Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA8B3C2F59F11EFA3D2AB48762E951A.roa
File: DCA8B3C2F59F11EFA3D2AB48762E951A.roa (raw, json)
Hash identifier: a7dmaAuloSNAgZfFIQtRpOsMz6F9y9HMotp0odXROVE=
Subject key identifier: F4:4F:1A:09:24:D2:25:3D:DD:DE:49:DE:F7:AB:14:D7:18:8F:A1:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA8B3C2F59F11EFA3D2AB48762E951A.roa
Signing time: Fri 28 Feb 2025 06:47:23 +0000
ROA not before: Fri 28 Feb 2025 06:47:18 +0000
ROA not after: Sat 29 Mar 2025 06:47:18 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92639 (0x169df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 06:47:18 2025 GMT
Not After : Mar 29 06:47:18 2025 GMT
Subject: CN=67c15bfa-994a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:84:87:26:9d:62:55:15:b6:96:6a:35:c4:
8e:f2:a9:28:ee:7d:77:6a:c7:48:44:cb:b2:d3:a1:
a1:2b:69:4a:af:60:0e:79:2f:46:6d:67:30:8e:28:
f7:3e:fc:57:8e:0b:e8:e7:b4:f5:32:c0:8c:00:41:
cf:90:6e:2e:8c:97:16:3d:12:27:65:9f:ef:d2:8b:
71:d2:7d:9e:84:da:4a:f0:98:b0:af:88:a2:5a:a8:
e0:d8:94:0b:5e:8f:b9:49:88:71:bd:ea:a9:25:1f:
e9:b8:a5:49:cb:c4:98:b1:28:43:be:ba:c2:dc:26:
f7:0a:96:34:5d:48:9c:50:a4:bb:2b:98:cf:74:02:
5d:90:4a:d4:93:8f:e1:63:a9:39:e3:04:09:65:b6:
a7:a4:53:09:dd:6e:4c:40:c6:78:42:79:ca:e1:70:
52:f0:21:0b:0f:98:4d:6f:28:12:c7:36:cf:bd:5a:
0b:11:6f:ea:75:82:f9:33:97:f4:ad:e6:dc:ee:04:
8f:11:12:da:cd:b0:c4:7f:fb:98:89:0e:8f:42:71:
ad:cd:78:43:6e:3a:ed:98:d6:3a:83:42:71:a7:1c:
12:c8:69:57:1c:e7:c7:59:14:97:32:fe:c1:89:cc:
6a:bc:67:60:16:a6:48:1a:bf:1e:f1:f7:ae:b2:5e:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:1A:09:24:D2:25:3D:DD:DE:49:DE:F7:AB:14:D7:18:8F:A1:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCA8B3C2F59F11EFA3D2AB48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
Signature Algorithm: sha256WithRSAEncryption
69:42:eb:f8:f6:2e:0f:38:dd:ae:86:2f:2d:81:6b:58:84:51:
a8:8a:89:6a:80:ee:47:4d:71:94:ab:86:b8:0c:d2:37:63:5e:
5c:1d:e9:da:02:47:bc:91:61:94:cf:c9:3a:e6:54:32:cb:e4:
0c:1d:59:24:b1:ca:c4:c9:86:05:49:00:c5:90:cf:dd:4c:88:
7e:ff:f8:a3:fa:37:bf:00:b9:e9:d3:99:a9:33:48:e1:e9:ae:
b8:e5:b4:27:9f:32:e6:e0:57:19:f8:20:99:b9:4b:60:50:79:
f2:38:dd:a9:ea:7c:f0:3e:09:06:0f:b6:54:33:9a:d3:66:83:
80:11:7b:fe:09:a9:1d:4b:ad:ee:29:96:df:ad:c3:3c:b5:69:
23:38:b4:cd:1c:69:fb:0b:2f:c2:c2:00:48:f4:d7:ad:8d:04:
92:32:21:73:90:06:c2:c2:88:ac:6e:c5:2f:5e:d8:c8:97:1f:
6a:5f:a4:d4:a3:2b:8c:84:0f:32:b2:8f:c0:2f:9a:92:8a:0e:
84:66:97:69:36:a4:80:ec:8a:bc:ca:1f:0c:52:c4:d4:e6:53:
a2:bd:24:fd:c9:70:3e:98:f7:8d:fb:99:7a:01:42:7c:10:9f:
fc:1b:c4:8c:b5:dc:53:a0:55:21:a2:12:5d:c0:00:1d:20:bb:
88:1d:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:17 2025 by rpki-client