Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3B4E35CFE4A11EFA7AA5977762E951A.roa
File: A3B4E35CFE4A11EFA7AA5977762E951A.roa (raw, json)
Hash identifier: cwx1nP5F5k6n8xqyWEQliWvXnsQ+Vcn/fmopFHYq84Y=
Subject key identifier: 15:58:3E:9D:E2:67:51:7C:2F:2A:08:2A:97:A4:2D:6D:31:D9:92:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017366
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3B4E35CFE4A11EFA7AA5977762E951A.roa
Signing time: Tue 11 Mar 2025 07:30:00 +0000
ROA not before: Tue 11 Mar 2025 07:29:56 +0000
ROA not after: Thu 17 Apr 2025 07:29:56 +0000
asID: 20473
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95078 (0x17366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 07:29:56 2025 GMT
Not After : Apr 17 07:29:56 2025 GMT
Subject: CN=67cfe678-abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c1:96:23:fc:1a:6c:e2:ef:f1:e4:0c:ef:73:
fa:76:71:68:8f:c1:90:2c:e1:45:fa:f2:f1:86:d3:
f3:6a:be:4d:17:cf:9f:16:1b:b6:bb:ec:f6:16:29:
99:aa:f6:f4:ce:96:66:f5:07:c6:ac:57:b6:2a:cb:
1a:d2:9d:65:02:e0:97:6a:ad:8c:b1:d0:f3:41:cf:
1e:e9:a1:01:a0:a4:37:d2:b0:e9:f2:ec:7d:ca:a1:
32:34:7c:b4:a5:66:00:d8:c9:5a:ca:17:d1:2a:3f:
7e:0b:6e:4d:7f:ec:13:ba:8d:a1:d4:c8:01:f6:dc:
15:3c:85:5e:8d:df:67:88:4b:c1:cc:49:5b:42:e3:
14:54:f8:df:75:dd:77:b1:60:d5:69:6a:f3:b7:a1:
eb:fa:8a:12:72:58:e0:7a:df:11:36:c1:96:0e:4a:
d5:25:b3:8d:fd:b0:63:c7:f4:a4:8b:13:59:b9:aa:
a9:1c:0d:b3:79:9e:c7:1b:ba:49:08:5a:62:eb:d7:
12:ba:6c:6e:68:26:69:ce:95:77:e1:09:b0:e5:b6:
7d:f6:75:4e:b3:c2:27:23:73:96:1b:d5:2d:ee:34:
6b:c3:93:51:61:b4:cb:f4:e6:ce:fc:cd:81:00:f8:
8d:52:97:b6:90:41:c3:86:ea:94:57:26:bb:3f:ff:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:3E:9D:E2:67:51:7C:2F:2A:08:2A:97:A4:2D:6D:31:D9:92:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3B4E35CFE4A11EFA7AA5977762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f7:39:35:30:cd:ea:b6:0e:b9:36:63:8e:a7:69:b7:e9:e0:
a5:23:58:dc:49:00:75:7a:21:cb:00:c2:e9:3e:11:ef:ab:86:
97:0b:30:a7:73:3f:21:f5:74:42:a9:0e:f4:fb:20:d9:44:f9:
61:2b:36:57:ef:d0:1c:ed:e7:01:47:7b:83:c7:56:b2:ec:1d:
bc:4e:86:00:75:41:c8:0a:be:63:ea:d7:80:4b:fc:76:f6:ab:
fd:f6:f6:4c:3c:48:de:4b:52:9b:11:e7:d3:d5:5a:7a:83:96:
fb:7c:29:ea:39:6a:57:f5:44:0d:76:30:86:19:3c:58:21:6c:
d8:6b:7a:aa:e5:59:0c:02:b1:c1:1e:31:15:7d:53:45:32:cd:
0b:15:47:c3:1e:4e:8f:c1:8b:d8:5c:5f:94:a0:87:73:73:a9:
95:44:db:77:bf:6d:af:b9:95:72:92:da:d4:4c:b9:62:2b:5c:
d9:ec:d9:cd:25:ba:5d:de:21:d5:a3:09:f5:77:da:ee:68:f2:
7d:bd:7b:51:69:41:bc:11:0c:d0:7a:ea:33:c2:6b:e9:ee:7b:
68:93:c6:fc:71:5f:0b:0e:d8:37:47:8c:ee:fd:28:8b:90:a3:
48:5f:b0:8f:12:16:9a:37:87:09:e4:cb:16:83:d8:cc:91:bf:
b3:1d:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:50 2025 by rpki-client