Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6349AECF2CA11EF9800FC4C762E951A.roa
File: D6349AECF2CA11EF9800FC4C762E951A.roa (raw, json)
Hash identifier: gEkAPxhckAi/CVRbMMvLsyvmyiwrlvjHZVCEIEs4z/s=
Subject key identifier: 3E:7C:4D:88:00:FF:4E:6E:09:45:6E:ED:9E:7E:EE:73:9B:8F:9B:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6349AECF2CA11EF9800FC4C762E951A.roa
Signing time: Mon 24 Feb 2025 16:17:26 +0000
ROA not before: Mon 24 Feb 2025 16:17:23 +0000
ROA not after: Fri 18 Jul 2025 16:17:23 +0000
asID: 55020
IP address blocks: 154.204.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89185 (0x15c61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 16:17:23 2025 GMT
Not After : Jul 18 16:17:23 2025 GMT
Subject: CN=67bc9b96-9208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:83:e7:29:2a:38:c4:ed:2d:8b:a1:52:70:
44:09:c1:e8:f7:22:2c:c1:b9:0d:bd:36:b5:02:4c:
33:fd:d1:66:64:7e:f8:a9:ad:3e:3f:4a:5d:e8:60:
bf:5b:5d:cd:60:a4:d1:c0:f4:75:32:39:e8:f5:e8:
d0:7a:81:e7:d8:a0:ba:6d:91:60:17:a1:24:75:96:
19:84:b4:6b:8f:6a:31:f9:ec:72:fc:dc:ee:7c:1c:
01:a9:0c:40:50:bd:5d:10:72:9d:6e:71:71:2e:02:
ea:3b:81:19:60:2e:b6:69:46:ba:f8:aa:4a:48:b2:
82:ca:88:de:5b:aa:69:f0:cb:7d:50:af:da:2d:3b:
08:f5:b3:34:5d:18:1a:17:b7:3c:6d:23:93:fb:11:
11:7d:d3:e1:d0:c3:d8:5a:a7:09:92:d8:1e:d2:5e:
21:ca:26:98:af:89:44:06:ca:24:69:da:fc:10:e3:
e4:11:c5:c1:f4:a0:38:ea:fb:fc:98:78:95:ca:da:
ea:4b:b7:e5:fb:31:48:a5:38:1f:b0:9f:d8:a5:40:
29:71:1f:91:2d:40:16:3f:10:c4:fd:91:06:0b:8b:
e8:a8:4c:c6:1c:50:2c:b6:3e:51:6e:07:ff:9d:e4:
76:a7:61:85:8a:0f:2a:35:bc:6f:9b:0e:22:40:fb:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7C:4D:88:00:FF:4E:6E:09:45:6E:ED:9E:7E:EE:73:9B:8F:9B:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6349AECF2CA11EF9800FC4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:22:56:66:b3:31:ae:ad:d7:58:e9:90:96:06:bd:e6:16:12:
3d:1b:f0:63:cc:ef:00:76:ea:b2:17:d6:27:05:2d:44:93:c4:
79:7a:39:14:f9:50:54:62:53:50:7c:58:76:a8:bc:e8:4d:c7:
e2:4c:24:92:33:ab:d1:19:9c:95:47:95:9e:ba:f1:fa:de:0f:
54:34:ca:49:3a:ee:db:df:7d:37:b9:89:33:32:8d:ec:a8:fe:
f6:50:c6:0f:8f:24:53:9b:c8:97:47:e7:2e:fd:2d:cf:ad:4e:
7c:aa:ae:cd:e1:92:4d:d3:22:a1:2b:03:33:ce:fa:c5:5e:47:
3e:41:63:a0:34:2c:d9:22:dc:bd:9e:2a:42:0a:84:17:ff:8a:
7e:84:ef:bb:bb:14:2a:45:86:d3:f1:9f:8a:ec:03:c3:39:78:
12:be:d7:e1:c5:51:53:0d:50:ec:c5:b0:e0:e1:ae:3f:ce:d7:
11:03:9c:b2:58:64:8e:65:84:74:a9:7c:d5:43:9e:71:8c:18:
fb:76:0a:b7:6c:ca:e5:74:90:68:a3:b6:ad:6a:c2:20:99:8f:
7c:3f:57:63:bd:cd:7d:7e:f1:30:6c:77:20:2f:4d:00:52:15:
34:f2:1c:c7:9c:f9:2e:f5:f3:fb:d3:5b:32:0e:d2:82:07:89:
3d:2a:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:55 2025 by rpki-client