Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23AFD5C062C11F0BF84437A762E951A.roa
File: E23AFD5C062C11F0BF84437A762E951A.roa (raw, json)
Hash identifier: uhnDlwEh64v1h8tkZCgAT7bj+uaaSFkrRt3kVPU3858=
Subject key identifier: BC:2F:DB:7D:20:CD:6F:FB:BA:C1:99:72:F2:B4:F4:1F:68:E3:DE:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01755F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23AFD5C062C11F0BF84437A762E951A.roa
Signing time: Fri 21 Mar 2025 08:17:09 +0000
ROA not before: Fri 21 Mar 2025 08:17:06 +0000
ROA not after: Sun 27 Apr 2025 08:17:06 +0000
asID: 395793
IP address blocks: 154.200.80.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95583 (0x1755f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 21 08:17:06 2025 GMT
Not After : Apr 27 08:17:06 2025 GMT
Subject: CN=67dd2085-fbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:2a:df:16:46:d9:fc:61:b6:14:2c:4c:f8:
d8:85:35:35:90:b9:01:77:9a:33:46:0f:c0:bc:39:
d5:91:1f:f2:57:1b:24:7d:2a:15:c5:67:d9:01:35:
43:77:de:e7:e5:27:01:d7:02:30:3f:13:ec:fb:9d:
19:fb:3f:9f:67:08:c5:f2:b3:5d:b3:d9:80:b2:b6:
85:0a:77:ee:80:63:26:4f:0c:c3:63:78:a0:30:e1:
2f:db:90:32:9e:61:44:c3:b8:c6:3b:8e:b3:bb:0e:
a9:7f:7a:93:22:3c:2b:40:3e:3f:87:21:5e:10:cf:
b5:46:84:86:b2:09:5c:2c:94:0e:d5:ab:f4:05:a4:
b7:54:7f:46:dc:26:f2:dd:4d:40:06:5b:05:a3:04:
6f:2c:61:34:13:a8:f3:10:10:e2:0f:f8:95:de:6a:
3a:db:50:ee:68:07:62:d8:55:84:cc:a4:af:b2:f8:
23:53:c5:6a:14:d5:06:76:a0:bb:40:b6:94:16:08:
39:60:fb:6d:9e:c1:55:e0:bb:bd:49:eb:33:f4:aa:
ed:59:ae:92:5a:fd:7f:c3:dd:2f:17:c7:0f:ec:b3:
73:58:93:85:a5:4b:c1:f2:f1:28:5a:1f:39:1f:7f:
59:9f:26:13:53:c7:d9:6d:98:19:7c:87:b4:40:8a:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:DB:7D:20:CD:6F:FB:BA:C1:99:72:F2:B4:F4:1F:68:E3:DE:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E23AFD5C062C11F0BF84437A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
bd:80:0c:7e:31:b8:8c:42:91:e0:55:44:78:b8:12:5a:cd:57:
e6:85:fa:09:56:24:7c:0d:3b:6f:db:6d:fc:62:b7:07:1c:45:
99:75:b0:20:d5:84:89:cb:e5:7b:c6:59:b6:e0:d8:bc:64:cd:
cd:ea:22:21:07:1f:91:3a:ec:67:45:df:30:ef:76:4b:bf:a8:
89:04:1e:93:64:cd:fd:ee:a5:a5:87:11:d8:27:bb:02:44:0a:
15:cc:9e:db:bf:c8:7c:6e:bd:fb:8a:2b:af:f1:81:3e:c4:fc:
39:db:97:b7:55:03:5a:1c:90:4c:55:1c:29:b2:7f:f0:93:58:
b1:28:2f:02:ab:0b:10:7a:7b:b6:50:e0:87:88:7e:fb:3b:e6:
ae:9b:d6:69:f8:55:91:1a:e6:65:19:c0:3e:a0:8c:13:39:27:
24:c2:32:80:9c:44:17:11:bf:80:18:4c:3d:96:36:88:47:fb:
74:56:4e:6e:fa:4f:67:1a:ed:5a:78:6b:fc:0a:ec:06:bd:d3:
8c:34:a8:4b:d0:d4:25:2a:2a:e6:81:6b:9f:f5:d5:19:6f:a2:
e0:77:9b:da:49:99:cd:3f:7d:18:56:33:c4:67:9c:1a:f6:7d:
cd:8f:cd:9a:71:27:a1:5c:b4:1f:2d:92:f8:ed:ab:d5:8f:3f:
b2:ce:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:53 2025 by rpki-client