Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B6C26CF6A911EF9BD1BF5F762E951A.roa
File: D3B6C26CF6A911EF9BD1BF5F762E951A.roa (raw, json)
Hash identifier: 3I0cHKhrflUGHTlC38foJ7Brhnys/G+mw+rMDbcQx98=
Subject key identifier: 11:6F:9E:1A:CF:F2:1B:2F:B6:79:F0:17:AB:C7:A3:76:2D:42:A5:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B6C26CF6A911EF9BD1BF5F762E951A.roa
Signing time: Sat 01 Mar 2025 14:31:14 +0000
ROA not before: Sat 01 Mar 2025 14:31:02 +0000
ROA not after: Mon 31 Mar 2025 14:31:02 +0000
asID: 48031
IP address blocks: 154.218.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93812 (0x16e74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 14:31:02 2025 GMT
Not After : Mar 31 14:31:02 2025 GMT
Subject: CN=67c31a31-3cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:bb:c3:4d:ec:09:24:0a:8f:15:9a:58:95:
7f:14:87:6a:b9:cb:a6:aa:ee:03:d5:4a:cc:5f:f2:
a3:fb:49:d8:67:72:e6:5f:52:22:ae:ec:7c:7e:5d:
a1:23:db:30:cf:0b:90:90:a4:9c:e6:d0:24:10:8e:
7c:b4:fa:05:0d:56:58:ec:3f:89:5c:99:74:bf:36:
3f:c3:63:23:29:8f:97:50:f6:be:dc:e9:76:8c:d9:
f1:aa:5e:14:a2:79:ef:71:17:6c:6a:33:98:ca:38:
e4:0c:d7:c4:86:55:8e:77:dc:46:52:c0:f0:02:6b:
d3:c1:de:21:6e:77:69:88:10:b2:35:db:b3:55:06:
b9:e8:5f:a1:51:8e:9c:a7:3e:aa:68:6f:5a:54:29:
bd:32:93:33:4b:57:90:01:ef:f3:97:51:24:60:a8:
1d:f9:40:85:5f:e2:5f:bb:7c:7c:38:fa:4e:5e:77:
86:bb:87:e7:98:4e:e1:48:3a:00:b7:02:8c:27:7b:
20:c1:24:70:99:40:cc:4b:6a:1b:8d:ba:47:7a:ab:
fd:7b:07:fd:e0:9f:a1:40:b8:c6:d1:2f:fb:33:1c:
1f:02:44:71:14:a2:78:09:fe:3c:76:3c:96:89:70:
32:66:14:4b:45:53:b5:37:15:89:41:51:e1:05:00:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6F:9E:1A:CF:F2:1B:2F:B6:79:F0:17:AB:C7:A3:76:2D:42:A5:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3B6C26CF6A911EF9BD1BF5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.17.0/24
Signature Algorithm: sha256WithRSAEncryption
71:61:cc:42:53:15:84:bf:98:b1:01:9a:07:c7:b1:b3:81:67:
9f:1d:cb:20:63:db:b6:8d:b3:b8:48:c2:d3:18:b5:8d:65:cb:
03:6d:e3:56:56:19:57:c0:c4:6b:7a:71:95:60:2f:ad:a7:35:
16:31:c2:e9:6c:b7:2e:b9:16:67:38:20:86:f2:8e:38:d0:e4:
f6:6f:2e:78:48:b2:fd:18:30:24:6b:ff:12:b6:77:ed:e7:44:
7b:6f:d7:af:52:63:79:f0:00:de:2f:6e:4c:ba:59:4f:3b:82:
42:ec:99:2f:24:a3:0f:34:36:ba:73:8b:fb:66:1e:be:23:fe:
44:c3:46:fb:22:49:96:64:26:ae:d0:7d:a2:a9:12:c1:ec:40:
14:fc:1b:ea:05:a2:8f:c0:5f:a0:69:12:0c:f2:6b:52:5a:ee:
a8:ab:43:cc:93:dd:0e:eb:84:b8:37:96:cb:0f:57:30:35:3a:
4a:d1:86:19:84:e6:a0:08:bd:7d:bb:64:c4:6b:16:e7:a0:7a:
35:13:b7:39:b2:02:e9:19:2c:79:88:8d:99:2a:50:4d:9d:c4:
0d:22:78:7c:c1:c3:41:59:d2:b5:c5:ff:43:be:0f:9e:01:08:
78:72:4b:34:e5:61:8f:50:f0:b2:22:7a:03:30:e4:85:1f:8b:
06:b8:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:40:52 2025 by rpki-client