Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5F6360AF82711EF89079181762E951A.roa
File: D5F6360AF82711EF89079181762E951A.roa (raw, json)
Hash identifier: ZjFKfEmbcPaQI2/G/R08D96mPluRp61mKsr1mCNg0po=
Subject key identifier: 70:6C:D7:C8:64:3E:F0:57:9B:9C:25:19:BD:0F:4E:25:3B:B4:8F:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017077
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5F6360AF82711EF89079181762E951A.roa
Signing time: Mon 03 Mar 2025 12:05:45 +0000
ROA not before: Mon 03 Mar 2025 12:05:40 +0000
ROA not after: Wed 30 Apr 2025 12:05:40 +0000
asID: 63139
IP address blocks: 154.93.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94327 (0x17077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:05:40 2025 GMT
Not After : Apr 30 12:05:40 2025 GMT
Subject: CN=67c59b19-b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:7d:95:8c:ab:59:7b:1e:07:9b:43:28:8d:
91:53:50:55:15:69:9d:e9:12:b3:65:6e:28:7f:12:
cf:82:79:19:28:0d:03:30:a9:56:39:0e:54:73:e8:
a2:f0:06:63:27:5d:4e:51:04:45:ef:92:71:bd:88:
e5:54:4a:9b:b8:27:a2:4e:6f:ac:54:9a:c4:af:82:
a8:03:35:fe:ff:fd:da:a0:a5:20:9d:6f:70:e7:98:
7f:0d:34:06:9e:21:15:f8:91:7c:b9:af:e7:c4:a2:
0f:26:0e:ab:2b:aa:61:5c:91:5d:b4:85:f6:2c:1c:
31:dc:22:47:07:24:27:33:97:41:8b:0f:d2:59:f1:
1c:79:e1:2f:f1:35:6f:de:d6:21:42:b9:4a:a6:2f:
12:da:bc:41:0d:ce:d6:36:f4:8a:7e:59:6f:d5:28:
c7:4c:41:fe:74:8f:c2:c1:eb:bb:85:84:d6:f5:0f:
70:e7:4d:a1:87:a3:4e:7a:59:fb:3e:73:2b:6a:75:
e5:f1:e7:1b:2c:b7:da:93:b1:32:34:67:92:cf:7c:
62:e6:d9:87:d2:76:9a:bb:b0:72:16:09:46:98:77:
1a:e7:72:d8:e3:b8:09:1c:98:52:b5:4a:57:e5:2e:
b8:7a:2b:f9:6b:f3:b9:e4:68:a9:ad:af:6f:20:b6:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6C:D7:C8:64:3E:F0:57:9B:9C:25:19:BD:0F:4E:25:3B:B4:8F:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5F6360AF82711EF89079181762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ca:8e:82:26:91:39:c1:26:4e:92:3c:8c:61:b6:d7:07:15:
ae:47:6d:68:4a:02:c4:50:a3:9d:50:45:cf:d5:12:8a:1f:4b:
0e:97:49:3a:cf:fc:3c:07:06:07:72:dc:c5:90:20:33:1b:b1:
fe:38:1d:52:c5:df:7c:18:06:ac:fd:00:97:81:f1:cc:91:96:
86:61:31:43:dc:e8:64:2d:9a:c5:64:29:66:3e:ad:6f:c7:c0:
92:33:e4:96:5b:b8:65:b1:4c:87:75:e4:ca:fb:20:be:59:a6:
35:19:aa:c8:96:be:d1:22:33:55:a4:56:f9:c6:ca:3a:47:95:
ad:b2:bd:6d:af:7e:ff:6c:39:91:80:5c:80:09:f5:30:1e:75:
49:13:73:16:ff:98:e2:2b:d0:9d:7c:39:21:8e:0f:fe:22:67:
fc:a6:75:76:c0:7d:25:6f:c4:73:b2:c5:12:1b:eb:7d:3b:c4:
a5:59:5d:f1:ff:ec:a9:7a:00:47:ff:5a:ff:d4:4b:2d:1f:fd:
0b:4c:de:f6:c7:af:89:ad:86:a9:ac:5b:4e:b5:85:b4:15:97:
0c:c0:d0:49:ad:45:c7:8f:4b:3a:44:69:0b:43:c1:f1:fd:40:
42:77:4e:85:f6:19:82:70:48:f5:ba:49:14:60:77:b7:84:37:
49:e6:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:40 2025 by rpki-client