Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2140DEFB3111EFB5910695762E951A.roa
File: CE2140DEFB3111EFB5910695762E951A.roa (raw, json)
Hash identifier: ZttrnhXZ6yv7JOloMH84nP7aiFMg3NPNX67Keg3jeEg=
Subject key identifier: A9:9E:5E:17:71:A4:20:FB:F5:F8:05:28:7F:76:A4:63:8E:77:6F:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2140DEFB3111EFB5910695762E951A.roa
Signing time: Fri 07 Mar 2025 08:54:40 +0000
ROA not before: Fri 07 Mar 2025 08:54:36 +0000
ROA not after: Sun 20 Apr 2025 08:54:36 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94934 (0x172d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 08:54:36 2025 GMT
Not After : Apr 20 08:54:36 2025 GMT
Subject: CN=67cab450-0b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:36:ca:76:48:e8:b9:43:54:7a:e0:0d:45:
1f:b3:22:c9:49:cb:26:13:f4:bc:2e:20:03:98:54:
f8:ac:33:fd:e3:eb:ed:03:2f:56:6f:45:f9:d7:05:
b9:72:d9:e8:a0:0b:7e:07:98:ce:b8:d3:d4:f7:cc:
9c:c3:6b:2a:dc:18:59:56:84:a5:54:f8:5c:a9:ae:
39:b7:98:78:f1:86:85:58:23:3a:91:af:db:d1:e0:
96:94:68:d9:a2:19:a8:1a:e8:42:d2:3c:fb:5c:a5:
46:d9:e2:7c:70:18:4e:24:64:e2:cf:18:b5:8b:ff:
a4:5c:7f:a7:4b:98:cc:61:61:5b:cc:93:f3:f2:6e:
52:e7:db:36:f2:ac:b6:88:30:f6:3a:b1:55:ad:df:
25:4c:ec:be:d7:d3:7a:e9:7c:9f:99:26:f5:b4:2a:
8b:4d:72:44:bc:c1:63:ea:2e:50:df:95:17:28:c6:
48:23:47:52:76:d8:48:3f:73:60:ff:88:35:ca:d8:
bc:e9:9d:b2:f6:98:3b:8c:a7:1c:1e:7e:d1:04:74:
7d:47:e5:60:62:1b:df:f6:90:c9:6b:d4:f4:33:33:
9a:cd:87:03:17:aa:19:24:72:ae:ee:5b:62:27:4b:
45:cb:2c:ba:ba:1a:67:74:11:7d:22:37:3d:35:a1:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:5E:17:71:A4:20:FB:F5:F8:05:28:7F:76:A4:63:8E:77:6F:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE2140DEFB3111EFB5910695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:7e:52:12:73:93:56:83:c7:05:c1:5e:2e:41:b3:03:0d:0a:
21:35:48:5e:09:ed:5e:73:db:ac:b6:8d:50:1a:b4:9d:e5:47:
85:9a:dd:24:0d:6a:87:bd:c6:be:7a:47:61:6a:19:07:97:b1:
c3:27:65:b3:4c:35:47:d0:de:51:79:80:4e:ae:ac:47:88:5a:
71:67:37:12:46:1d:8f:b3:ed:30:df:73:44:88:81:cd:8a:47:
ce:0e:82:32:d7:d7:c2:15:7e:0f:a3:de:da:f2:44:eb:0f:57:
97:85:02:f5:5c:77:3c:e9:79:cf:36:31:f4:af:a4:dd:f5:5c:
8f:df:51:fd:17:01:ff:34:2b:ed:0c:c6:0b:69:85:f7:4c:b8:
03:f4:64:68:51:b5:ba:39:99:24:3e:f9:b6:98:3b:38:12:b2:
6b:03:a5:b8:0b:82:13:ac:d5:56:5f:7a:76:0a:90:62:05:8b:
53:ea:38:a4:c5:c5:b3:ba:7f:bc:32:b3:a8:21:39:d4:c8:0b:
b5:78:56:d7:eb:3f:0b:ff:14:26:9d:2e:b5:07:8a:5b:20:ef:
8c:0a:80:1c:d3:48:f7:ae:ee:e2:a4:46:6b:85:a9:06:2d:f7:
eb:d8:36:39:34:c2:18:c6:22:42:d5:a0:a3:0d:6e:f2:ec:bd:
34:5d:78:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:38 2025 by rpki-client