:80:e9:ea:fd:65:f7:1a:44:02:da:
5d:fb:b2:e1:97:3f:6b:3f:1d:d9:c1:6a:32:b7:98:
82:1c:52:1f:23:a1:61:4b:ac:65:19:38:de:93:3b:
d8:d5:8f:9d:70:64:d4:58:fe:0b:cc:96:04:d4:4d:
83:84:19:05:2c:55:87:16:96:07:30:b4:e5:80:c6:
f4:5b:1f:23:bb:22:1b:14:91:70:e7:0f:76:f5:9a:
5a:fa:ff:7e:8e:99:30:94:6d:d4:0c:f6:41:1a:03:
2e:42:ac:f9:c8:6a:ec:ad:b9:5e:4e:cb:f7:01:94:
f1:e7:24:ed:09:77:e2:a6:72:b1:d5:fb:3a:69:33:
8c:d7:8f:15:06:b5:02:b2:6e:06:b1:12:8b:71:14:
99:3c:a4:58:a2:2a:c5:3c:aa:b1:4c:49:06:cb:2f:
fc:3d:f0:19:ed:e2:9e:3b:bf:64:5a:f0:42:98:95:
89:87:d0:0c:e8:39:22:59:92:f7:3e:56:52:a8:48:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:33:82:70:EA:7A:6B:94:AA:D4:75:36:75:CB:0F:32:EF:F9:E4:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F538E1EF06011EF8F7C428C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:99:cf:0e:e6:92:10:ab:cb:b6:f6:cf:d4:e7:39:3e:df:b4:
4a:ed:ee:6e:1c:f5:95:e3:b2:b7:a7:87:5d:d4:3c:b4:1e:95:
ba:3e:9f:fd:7c:8d:80:33:e9:07:5c:60:f6:30:1d:8f:a2:76:
b1:6a:7c:46:b4:57:87:a7:8c:29:77:fe:9f:ad:86:b6:6f:5f:
ad:94:1d:52:88:44:03:ad:f0:81:7c:00:e6:0f:14:45:15:9e:
b7:ba:c2:7c:af:00:24:1c:44:0b:18:1b:58:f0:76:14:c1:eb:
2b:ec:d5:cf:d8:98:ea:10:2a:0e:c2:39:7a:9c:3d:61:da:0a:
6f:6b:aa:f1:7a:fa:0f:d2:73:e9:3b:68:4b:63:b4:e9:30:aa:
91:31:a7:31:6a:f0:7f:c4:d5:f6:80:ab:df:a2:8b:2f:d1:fb:
74:84:0a:41:fd:43:34:58:ee:a9:c2:f5:bc:10:4d:49:bc:93:
36:ae:16:81:44:25:0f:62:c7:4e:51:21:77:c8:69:6b:7e:9b:
8e:ca:4c:97:b8:19:b1:06:15:54:5b:90:05:98:2f:7e:ea:1a:
ad:07:dd:6a:39:c9:b2:50:ad:d8:99:f1:25:22:0a:24:db:7d:
5c:b3:db:83:55:b5:80:97:3c:0f:a3:41:73:71:1e:b1:c7:c5:
22:2f:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:50:29 2025 by rpki-client