Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD425242FF3E11EF8B0B0096762E951A.roa
File: BD425242FF3E11EF8B0B0096762E951A.roa (raw, json)
Hash identifier: kiMSZjQBmwbTBYu8KmTYPGnMKWyNdhGL740oRm8eImo=
Subject key identifier: 4C:D8:24:AF:8E:38:EE:EA:2E:15:3E:DF:A8:03:BC:7D:0A:EF:F1:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017406
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD425242FF3E11EF8B0B0096762E951A.roa
Signing time: Wed 12 Mar 2025 12:37:20 +0000
ROA not before: Wed 12 Mar 2025 12:37:16 +0000
ROA not after: Mon 05 May 2025 12:37:16 +0000
asID: 394432
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95238 (0x17406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 12:37:16 2025 GMT
Not After : May 5 12:37:16 2025 GMT
Subject: CN=67d18000-dfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:4d:13:05:d5:1f:33:54:c8:cf:be:2c:90:
f9:6d:89:1c:2f:e8:d4:d0:93:e1:10:bd:24:79:3d:
1c:ad:94:5b:22:85:06:30:2b:75:4b:66:5a:9a:16:
df:03:de:f1:09:f6:a0:b4:50:69:de:a3:b4:dd:63:
37:ad:df:5f:94:9c:43:ac:5e:f6:c8:97:62:15:81:
16:c9:03:f0:f2:e0:52:49:49:62:38:14:5d:67:22:
02:86:48:18:8e:be:5b:e7:e5:d7:22:7d:ff:ec:e8:
02:ff:98:2b:a3:62:b3:ca:68:12:35:b5:f8:ed:18:
b2:1f:5c:4c:be:41:b0:9b:6d:35:e6:2f:14:cb:11:
7e:66:74:cf:67:b3:b1:90:6f:65:27:d2:eb:21:10:
e2:af:be:5c:94:8f:a9:e0:41:7f:72:2a:5e:44:89:
63:01:1e:48:71:ce:3c:94:dc:c8:2a:9d:fb:43:56:
70:66:df:17:83:c3:df:0b:bd:7b:87:8d:50:79:79:
f6:37:f3:c4:a8:5e:cf:db:19:50:1f:7f:31:ee:1e:
b8:c0:6b:3b:f7:e1:5e:b4:0d:6c:59:16:5b:77:eb:
b2:35:5d:a1:c9:c6:a6:c0:90:ac:f9:53:50:e8:41:
3f:46:80:66:0b:ae:7b:d3:5b:e3:3b:2d:60:90:02:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D8:24:AF:8E:38:EE:EA:2E:15:3E:DF:A8:03:BC:7D:0A:EF:F1:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD425242FF3E11EF8B0B0096762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
61:2f:9c:8a:92:63:f6:2b:08:27:10:3e:40:15:ee:ca:51:7f:
58:d0:d5:d2:0d:02:2e:c1:56:d3:d9:6f:89:bd:12:06:c7:db:
45:47:2c:98:c5:5a:37:87:55:d4:75:2c:47:33:34:0e:22:51:
cb:7f:f1:7e:89:3c:76:b8:a9:5f:79:45:f4:7d:85:8e:e2:5e:
cc:4a:44:b4:10:9f:22:02:31:94:f7:0b:2d:ec:a5:e8:2f:b2:
11:e8:bd:f5:d5:17:ec:b1:d3:6e:8e:62:93:69:29:6e:a9:44:
c1:17:08:e6:64:6a:94:4f:81:82:cc:19:b0:74:fe:e4:f8:e2:
f0:fb:9a:00:93:36:74:7a:ef:d1:64:b7:f7:c8:c8:58:ca:be:
7f:4d:08:9d:a0:1d:b6:c7:67:9d:33:59:05:7a:e5:96:33:65:
da:6d:dc:6a:41:9c:18:0c:50:ed:de:4b:65:67:a2:15:01:66:
9c:2c:88:03:9c:7b:99:af:05:b3:04:34:8e:4c:79:34:73:c0:
37:fd:91:cf:67:5f:e3:fe:51:12:3e:5c:f3:84:7b:98:f5:2b:
99:ac:87:e4:b0:64:dd:8a:b8:b4:16:fe:0e:df:e4:61:7e:f6:
3e:61:ce:09:e7:3e:f4:03:9c:88:bf:b5:e6:12:47:40:8b:bd:
aa:68:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:44 2025 by rpki-client