Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE21593EF3BA11EFBEF4D2A4762E951A.roa
File: DE21593EF3BA11EFBEF4D2A4762E951A.roa (raw, json)
Hash identifier: VR9nEaPbKXaN6QuDsvk/7H2O4i9CmSxjGZRP8ilLWI8=
Subject key identifier: 1C:18:86:B9:2C:EA:42:DD:F4:3E:89:32:BB:9A:CC:88:26:29:7F:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016008
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE21593EF3BA11EFBEF4D2A4762E951A.roa
Signing time: Tue 25 Feb 2025 20:55:39 +0000
ROA not before: Tue 25 Feb 2025 20:55:35 +0000
ROA not after: Wed 09 Apr 2025 20:55:35 +0000
asID: 138915
IP address blocks: 154.95.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90120 (0x16008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:55:35 2025 GMT
Not After : Apr 9 20:55:35 2025 GMT
Subject: CN=67be2e4b-c22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:ee:b4:94:9a:9a:ba:fe:7d:af:6f:fe:f3:
9d:ff:6f:ef:13:a0:2f:29:3b:37:7b:2b:b9:af:cc:
40:05:99:32:e5:53:bf:fb:53:a7:eb:06:9f:f7:8c:
cd:71:81:66:d1:79:d1:64:56:64:14:42:5e:36:db:
25:04:bf:67:ad:b9:e6:4d:af:c9:e7:3c:6b:66:d8:
f8:e3:31:9a:cf:0d:10:25:d6:96:03:2e:15:45:17:
04:00:54:ff:90:b2:22:a9:3f:59:11:15:13:79:d6:
da:ae:c4:93:95:39:8a:92:7b:e6:0a:1c:5b:2c:d4:
e2:0c:57:40:a1:27:34:a7:b9:0b:ee:62:fe:05:d8:
9e:d6:6a:64:bd:05:e4:41:5a:ad:ce:34:95:52:36:
4a:a6:53:b9:fe:e2:12:ea:22:dc:18:84:fc:ae:ae:
3c:d4:50:4a:ef:43:f6:d7:1c:74:a2:f9:6c:b9:85:
18:a8:50:b6:89:ef:d5:95:ef:c8:68:d7:09:ad:d2:
39:04:61:cc:4d:62:43:b0:f3:32:93:d8:c0:f0:d2:
f5:88:cc:98:38:98:21:db:a5:23:65:3e:f6:f4:d9:
1a:3c:84:c2:14:af:aa:a6:79:bb:37:19:bc:f1:b3:
b0:d5:66:4f:fd:bc:a0:ff:06:49:12:aa:50:5e:7b:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:18:86:B9:2C:EA:42:DD:F4:3E:89:32:BB:9A:CC:88:26:29:7F:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE21593EF3BA11EFBEF4D2A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:24:42:55:ac:cf:bb:fb:d7:82:20:4c:88:cd:a8:bd:16:9e:
fc:03:dd:53:32:1b:40:5f:3a:6a:fd:99:47:57:f0:4b:7a:f6:
f5:d2:1f:00:8d:95:fb:39:ed:ff:28:b5:28:eb:b0:e0:a2:aa:
bf:2b:1b:5f:00:f0:bd:08:6a:11:1b:1a:0e:98:cd:e2:20:45:
33:f6:06:28:0b:4f:3c:fc:77:4a:a0:37:ec:4b:8b:42:04:4d:
d6:8b:d0:3c:a0:3b:08:63:df:7d:bd:3b:49:a2:44:98:74:3b:
b1:07:72:4b:ad:a9:8d:2c:ff:29:8b:7d:3e:d2:ba:c9:a7:58:
84:75:0d:1e:eb:b7:30:d2:89:36:36:4d:d3:10:c4:58:ae:a1:
78:8e:d5:bc:a8:4e:61:ab:e7:b9:1e:c7:c9:3b:23:92:1c:f1:
d0:eb:67:b3:9f:46:5d:d6:99:32:26:19:1f:2a:eb:be:7f:6a:
6a:93:ba:99:c6:05:22:a6:20:9a:da:ce:e4:9d:f1:97:50:51:
b8:e0:24:ad:f7:7c:92:ad:68:53:85:f4:98:0f:28:b0:e8:ca:
d7:cf:67:52:c3:69:ce:27:7d:62:86:63:b0:b3:61:86:0a:90:
eb:0d:25:9d:4d:c6:9b:c8:9b:08:bc:98:17:85:1f:3d:84:36:
4d:38:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:27:25 2025 by rpki-client