Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF267C0CF45511EFA3911A5F762E951A.roa
File: CF267C0CF45511EFA3911A5F762E951A.roa (raw, json)
Hash identifier: /eec4WjErTe8EtFwwRFX7OjNmCASczZlTIJlsekySEQ=
Subject key identifier: 67:7E:40:A7:9E:01:2C:48:24:58:A1:22:9F:BA:F6:16:59:69:B6:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF267C0CF45511EFA3911A5F762E951A.roa
Signing time: Wed 26 Feb 2025 15:24:46 +0000
ROA not before: Wed 26 Feb 2025 15:24:42 +0000
ROA not after: Sat 19 Feb 2028 15:24:42 +0000
asID: 17561
IP address blocks: 154.82.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91341 (0x164cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:24:42 2025 GMT
Not After : Feb 19 15:24:42 2028 GMT
Subject: CN=67bf323e-277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:4f:92:dd:ab:fc:05:c2:1e:b0:c5:fa:b9:
4c:73:63:67:38:b5:30:1e:81:f4:ee:52:3a:64:98:
ed:43:c6:69:f0:f3:2e:bf:59:3e:6e:a1:07:5e:2a:
1b:68:87:c6:ff:6c:00:dd:80:80:09:60:51:cf:ea:
55:2f:e6:66:55:8c:35:63:44:e1:05:4b:d1:69:b1:
fa:72:4d:ea:08:14:3d:77:ea:68:73:e2:bf:9b:b6:
b6:40:4e:db:37:8d:7a:b0:cf:f4:bf:7b:71:bf:7a:
b1:4b:07:c4:a7:61:29:2f:4d:5d:ce:b4:c2:12:d4:
ae:70:67:73:8b:65:6c:e5:0e:2f:4c:82:7c:28:ca:
a1:44:ad:87:06:28:3f:f8:69:13:8a:99:f8:3a:03:
36:54:47:7d:88:56:85:0e:ac:be:bf:88:54:1c:1d:
71:7c:3a:b9:93:06:a6:6f:30:f5:ae:78:8d:ec:f1:
6e:f1:c2:46:cf:6a:49:40:2a:44:2d:e4:6e:c9:a2:
2f:d4:85:e2:3c:ba:22:35:f6:d9:d6:3d:db:d3:c8:
52:07:2e:ec:23:62:4d:85:b2:64:c4:ff:b0:bd:02:
5a:59:de:ae:34:38:80:dc:22:bd:94:f5:84:f1:e1:
8e:3c:2b:c0:31:35:dd:ec:fd:22:1c:45:0d:52:6a:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7E:40:A7:9E:01:2C:48:24:58:A1:22:9F:BA:F6:16:59:69:B6:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF267C0CF45511EFA3911A5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d8:78:6d:1a:4d:01:0e:e1:8b:c7:5a:95:ac:2b:ef:ff:c4:
25:db:34:3e:4e:b3:7d:75:21:46:07:de:0a:3f:d1:a5:3a:38:
fa:2d:c7:05:fd:13:41:3a:9f:1e:f2:bb:cb:04:c5:d9:ff:12:
3a:23:fd:0e:39:ba:5a:73:cc:0e:c8:66:c6:7b:4d:51:4e:bf:
26:2d:f4:2f:8f:ad:a1:55:79:fa:fa:26:9e:85:c7:9e:09:7d:
53:62:02:8e:62:0c:f2:7f:1a:36:e6:3e:94:d5:8a:5a:15:e0:
8c:1a:9e:2d:dd:f3:db:ba:53:cd:9d:38:b5:ae:3a:52:a2:b4:
f1:d3:05:b6:ef:7e:99:82:6d:f6:57:a7:17:dd:3a:a3:89:14:
85:ea:3d:8f:bd:62:7b:f0:29:4a:d9:41:ac:47:32:75:26:e7:
58:88:21:ea:ee:36:87:75:85:f8:a7:f7:af:bf:97:1d:49:cb:
66:c3:2f:1d:61:1a:4e:5c:61:54:1a:cb:7b:56:9b:29:2e:39:
e2:ea:09:b3:6d:fb:60:cd:c1:3b:f1:82:e4:57:ae:0a:2e:5b:
6a:35:9c:5b:3b:46:7f:57:23:58:3e:f8:8e:88:d8:ab:58:c8:
1a:28:2d:4d:47:87:4e:3f:c2:14:f2:2c:13:f2:ff:69:d5:6d:
c2:1b:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:35 2025 by rpki-client