Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3583654F81B11EF89FC5FAF762E951A.roa
File: B3583654F81B11EF89FC5FAF762E951A.roa (raw, json)
Hash identifier: 7Zu0H1ViLM+spNTfOTOsbo+hku3vm/Q98n4lUVo+kRk=
Subject key identifier: 6F:3A:D2:65:49:0B:06:48:3E:8A:66:AC:BC:96:3A:23:D1:72:75:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01702B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3583654F81B11EF89FC5FAF762E951A.roa
Signing time: Mon 03 Mar 2025 10:38:53 +0000
ROA not before: Mon 03 Mar 2025 10:38:49 +0000
ROA not after: Wed 30 Apr 2025 10:38:49 +0000
asID: 63139
IP address blocks: 154.93.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94251 (0x1702b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:38:49 2025 GMT
Not After : Apr 30 10:38:49 2025 GMT
Subject: CN=67c586bd-a439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:1d:17:87:11:0d:cf:21:64:85:c3:e7:5f:
5c:23:24:00:aa:51:22:5d:13:16:39:94:d0:2d:8b:
fa:c7:19:01:f4:67:eb:bf:fe:3d:2b:b1:2a:d6:42:
a5:fd:65:d4:66:16:60:d6:62:7f:26:c6:69:b9:e8:
74:ca:bb:d8:61:c4:e0:4b:b2:ff:53:08:00:51:84:
80:2d:d8:d3:1a:35:09:38:74:27:1b:f9:96:2e:5b:
2c:09:8d:27:de:4e:08:56:98:11:7b:77:10:76:96:
2d:1e:07:4f:20:a4:bc:ac:51:0b:29:d0:8c:2b:ed:
58:77:db:31:46:fd:12:91:bd:f7:3f:39:ff:d4:e8:
75:12:d7:0c:fa:be:65:45:57:e8:20:17:63:90:c7:
ca:c2:2e:7a:41:87:c9:5c:f9:34:34:a5:03:b9:32:
e6:f1:a5:14:3d:70:29:06:15:86:c3:b1:ef:65:dc:
f0:4d:8b:f6:18:05:d5:0c:20:12:02:13:52:6a:af:
b3:73:b4:a4:a4:ca:af:13:e2:66:c5:c1:44:5e:09:
17:50:c9:53:8c:4f:fc:a2:94:c9:74:c4:4f:36:ae:
8b:f6:3c:1e:e8:e2:0d:94:9a:38:47:72:47:a5:d5:
93:e4:86:6d:51:43:42:12:9a:26:a4:a4:9d:83:92:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3A:D2:65:49:0B:06:48:3E:8A:66:AC:BC:96:3A:23:D1:72:75:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3583654F81B11EF89FC5FAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ed:f5:a6:dc:87:ad:a4:e4:46:85:0d:ca:ad:d2:0a:c3:b4:
90:23:0d:6e:85:f6:d7:55:6d:23:3c:0c:22:82:12:86:44:0f:
80:fc:b6:6d:34:b0:e0:7e:56:b6:4c:fa:37:9e:cc:54:68:33:
c5:f8:31:f3:ba:6e:e3:a1:bb:3c:d6:a9:fc:b6:5d:00:09:2e:
b9:37:eb:37:08:85:c2:16:a1:ed:80:4c:28:fa:b1:36:77:85:
70:4c:05:c3:70:79:d5:67:1e:b5:8a:20:7b:67:73:a3:68:cb:
ab:de:ff:89:3e:73:77:5f:8d:5f:f5:51:06:80:eb:92:3c:ce:
73:87:29:45:a9:6b:2e:d2:65:eb:07:01:5c:f2:45:df:23:5d:
fe:cc:13:81:98:82:d2:ba:0c:9e:78:6e:df:f3:3b:2c:13:17:
01:77:76:b7:e8:31:4b:df:80:fe:f5:5f:13:a9:85:a0:78:21:
5e:a4:2b:1e:8f:cf:7a:54:0a:61:de:73:d9:a6:91:5b:0b:bf:
a8:3b:f0:83:d0:35:12:42:a8:91:9f:cd:8c:4d:c7:36:04:bc:
0b:74:ad:81:ae:8d:e8:10:22:e3:83:c1:4c:85:a3:35:37:96:
ab:eb:7f:00:73:b4:ba:fe:95:6f:65:cd:77:34:f6:84:77:fb:
6e:0a:e0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:35:39 2025 by rpki-client