Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E1A8EAF7F711EFB2EC00BC762E951A.roa
File: C7E1A8EAF7F711EFB2EC00BC762E951A.roa (raw, json)
Hash identifier: RjenqS8+el7BzbhrIjAsso868T19wioenjwy8NOVAI4=
Subject key identifier: 30:83:47:F4:02:69:5E:68:35:69:AC:19:1D:C8:AB:37:2E:B4:B0:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016F64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E1A8EAF7F711EFB2EC00BC762E951A.roa
Signing time: Mon 03 Mar 2025 06:21:45 +0000
ROA not before: Mon 03 Mar 2025 06:21:41 +0000
ROA not after: Mon 21 Apr 2025 06:21:41 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94052 (0x16f64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 06:21:41 2025 GMT
Not After : Apr 21 06:21:41 2025 GMT
Subject: CN=67c54a79-e9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:53:c1:56:99:b4:a4:a7:19:84:47:24:6d:
98:fb:a9:ba:19:a5:5a:10:79:8d:09:3b:cd:b7:21:
5e:90:23:59:e5:8a:0e:7a:db:14:66:49:c3:99:cc:
17:ca:41:18:cc:c1:20:c1:01:ee:02:73:19:f6:24:
fe:93:4c:0d:c2:9b:af:d8:cf:bd:65:00:ce:71:13:
42:c0:91:a8:07:c8:47:e1:5a:16:5e:1b:f2:5b:1a:
f3:aa:bb:68:ee:df:84:87:b8:61:38:00:cf:e4:64:
54:51:8a:f8:3f:14:eb:28:c1:a0:3f:d5:5d:fe:03:
07:79:83:3c:64:47:b4:ba:24:d6:af:08:1a:18:b8:
0a:64:62:ae:4c:46:fb:7e:83:c0:bd:86:3b:51:c3:
11:a8:82:91:19:92:58:78:2b:c6:e6:f3:e4:80:18:
15:67:54:16:9c:05:2d:43:91:63:86:29:f6:dc:d0:
20:f0:c4:e3:79:7c:61:4e:4f:9a:8e:c7:97:f5:7f:
39:69:bb:87:33:df:68:6c:e5:90:75:a7:45:78:20:
87:18:77:9b:2a:a7:8c:62:60:48:0b:f0:76:79:d5:
c3:cc:e5:dc:3f:df:36:31:cb:d1:96:81:fd:50:3b:
fb:ee:57:12:c8:a9:90:91:65:88:13:8b:33:80:67:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:47:F4:02:69:5E:68:35:69:AC:19:1D:C8:AB:37:2E:B4:B0:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7E1A8EAF7F711EFB2EC00BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
Signature Algorithm: sha256WithRSAEncryption
24:31:cd:a4:e8:5c:16:1c:e4:ac:ad:cb:49:de:87:4e:18:67:
5c:d0:be:b8:b5:0d:4b:5a:a9:e9:d1:64:7f:89:a5:c0:9a:7c:
35:de:ae:82:b4:4a:8f:7a:d4:fa:b8:81:9a:18:be:e6:7e:e7:
f2:05:d6:d3:5e:dc:f8:9f:09:7a:e8:83:d3:eb:d4:30:35:d0:
50:dd:95:c0:9c:2e:73:19:9a:b8:42:6b:02:d6:01:c7:08:ff:
80:28:35:3c:d6:49:85:d5:f5:50:f9:d7:e2:ec:b6:c1:62:ae:
24:95:fc:8c:05:95:59:bc:fc:40:9f:22:fd:eb:6b:ae:4b:16:
e5:c4:cc:d4:b8:81:83:c8:38:88:c2:51:31:1a:80:54:1c:54:
30:7f:a5:d3:6d:b5:de:e3:ac:64:2d:c2:a4:1f:35:02:8b:42:
2e:cc:bc:7b:f4:75:eb:11:98:84:f3:2b:3c:50:93:a3:62:58:
29:b7:2e:81:3f:d2:d0:b8:6e:4f:f7:27:96:a2:78:4a:da:e2:
e7:51:4c:8d:9a:5b:d1:c6:56:a4:82:ca:70:8a:1e:82:c3:16:
9c:40:0c:74:a0:89:e0:51:76:5b:bb:f2:41:11:3e:f1:f7:fa:
67:f0:e5:c3:6d:e8:7c:14:b8:00:9b:b9:bf:ac:c4:39:1f:d9:
75:f7:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:41 2025 by rpki-client