Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF86AC62F44111EFBD60B852762E951A.roa
File: CF86AC62F44111EFBD60B852762E951A.roa (raw, json)
Hash identifier: pZglfk6gbmhaRSWSKJryNPPF3FDA77CB0ClVUh/Q6Ls=
Subject key identifier: 50:34:9B:C2:70:19:34:79:F7:A8:EF:C5:B2:37:CC:8D:98:8C:19:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016374
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF86AC62F44111EFBD60B852762E951A.roa
Signing time: Wed 26 Feb 2025 13:01:36 +0000
ROA not before: Wed 26 Feb 2025 13:01:33 +0000
ROA not after: Sat 19 Feb 2028 13:01:33 +0000
asID: 17561
IP address blocks: 154.82.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90996 (0x16374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:01:33 2025 GMT
Not After : Feb 19 13:01:33 2028 GMT
Subject: CN=67bf10b0-1c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:15:a8:a4:ee:9b:35:21:24:1f:4d:6e:08:
dc:06:50:59:c5:21:78:89:9b:ea:52:49:2e:77:0a:
c8:fa:6f:ed:a3:ca:ee:a9:12:08:cd:a7:3f:63:1a:
b5:11:00:f0:d3:fc:f1:56:f0:8f:0c:06:1c:2b:ec:
ad:2a:fb:68:0b:98:a2:a4:e3:e4:8e:2f:0a:52:44:
7b:c8:eb:13:a8:b2:91:55:2c:9f:76:64:6f:78:52:
c1:dd:d5:cf:83:2d:05:b5:33:a3:ed:35:c5:bc:b7:
84:74:db:7d:0d:ae:8b:ff:a5:89:18:31:36:cc:1f:
85:11:fb:8e:c8:6c:4a:ff:c4:67:d3:8c:dd:d8:88:
28:4b:22:57:f7:33:ab:6a:1a:cf:08:1b:0e:e8:8a:
57:2a:e7:b1:1a:54:b4:3f:96:47:f8:2a:16:6f:1c:
aa:a4:fb:25:05:43:a5:20:91:e7:e6:c5:da:7e:72:
80:66:6d:a1:40:73:38:0a:55:13:6d:fc:89:89:7f:
5e:1b:fd:2b:52:bb:96:5d:43:e7:8a:9b:5d:04:ac:
4c:e6:b9:72:e4:ec:7b:16:d5:88:82:17:ac:a8:6c:
fa:f3:71:89:5d:7f:2b:9c:3c:61:d8:2f:60:5e:80:
eb:9d:80:a4:57:67:38:fe:a0:0a:4d:26:f9:f4:c8:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:9B:C2:70:19:34:79:F7:A8:EF:C5:B2:37:CC:8D:98:8C:19:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF86AC62F44111EFBD60B852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.168.0/24
Signature Algorithm: sha256WithRSAEncryption
76:21:16:1a:25:40:bd:4c:dc:59:c8:c0:52:45:c4:d3:0c:21:
5f:69:d8:35:cf:e6:35:d5:90:3b:2f:f6:58:81:0e:96:41:60:
47:f6:82:89:3d:3a:87:18:da:6d:59:ea:28:c3:81:e6:85:73:
c2:37:0e:25:64:8a:1e:98:e3:d2:8f:05:c6:d4:1a:a3:f2:b9:
e7:d4:28:4b:1a:e0:88:f3:8b:d1:ce:a0:f0:30:9e:0f:8a:e7:
c5:e5:b5:55:18:3e:3f:c4:4b:f4:03:f4:ac:42:f3:46:8d:ac:
87:d6:d0:d3:1d:6c:77:03:ef:d9:0e:25:4f:f2:1c:4a:6d:78:
b3:35:d5:e5:ff:c4:24:c6:0c:2d:ed:05:75:01:fd:da:93:0c:
36:5b:d2:27:3a:e7:23:f6:ec:89:20:8e:29:a7:65:dc:c6:47:
30:ce:b0:c8:62:c4:14:51:6c:b2:d8:fd:91:48:74:bc:82:8f:
8d:ba:2d:54:c3:9e:1e:9b:6e:f5:de:94:53:b3:e9:28:37:88:
04:d9:6a:85:0d:5f:63:ed:2f:73:86:8b:3b:18:3c:c5:93:9f:
f6:52:62:3e:b8:76:ee:cb:36:c0:ab:bd:91:1c:0b:d8:81:8b:
42:6d:e5:c6:d5:87:ad:34:a1:9d:9a:82:fc:ab:15:08:5b:c3:
b0:69:32:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:03 2025 by rpki-client