Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8008D26FE4E11EF83A7C08F762E951A.roa
File: B8008D26FE4E11EF83A7C08F762E951A.roa (raw, json)
Hash identifier: 1wZVCiZYMd7k6ePplwdi19t/ujqzwTWGbJ38jsMkNmk=
Subject key identifier: 49:8B:C4:E1:67:10:87:A5:39:D3:15:2C:E6:30:B1:20:0F:CB:2A:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01736E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8008D26FE4E11EF83A7C08F762E951A.roa
Signing time: Tue 11 Mar 2025 07:59:12 +0000
ROA not before: Tue 11 Mar 2025 07:59:08 +0000
ROA not after: Mon 14 Apr 2025 07:59:08 +0000
asID: 397630
IP address blocks: 154.201.32.0/24 maxlen: 24
154.201.35.0/24 maxlen: 24
154.202.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95086 (0x1736e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 07:59:08 2025 GMT
Not After : Apr 14 07:59:08 2025 GMT
Subject: CN=67cfed50-ad1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:a5:42:77:81:f5:f6:b5:88:62:6f:7c:1d:
80:f8:27:91:cb:11:7f:b0:bf:70:a4:45:51:6f:17:
3d:d7:12:e7:99:69:fe:a2:48:35:d2:b9:29:91:28:
3e:b7:d4:16:6d:2e:b0:c1:6e:ea:6d:e5:bd:ec:72:
0b:5f:c9:b2:5e:41:b1:bd:de:00:3a:4f:1f:57:dc:
1d:54:1e:63:bc:4a:2e:cb:74:8f:ae:f7:11:bb:44:
50:4f:50:4a:fa:f8:f0:2f:af:4a:5e:2f:8b:ec:bf:
ff:80:2f:62:af:32:69:60:67:29:d6:f9:25:20:15:
dd:db:67:1e:40:d9:92:f8:e3:90:f0:68:49:e6:32:
ee:8e:3b:6c:4c:ee:c5:5f:2d:78:98:0f:8a:76:7e:
3a:2a:b9:de:1a:90:8c:0a:54:e9:74:6f:7d:39:1c:
0c:5d:83:a6:16:1f:f0:70:0c:c0:29:d9:8e:d5:12:
ad:6f:b1:21:1b:83:20:08:7d:6a:ca:80:ab:82:1c:
d8:42:41:46:e6:13:39:0a:81:c0:82:69:16:1c:57:
35:83:93:c4:55:95:f6:f3:a6:b6:91:63:3a:ac:c0:
9e:17:6d:e5:9f:dc:5a:9e:52:ef:df:36:91:0e:a4:
5e:18:ed:fc:26:e5:1b:79:46:1c:21:18:0d:4b:1c:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:C4:E1:67:10:87:A5:39:D3:15:2C:E6:30:B1:20:0F:CB:2A:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8008D26FE4E11EF83A7C08F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.32.0/24
154.201.35.0/24
154.202.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b3:25:06:73:4b:53:51:22:41:1b:f0:71:fe:9a:1a:6f:b9:
80:f6:91:b9:93:0e:11:3f:7d:4a:57:ab:5c:98:d1:25:ee:b6:
98:ab:6b:78:5b:15:3c:ea:59:ed:88:6a:5f:a5:47:1b:e6:53:
ea:02:f7:b6:4a:48:19:0f:b3:26:9b:11:f0:99:13:c9:b9:7b:
6f:0d:9f:4b:91:0f:76:4c:40:3e:f6:fd:bb:c2:b3:b9:bb:d8:
8d:9a:fc:43:a9:33:23:59:82:08:e9:c4:7b:82:78:aa:d6:37:
f7:a8:07:2e:8f:91:50:40:b6:54:93:e4:7e:4c:77:59:19:c1:
6f:ac:4e:bb:17:fd:2b:4a:31:26:d7:7b:c7:a4:82:ce:64:65:
0f:8a:9e:4d:98:f1:6f:f5:91:6f:33:7e:7f:ee:b1:f2:b7:63:
97:1c:f2:50:d8:82:c3:45:83:f5:95:31:65:2c:de:e5:4e:2b:
de:55:f2:07:02:fa:dc:ed:fb:2c:47:12:a9:51:78:47:77:3f:
68:d2:01:9e:22:54:4a:d3:f0:3d:04:3a:b2:df:41:7f:85:97:
43:b7:6b:f7:1b:7d:ba:25:9f:82:5e:4e:6e:ee:c8:24:c1:ce:
6a:48:70:6e:50:2b:ee:26:9c:87:78:6e:bd:b2:bb:98:4b:68:
d9:61:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:52 2025 by rpki-client