Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8ED4D7E058511F08FC5907B762E951A.roa
File: D8ED4D7E058511F08FC5907B762E951A.roa (raw, json)
Hash identifier: owiB43j8LL63O6tRNt25MVglfcOzpUh4ppgtFCtI+Zs=
Subject key identifier: 5E:1B:A3:E1:AB:D4:80:1D:AB:3A:F8:B9:E7:6A:4B:DA:2B:78:1C:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01754B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8ED4D7E058511F08FC5907B762E951A.roa
Signing time: Thu 20 Mar 2025 12:21:28 +0000
ROA not before: Thu 20 Mar 2025 12:21:24 +0000
ROA not after: Sun 16 Nov 2025 12:21:24 +0000
asID: 29684
IP address blocks: 154.91.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95563 (0x1754b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 12:21:24 2025 GMT
Not After : Nov 16 12:21:24 2025 GMT
Subject: CN=67dc0848-9d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:52:d9:70:55:a0:9e:25:fd:bd:97:cc:d1:
2a:3e:0c:45:61:76:f2:81:94:f2:92:d2:fd:9f:b8:
5d:32:9a:23:54:6d:98:27:92:df:08:ff:73:c0:6f:
ff:54:63:4d:20:a1:06:19:8e:f8:2a:1d:31:89:3b:
9f:ca:99:c4:22:b3:15:73:5e:bb:2d:14:47:f6:34:
89:53:c3:46:e5:2b:65:0a:5d:80:d0:6a:f7:d9:70:
f7:ad:cd:c2:73:6c:93:68:6b:b0:03:a5:2d:9c:7f:
a1:c3:85:d5:77:4e:74:db:c7:6f:b3:82:d4:c7:8f:
ee:74:e9:78:7b:52:c5:33:a3:27:19:21:15:08:c6:
b2:6e:1e:27:ee:20:5d:99:35:59:0a:7b:f2:9a:70:
4c:bc:85:30:8b:c0:02:2c:e2:78:07:2b:8e:b7:94:
e4:bb:ac:fe:fe:02:b8:45:60:3a:c8:25:9b:7b:d9:
61:66:49:d7:bb:e3:8a:0a:fe:8f:b6:02:fe:8f:54:
af:b5:25:f9:27:05:f5:a8:1d:e1:65:6e:44:25:61:
b1:78:65:98:2c:db:51:94:d3:85:0f:c9:63:fa:a5:
f7:02:06:20:ba:68:dc:92:fc:b6:9a:e9:fa:04:1b:
3f:a6:1d:39:a2:c4:02:bc:d6:3b:c8:7e:ee:b5:df:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:A3:E1:AB:D4:80:1D:AB:3A:F8:B9:E7:6A:4B:DA:2B:78:1C:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8ED4D7E058511F08FC5907B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.36.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0a:84:10:c5:19:34:55:a0:a0:90:a2:a7:ce:52:16:ad:e2:
a4:46:d6:36:9f:62:72:f0:9f:3f:15:57:4c:a1:cf:02:92:a0:
8a:e0:6e:fb:69:60:45:21:42:35:85:5a:83:2b:81:a6:e9:ce:
32:20:78:2c:dc:d5:aa:48:c1:70:ae:26:62:ce:f4:d4:84:79:
bf:4f:1a:32:63:38:23:3d:e9:36:54:1c:a4:77:b4:07:cb:65:
ef:e4:ff:71:2b:e2:9d:36:c1:d2:8d:e6:a4:dd:3e:67:df:d0:
2a:eb:d6:b7:c4:85:f8:c5:b7:5f:b2:5a:f9:29:17:b0:62:9d:
a1:8f:dd:a4:86:84:4f:de:f7:36:1b:6a:25:77:26:2a:f4:48:
7c:a0:55:9f:87:1b:f8:51:dc:22:28:2b:05:95:c4:a4:54:30:
93:9b:59:71:0c:d0:c8:c3:f6:25:1d:46:52:01:ae:7e:03:c5:
99:3c:91:04:c6:9e:ef:4a:a6:2c:42:a0:90:66:bd:bc:47:f0:
3f:65:6b:d0:36:1f:48:6b:c0:ab:2c:f9:5d:3b:55:cc:82:86:
4f:b1:4a:19:a6:d0:9e:d6:79:85:47:36:bd:91:3a:4a:38:6f:
ba:fa:bd:80:8f:a6:8e:91:50:45:b9:0d:91:2f:5e:03:64:30:
c5:54:a6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:32:39 2025 by rpki-client