Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA079D4F06811EF96F686BC762E951A.roa
File: DFA079D4F06811EF96F686BC762E951A.roa (raw, json)
Hash identifier: WIfyFbV3+5CFhtHIV05wuZMh+P/A0TpGO/EaVvVUoE0=
Subject key identifier: E4:15:5B:53:FA:E0:87:54:DF:A7:0F:BE:2F:47:56:B9:11:0A:30:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0159D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA079D4F06811EF96F686BC762E951A.roa
Signing time: Fri 21 Feb 2025 15:31:09 +0000
ROA not before: Fri 21 Feb 2025 15:31:05 +0000
ROA not after: Thu 24 Apr 2025 15:31:05 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88532 (0x159d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 21 15:31:05 2025 GMT
Not After : Apr 24 15:31:05 2025 GMT
Subject: CN=67b89c3d-d370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:e8:34:31:ae:9d:fd:36:45:02:75:2e:ac:
d2:32:ec:9f:f8:f7:63:fe:38:dd:f8:0b:df:51:94:
34:15:a2:14:49:95:12:76:bd:83:7b:6a:31:a8:d7:
3e:ed:97:ab:b8:65:b6:ad:90:40:19:f7:b7:22:cb:
7d:c3:5a:d0:b4:29:14:7f:06:27:e5:12:82:cf:86:
59:0a:a0:53:07:e0:36:ac:a0:3f:8f:2d:4a:eb:c7:
8c:b8:cc:cd:38:71:7d:8f:26:6a:32:86:a8:2b:28:
1a:ee:f3:cd:d3:0e:1f:2b:17:7b:74:19:e4:1c:0f:
39:2b:8f:d6:0a:60:f5:22:1d:7b:c4:74:8a:83:45:
57:fb:10:66:47:18:df:27:89:97:bf:c7:a9:29:ea:
c9:96:43:f6:3d:01:ec:81:43:5b:3f:e6:f9:e6:10:
29:e4:10:0a:bb:d2:b1:f3:ba:65:9c:7f:01:0c:94:
96:79:32:0c:89:e4:ad:4e:8b:06:60:50:b2:70:6c:
3f:ff:1b:bf:4a:96:6a:f1:af:e1:ca:a1:5c:9a:bd:
b3:1f:5b:f0:b7:11:1e:c1:ab:3b:cb:bb:75:82:7d:
0c:6b:55:44:92:3a:5d:af:68:84:82:7d:ac:3e:f5:
5c:44:f3:d6:9a:a2:17:c4:a8:4d:ea:07:9f:70:b6:
8e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:15:5B:53:FA:E0:87:54:DF:A7:0F:BE:2F:47:56:B9:11:0A:30:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA079D4F06811EF96F686BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
90:91:a3:25:d3:3d:9b:68:9d:04:18:66:e0:09:4c:fa:6d:15:
bb:ae:85:a1:c4:0d:81:c0:dc:e7:9b:ff:00:e9:ac:dd:39:28:
20:34:eb:b1:57:f6:6a:e9:9e:dc:8e:95:94:74:49:4e:3f:80:
ad:f4:65:11:c1:1f:83:6b:6a:cb:f4:5f:1c:3e:ff:30:4d:10:
c8:58:06:51:e0:7e:ef:b5:83:ce:d8:72:54:ec:ba:13:89:ed:
f0:2e:c2:98:57:41:e3:be:32:64:5b:a5:0a:68:8e:bd:2b:60:
ba:e9:70:ed:63:5d:2c:36:e9:c6:3f:5f:07:4e:2d:bc:e9:e7:
5c:9b:22:ed:49:d2:10:15:a7:f4:53:2b:97:ec:57:34:55:26:
e7:8b:33:1f:43:02:cc:43:fe:7a:e1:88:b4:aa:69:54:37:c2:
07:62:b6:94:b6:35:cf:bf:56:fe:a5:83:e1:13:99:b9:01:1c:
ae:26:9b:5b:de:8e:03:b8:ef:47:1b:27:d3:df:6b:28:d7:4c:
d6:dd:b3:ba:d6:c3:78:83:88:90:f9:2c:c3:11:1e:e0:42:89:
fa:78:d1:49:a9:95:0c:99:08:6c:cc:51:1d:d2:c5:34:b2:88:
4b:ec:ae:ff:2e:bb:92:ad:7b:46:c3:26:48:14:fe:cc:20:7e:
c2:f3:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:37 2025 by rpki-client