Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98FAE20092D11F084BB8855762E951A.roa
File: C98FAE20092D11F084BB8855762E951A.roa (raw, json)
Hash identifier: ENmOjwpIOkg8mGv71xl4aZyB2t3E+7lsEktZVKKDYII=
Subject key identifier: C6:36:0F:FA:AB:42:DF:4B:96:CC:7B:59:AB:52:D7:AE:BB:0D:58:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98FAE20092D11F084BB8855762E951A.roa
Signing time: Tue 25 Mar 2025 04:01:11 +0000
ROA not before: Tue 25 Mar 2025 04:01:07 +0000
ROA not after: Mon 14 Apr 2025 04:01:07 +0000
asID: 133180
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95707 (0x175db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 04:01:07 2025 GMT
Not After : Apr 14 04:01:07 2025 GMT
Subject: CN=67e22a87-bf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:a7:89:6d:b8:04:90:ee:70:3a:8e:da:75:
58:be:c3:ac:fd:da:b2:80:68:11:35:c7:c2:68:5b:
3b:ea:3d:30:6c:33:e9:c5:da:b1:87:25:71:f9:2e:
5a:89:f9:4a:7d:24:3b:db:da:83:8b:39:ea:93:83:
0a:ba:cd:46:be:f7:41:40:7c:7e:bc:c8:ca:87:2b:
98:89:36:4d:23:88:84:60:1a:d0:34:34:3b:56:3c:
8d:a6:a0:cd:73:7c:27:df:4c:91:ff:c5:a9:e3:78:
1e:70:c5:d6:8f:4b:00:14:72:1b:d3:b2:b6:db:12:
ff:cc:af:13:d9:4d:09:f9:d2:1a:b8:e1:ab:69:43:
8e:96:c4:f1:b8:8d:ee:fb:2a:ee:a2:c4:ba:8e:91:
fa:c3:bb:95:2c:0b:7a:10:81:50:e6:9b:34:6c:f7:
9d:3b:86:95:7d:6c:62:68:0b:d3:fa:61:2f:81:4e:
87:5f:09:30:49:68:fc:39:5d:5b:43:c8:2a:29:f6:
f0:24:a4:3b:88:ee:51:f7:b6:3f:e4:12:b9:b8:cb:
92:ad:b6:d6:8b:46:6b:30:7f:e7:f6:3a:ee:6f:e6:
8a:b9:1d:45:e9:58:be:0e:dd:5f:85:65:d5:c6:c8:
11:60:2c:67:51:c9:88:99:aa:45:a9:04:2a:02:07:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:0F:FA:AB:42:DF:4B:96:CC:7B:59:AB:52:D7:AE:BB:0D:58:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98FAE20092D11F084BB8855762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
62:8f:ba:99:43:19:5b:66:2b:e3:24:14:0d:1c:c6:24:02:09:
77:1e:51:fd:db:1d:72:a8:86:cb:5d:d1:b7:00:15:e1:50:4c:
e6:a4:55:26:57:ac:81:ad:8a:a0:7a:40:5f:03:b4:07:d7:67:
5b:cb:ee:9d:40:4b:7c:54:b1:c3:f1:bc:49:da:b6:49:41:64:
20:82:6a:dc:d9:29:64:c0:e6:23:2b:77:93:f7:ef:14:a0:e8:
aa:c7:33:1a:90:8a:c3:9d:17:74:2d:bb:d4:4a:5c:4b:3b:37:
a9:e0:76:7a:47:5c:32:46:3f:95:f9:3b:b4:c8:fc:17:30:a0:
08:20:b6:02:ba:4c:a4:80:f2:9f:00:e8:ab:36:8e:45:29:c4:
2c:2d:1b:6a:16:10:7b:ea:5b:f9:46:66:dc:cb:8c:c2:c8:36:
df:ab:a4:47:10:73:e7:b0:7c:c4:4a:d5:07:9a:2c:d5:e7:58:
1f:f2:fc:23:a8:3a:3f:d2:0c:19:cb:30:18:39:3f:16:a3:ee:
ed:20:fb:92:eb:f7:14:9b:34:cd:8d:fc:bc:6a:bf:95:51:f8:
eb:5f:a0:a3:42:9c:f4:69:15:b3:b5:8e:86:0d:75:6b:08:6f:
0e:2b:ab:6c:b8:b3:44:df:ce:b0:f4:34:be:fc:5e:82:eb:0c:
4e:23:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:07 2025 by rpki-client