Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8985BC6F81211EFA195B872762E951A.roa
File: A8985BC6F81211EFA195B872762E951A.roa (raw, json)
Hash identifier: zmv1O3tPzG4GvR1MJNo/KVs/z/RIDeYLMoXUGr6KH4s=
Subject key identifier: 58:6D:DA:83:AB:A4:D3:6F:9C:3F:34:94:1A:8A:A7:67:D1:85:2C:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8985BC6F81211EFA195B872762E951A.roa
Signing time: Mon 03 Mar 2025 09:34:09 +0000
ROA not before: Mon 03 Mar 2025 09:34:05 +0000
ROA not after: Sun 06 Apr 2025 09:34:05 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94146 (0x16fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:34:05 2025 GMT
Not After : Apr 6 09:34:05 2025 GMT
Subject: CN=67c57791-f216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:dd:33:25:88:d9:2a:98:39:84:6f:1e:d6:
1b:64:a1:6c:f2:77:40:2c:64:f1:e0:96:be:16:c3:
7e:c8:5d:ce:9f:a7:f7:f4:25:ea:ba:d9:ba:12:4e:
3c:d4:f1:e9:8a:4d:78:d3:a3:1b:2c:16:e6:14:25:
8a:45:0d:48:29:73:6b:a5:1d:29:20:4c:e1:6e:1b:
64:92:14:26:62:60:cf:fb:1f:e5:20:b1:e5:68:ad:
c0:98:7a:76:1a:13:85:bb:1d:9a:8e:0c:2b:0a:9e:
ea:3a:06:0e:51:d0:80:90:79:94:ad:c8:20:0b:c5:
6f:94:71:18:3f:22:76:e5:4c:ad:85:90:1d:1f:69:
77:34:db:46:b3:62:a2:f8:30:ef:ea:9a:12:3b:0f:
54:5b:cd:96:f6:85:78:53:26:82:99:a8:9d:7f:68:
fd:2c:e6:7d:52:a2:f6:1c:32:c0:41:b9:6f:93:a6:
39:df:6d:aa:c0:6c:7a:f7:7d:c9:48:93:3a:bf:f3:
7b:b8:52:4c:ff:a0:a0:46:2e:29:e9:4d:d2:4b:4f:
be:b4:c6:90:72:a3:da:b7:ca:78:c0:7b:58:aa:90:
76:8e:7f:20:61:8d:1a:46:26:c7:ff:a2:f4:7c:eb:
cf:a6:6a:bd:b9:4e:9b:a3:ed:b4:d2:13:de:da:2d:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:DA:83:AB:A4:D3:6F:9C:3F:34:94:1A:8A:A7:67:D1:85:2C:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8985BC6F81211EFA195B872762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1e:b6:19:d8:a2:4d:aa:50:f0:a1:13:71:ef:5f:e5:d7:80:
bc:1b:fd:a0:6d:f2:a2:21:68:58:09:93:d7:2f:62:c1:e4:f8:
30:da:e8:f2:30:60:99:af:37:c2:f9:88:b9:2b:5a:98:ff:7b:
d2:0d:67:d5:c9:fb:9f:dd:05:ac:b1:e3:53:d1:8f:10:4c:3f:
83:9e:49:cf:94:89:7d:b8:36:6e:61:1e:b7:7a:98:f4:f6:33:
d8:89:86:57:2b:04:bd:ce:82:49:18:25:7a:d3:25:00:07:a0:
ce:22:7b:74:83:78:05:7d:52:2e:8c:94:4a:9d:e0:35:f9:a0:
8e:ef:e4:9a:31:66:b8:df:1b:b8:aa:2a:9e:b4:10:d4:ed:ac:
2c:9a:54:97:91:25:9e:ba:b5:07:28:7f:c0:eb:b2:fa:63:90:
35:78:2e:9c:c8:04:ef:07:99:57:55:3a:97:af:c2:7a:ce:ce:
24:87:ae:4d:cd:a0:4d:cc:34:d2:bb:d6:75:88:ff:ac:d9:4c:
85:83:10:0c:d4:cc:c3:20:4f:1d:f9:72:fd:e0:f4:f6:f9:36:
da:eb:2a:42:3b:aa:c4:2c:7e:20:0a:46:c7:e1:f7:6d:09:39:
44:83:a2:38:dc:94:b9:09:8d:69:68:b6:fb:4f:86:24:68:44:
5d:c7:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:44 2025 by rpki-client