Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BBCF1E00C711F0B85D8276762E951A.roa
File: B0BBCF1E00C711F0B85D8276762E951A.roa (raw, json)
Hash identifier: iirYV0E1uKga/5F8YdQzHCjVrcGllr5LStU8TZYKk90=
Subject key identifier: 49:34:CB:27:B2:69:B8:62:D7:C8:DE:8B:4F:96:CF:64:10:C4:E1:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01744E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BBCF1E00C711F0B85D8276762E951A.roa
Signing time: Fri 14 Mar 2025 11:30:11 +0000
ROA not before: Fri 14 Mar 2025 11:30:07 +0000
ROA not after: Fri 25 Apr 2025 11:30:07 +0000
asID: 401615
IP address blocks: 154.85.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95310 (0x1744e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 14 11:30:07 2025 GMT
Not After : Apr 25 11:30:07 2025 GMT
Subject: CN=67d41343-4a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c4:16:c2:25:b0:96:ce:e5:4b:19:c5:7f:86:
ef:9e:a5:b9:01:d8:1b:19:0d:9d:6a:47:f9:1e:e0:
e3:f6:07:c7:b8:e6:05:21:68:45:b8:ac:0e:2d:39:
18:c3:34:9e:52:0a:ed:d2:65:00:df:2c:02:b7:fd:
eb:57:06:b9:9d:6a:37:cc:ab:32:1b:2b:b8:f0:44:
96:14:b0:c0:50:f9:37:7c:95:be:6d:40:ca:34:84:
c2:55:b2:b0:80:33:c2:f2:da:18:0e:db:95:73:61:
bf:76:9e:b6:23:8e:e3:ca:bf:2a:c3:f4:2d:94:70:
31:87:8a:e9:3f:7f:60:4c:c8:f9:95:7d:6c:36:4d:
a1:6e:10:57:85:d4:5e:a3:05:5c:b4:b9:49:31:63:
d1:09:e9:99:32:66:2a:bc:58:7a:3d:03:cb:78:f1:
a3:05:87:70:23:a3:73:20:6a:03:29:28:06:95:6e:
d2:2d:ff:c4:c6:15:b4:5a:2a:5d:30:ef:4b:98:24:
b4:d7:7c:22:ee:f3:f4:0d:a7:3e:55:17:9d:06:8c:
c1:2f:12:cc:eb:ea:9b:31:33:3a:14:c7:a0:cc:dc:
41:e1:d8:a1:e8:cd:1b:fe:a3:d7:9c:0b:67:b4:4a:
e7:6c:1a:44:9c:db:f9:b9:79:20:e7:e2:32:72:8d:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:CB:27:B2:69:B8:62:D7:C8:DE:8B:4F:96:CF:64:10:C4:E1:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0BBCF1E00C711F0B85D8276762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:61:22:2a:51:a1:bd:2e:47:fe:fb:d8:fb:2e:4e:3b:1a:7c:
6d:89:95:ee:6b:65:fc:5c:0d:13:93:47:c9:92:d2:0d:81:6e:
9f:80:22:6b:f8:4e:44:e9:20:a9:6f:f6:6c:e2:2a:e6:5c:7d:
09:67:3f:e5:af:9f:28:3a:fc:50:cf:a0:ac:d3:4f:c9:70:77:
ca:19:42:cf:46:ec:13:af:8d:ce:53:7c:c3:b7:78:b0:4f:e9:
f2:12:f5:12:5f:86:dd:1a:d6:32:cc:40:6f:30:cc:d5:fb:3a:
b1:ae:b2:c8:45:6e:11:1c:8e:55:fa:3d:22:a8:ec:a1:c4:da:
4f:c2:f1:b5:83:ef:82:79:d8:bd:d2:a2:23:2e:ea:db:e1:d5:
63:34:35:a8:b1:b9:63:f8:fd:1e:03:33:8a:44:b4:f7:2c:01:
0a:7b:77:71:24:15:e2:75:40:7b:b7:57:1a:b6:8c:fe:2e:19:
fa:31:27:4b:b1:b5:e4:b8:d8:49:69:32:c0:8c:77:13:ac:94:
c5:25:e9:81:de:4f:45:0c:9d:11:3a:1a:03:25:67:27:31:5c:
d7:dc:97:42:4f:86:7e:b9:34:77:72:84:24:65:1f:a1:fa:2e:
f9:10:3f:43:d6:2d:ac:cb:e6:b2:88:3f:8f:23:ff:a2:0f:4a:
9e:c2:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client