Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B358CCF69111EFA85AECBE762E951A.roa
File: C6B358CCF69111EFA85AECBE762E951A.roa (raw, json)
Hash identifier: jXj6iKHDhjhDPEh0CipkTyTmL9U5ZvILx6skgtRE2Wo=
Subject key identifier: FE:0A:82:07:C7:D6:5B:D8:61:DC:6E:45:3C:88:5A:DA:DD:C2:EC:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B358CCF69111EFA85AECBE762E951A.roa
Signing time: Sat 01 Mar 2025 11:39:04 +0000
ROA not before: Sat 01 Mar 2025 11:39:00 +0000
ROA not after: Sat 05 Apr 2025 11:39:00 +0000
asID: 203020
IP address blocks: 154.207.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93713 (0x16e11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 11:39:00 2025 GMT
Not After : Apr 5 11:39:00 2025 GMT
Subject: CN=67c2f1d7-9abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:20:29:26:47:b1:10:ac:34:35:f7:91:9d:
0e:4f:3b:70:1f:81:c4:cd:a7:d2:1e:76:d8:6d:9d:
ef:74:85:23:51:46:8f:c7:ed:f6:d3:6e:84:67:8a:
e4:b1:e8:63:b6:d1:d7:0b:08:07:d1:04:bd:01:fa:
12:64:fd:df:53:4b:90:f8:d6:0c:97:4f:de:cd:9a:
36:8d:de:e2:da:9d:eb:c3:a1:e4:93:02:5b:d5:9e:
cf:d2:87:c9:15:77:a9:7c:35:0f:13:fb:5c:82:ca:
7a:be:1b:ca:2f:6b:0f:15:16:ac:71:3d:bf:b3:aa:
b0:f3:d7:c6:40:dd:3c:5a:12:fb:8c:e0:dd:e5:5b:
43:42:34:46:01:b2:c2:6f:0e:52:99:ac:6f:2e:59:
66:68:5a:ba:10:43:2c:e6:0b:92:c1:fd:dd:53:38:
d9:f6:67:08:2f:64:62:f0:06:58:9f:f1:bc:15:1c:
ce:19:f8:ad:bc:77:17:16:f2:c4:0d:61:77:6f:63:
b0:19:77:f7:e4:ab:22:91:93:ca:36:29:52:cd:49:
0e:32:a8:dc:9d:0b:1a:2d:d3:98:90:c9:32:94:4e:
59:76:9a:52:6f:d9:ac:c3:37:62:7c:9a:fc:ac:8b:
c0:52:32:01:c6:96:52:73:ae:e0:41:7a:36:7b:dd:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:82:07:C7:D6:5B:D8:61:DC:6E:45:3C:88:5A:DA:DD:C2:EC:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B358CCF69111EFA85AECBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.248.0/22
Signature Algorithm: sha256WithRSAEncryption
21:37:32:84:d1:57:77:a9:d0:12:26:14:63:d6:72:3d:8a:af:
ae:e1:c9:e0:71:39:16:d1:48:8f:41:ba:c0:b3:8c:25:b5:d9:
ba:f8:84:8b:07:ac:14:03:af:37:09:62:66:74:94:b8:ca:e4:
4b:d2:8f:f1:65:f4:7f:5b:3c:02:aa:73:80:b7:2a:fc:5d:63:
5d:54:0b:5c:49:0d:68:11:51:40:59:96:89:24:bb:f8:4f:e3:
fa:e2:b2:62:10:a3:c4:84:b9:50:37:b3:02:10:37:d6:80:fd:
3e:3d:62:15:38:cb:cf:5e:86:4b:77:af:e5:ab:f4:fc:29:ca:
cc:c6:6f:5d:4e:1d:28:a4:1f:92:3b:34:af:5e:22:e3:03:a3:
8d:11:91:3e:49:6b:07:c9:7a:3a:1e:3a:b8:e4:06:83:0e:dd:
54:39:70:b5:e9:1c:3e:ab:2f:6c:a2:2f:0b:4c:8c:20:fc:93:
74:45:94:35:3a:20:de:a2:b6:ad:3d:4f:47:28:48:83:c6:c4:
df:a6:a2:c5:c2:4d:ec:a4:15:88:7e:2b:0e:42:14:d0:10:54:
13:c8:0a:36:3f:4d:ba:2a:bc:27:ff:4e:6d:bc:4a:3d:c7:96:
76:31:aa:8c:16:d4:6a:e6:04:f8:61:98:1d:78:90:00:d5:aa:
8c:83:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:05:01 2025 by rpki-client