Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AB6DF2F47811EFB764B351762E951A.roa
File: C2AB6DF2F47811EFB764B351762E951A.roa (raw, json)
Hash identifier: sexPyNG/sBLlEATHY+4jzqfwvpiyeXinIiLp+GWtsHY=
Subject key identifier: 03:9A:B2:BA:E1:4C:BF:A7:21:1B:ED:B1:DA:24:94:36:57:27:12:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AB6DF2F47811EFB764B351762E951A.roa
Signing time: Wed 26 Feb 2025 19:34:57 +0000
ROA not before: Wed 26 Feb 2025 19:34:53 +0000
ROA not after: Sat 19 Feb 2028 19:34:53 +0000
asID: 17561
IP address blocks: 154.82.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91565 (0x165ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:34:53 2025 GMT
Not After : Feb 19 19:34:53 2028 GMT
Subject: CN=67bf6ce1-888b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:2c:9c:91:67:ef:ac:81:5e:df:ae:a5:63:
6b:80:84:87:3f:64:46:c1:e4:e8:be:ee:75:ee:91:
cb:83:c3:46:61:bf:95:96:0c:af:a1:0c:54:37:de:
f5:38:d8:b3:b5:9b:d5:0d:5a:72:8f:81:42:fa:11:
55:3b:ee:4a:09:f0:3a:2b:df:93:20:1b:8b:a2:62:
04:07:85:11:82:f4:cf:fe:cc:f8:6d:6b:d3:64:c9:
f4:c8:70:94:8f:6e:a1:98:c0:d7:c0:49:b4:5e:a9:
bb:d8:bc:5e:01:29:b9:4e:19:01:4b:51:21:a5:48:
95:5b:e1:13:f8:5a:d6:27:d0:f7:32:5f:cf:9d:5a:
4a:19:b0:24:2c:16:da:e5:80:f0:cd:87:b4:1c:2b:
24:24:b0:86:a1:a3:b0:46:16:3e:de:c0:95:75:0f:
19:e3:e9:9a:bf:ea:54:bc:a9:fb:b4:d7:a2:45:d4:
e8:af:7a:b2:4f:cc:4a:d4:06:7c:de:b5:28:1d:ce:
f7:60:2d:0c:fd:ad:f6:1d:86:7e:38:e7:17:f3:e2:
df:0b:aa:2c:d9:f4:2b:45:8d:c4:14:ec:28:bb:b3:
40:62:94:64:38:49:b0:c7:d9:84:7d:ca:c1:e7:32:
1b:b3:e8:83:b2:c5:42:2f:25:0c:eb:a5:9f:c1:7a:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:B2:BA:E1:4C:BF:A7:21:1B:ED:B1:DA:24:94:36:57:27:12:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2AB6DF2F47811EFB764B351762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.31.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7a:01:df:76:ba:a6:da:ea:50:7c:d6:f7:13:47:48:b7:dd:
9b:55:77:84:84:f7:6f:a9:4c:ec:5c:99:fb:19:58:84:83:d6:
c8:1d:bd:de:f3:1e:a9:ab:a9:4e:b4:de:c8:21:30:58:f9:0e:
3f:a8:f8:4a:89:c2:c7:ca:da:36:30:db:2f:c8:f9:fa:cc:19:
5c:83:08:4a:7f:38:08:8a:8a:0c:e8:88:f8:3a:4d:3f:52:bd:
dc:27:59:17:98:32:b4:66:e8:c4:50:b6:03:b8:79:db:3b:e0:
2a:43:37:6b:4f:5c:86:d4:a6:b0:1a:90:7d:bd:f1:f1:05:42:
da:2d:59:9a:1f:40:0e:3f:52:b5:9b:b4:f2:7f:64:ad:48:f4:
44:83:34:aa:87:55:80:d5:dc:ce:37:66:3d:bb:c7:f1:ca:2f:
95:8e:5b:00:24:d3:e8:ad:e6:c5:22:ee:20:61:01:93:bb:28:
ba:8d:71:65:f6:20:7a:b2:90:5f:03:cf:bf:fa:2e:d8:7c:f0:
b7:40:83:55:b7:6a:44:93:6f:5c:7d:21:d9:07:02:c8:14:17:
97:38:29:83:b6:69:17:8c:77:7f:e7:b2:f9:f0:ad:4f:8c:5a:
3c:d7:04:05:2c:23:d2:98:d8:35:06:ae:b9:f6:63:e5:53:ac:
91:31:80:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:48:23 2025 by rpki-client