Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8DA3F60092F11F0AA1ED761762E951A.roa
File: D8DA3F60092F11F0AA1ED761762E951A.roa (raw, json)
Hash identifier: BM1+jkWWAjIeiThqB9gtEx4rKeSDVo1YX/wC1SqLyYU=
Subject key identifier: 08:9D:42:23:7E:29:AB:06:48:DC:B4:59:64:1F:C7:4E:62:1D:93:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8DA3F60092F11F0AA1ED761762E951A.roa
Signing time: Tue 25 Mar 2025 04:15:55 +0000
ROA not before: Tue 25 Mar 2025 04:15:52 +0000
ROA not after: Mon 14 Apr 2025 04:15:52 +0000
asID: 133180
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95717 (0x175e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 04:15:52 2025 GMT
Not After : Apr 14 04:15:52 2025 GMT
Subject: CN=67e22dfb-4f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:2b:e6:69:47:19:82:2c:62:da:72:13:b9:
59:50:b8:83:d9:30:44:eb:f9:a4:76:2c:eb:df:5f:
cc:10:5e:c9:37:9b:b3:4c:3d:8f:65:da:bd:e7:a9:
41:f8:37:b1:20:43:35:27:44:d9:a3:c4:9f:db:86:
71:12:79:de:73:0e:91:d4:6c:be:e5:71:38:a8:51:
45:25:33:d2:28:e5:b6:bd:77:cd:a2:8a:78:98:ab:
7c:08:9d:e2:10:ab:81:0b:16:fe:79:90:ef:c6:dc:
e3:0b:82:0f:7a:36:2b:d6:0e:36:27:86:c1:74:9d:
d7:6e:da:20:79:02:f0:3e:98:e2:c7:be:0b:0e:eb:
e4:17:ed:3c:13:50:f2:be:3c:d0:8e:e5:1a:63:97:
35:92:21:d2:9e:02:9f:91:6a:82:db:d0:76:db:66:
ea:7b:e6:14:ef:a7:a7:66:58:e9:79:f3:b8:59:c3:
59:58:2f:3e:7d:54:0b:30:bd:7c:a7:f7:65:af:ee:
12:9f:35:c7:a2:75:39:9e:1f:7e:89:ea:95:9f:8c:
7f:21:3d:5d:28:78:81:bf:6e:bd:1b:64:9f:42:4a:
fb:0c:31:0c:d3:84:28:e4:e1:ad:f0:83:05:b9:a5:
54:fa:2f:f4:77:b0:e2:19:6e:c7:8c:da:82:19:67:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:42:23:7E:29:AB:06:48:DC:B4:59:64:1F:C7:4E:62:1D:93:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8DA3F60092F11F0AA1ED761762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:a4:f0:5f:63:c1:7f:19:bf:d6:38:cb:c2:09:95:47:ed:0f:
3a:6e:87:55:63:dd:7d:24:51:6a:9b:95:72:aa:63:05:e8:75:
20:63:25:b5:84:de:e1:bc:2c:1e:34:2a:07:da:4c:03:72:38:
fc:68:b3:65:9b:93:aa:5f:6a:3f:20:26:7a:52:79:57:64:fb:
52:52:d8:f8:6f:49:9c:38:ac:b7:ac:12:ef:4a:e6:0d:c8:37:
bd:cd:7c:d6:f4:bc:d7:a8:24:b9:70:d0:6d:8f:69:aa:b7:f6:
03:e1:3a:42:e9:5f:c7:0a:40:f9:13:c3:c0:c9:d3:53:69:c1:
e5:76:1c:ca:2c:c9:e1:b0:48:0c:4d:0e:4e:89:b3:f1:74:dd:
85:05:44:73:1d:d9:96:8f:58:58:38:09:69:40:3a:fb:50:a7:
55:9e:64:8c:62:67:bf:40:3c:33:df:fa:9f:1c:4d:c9:57:1e:
6a:f7:e6:04:8b:ab:65:db:68:3a:a0:be:80:b7:27:a2:de:67:
3b:da:83:33:d9:47:81:32:d5:18:ec:a6:7b:73:9c:ea:26:ba:
82:83:eb:0c:62:d4:a1:8b:ca:85:6e:57:01:7d:f1:7e:03:08:
0b:a8:fa:75:4b:e2:40:17:88:8e:09:da:98:4d:62:09:c5:e9:
d7:59:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:31:41 2025 by rpki-client