Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28A943AF8D911EFB87240BE762E951A.roa
File: E28A943AF8D911EFB87240BE762E951A.roa (raw, json)
Hash identifier: isOOfNjWkVEF1Nvl8b38CC1X7t9+mwAnyb/ObytyT88=
Subject key identifier: 1C:55:02:8E:00:AF:FB:68:43:BB:D5:3A:6F:6C:90:41:EF:F5:18:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017192
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28A943AF8D911EFB87240BE762E951A.roa
Signing time: Tue 04 Mar 2025 09:20:16 +0000
ROA not before: Tue 04 Mar 2025 09:20:13 +0000
ROA not after: Fri 04 Apr 2025 09:20:13 +0000
asID: 200373
IP address blocks: 154.91.171.0/24 maxlen: 24
154.94.12.0/24 maxlen: 24
154.94.13.0/24 maxlen: 24
154.94.14.0/24 maxlen: 24
154.94.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94610 (0x17192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 09:20:13 2025 GMT
Not After : Apr 4 09:20:13 2025 GMT
Subject: CN=67c6c5d0-deaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:3b:70:c5:13:22:f3:78:f7:1b:bf:49:7e:
25:1b:87:bd:19:6b:8e:df:97:e0:48:75:37:b5:0d:
50:9f:f9:1f:db:14:39:78:f7:c7:e5:b6:13:1b:94:
7a:02:12:9a:1d:c6:5d:3c:d8:7c:f6:f1:93:c3:89:
8e:99:b1:1e:a8:76:c4:d5:f1:4c:4e:e4:e8:35:38:
6d:c9:f3:44:9b:e7:4a:69:33:bb:0f:3f:e1:bf:05:
92:c5:e4:65:32:0c:e8:b3:23:d8:d7:68:27:a1:43:
c1:3c:02:11:87:34:0f:f2:44:43:58:99:e1:32:fa:
7f:27:1c:2f:53:b8:a9:f7:45:fa:2c:2c:b2:3d:78:
6c:63:f9:36:15:b7:8a:1c:0c:82:3f:fc:0d:7a:ad:
aa:1b:5a:ad:a2:59:39:58:89:74:d1:a7:e1:10:9a:
16:19:80:85:9e:01:52:54:a8:4b:d1:c4:39:31:5c:
8b:78:c5:96:d9:f2:39:f4:8d:1a:83:7c:98:90:69:
3c:f1:11:ea:a7:99:4a:2d:59:13:c1:64:17:4b:9e:
e6:7e:26:b5:44:e4:dc:a5:c8:04:ca:6d:af:91:1c:
29:00:a2:df:ef:71:5e:7b:b5:8c:b4:fc:1c:b6:29:
4e:97:b7:a1:6a:e1:14:50:04:ff:12:38:8f:66:ad:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:02:8E:00:AF:FB:68:43:BB:D5:3A:6F:6C:90:41:EF:F5:18:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E28A943AF8D911EFB87240BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.171.0/24
154.94.12.0/22
Signature Algorithm: sha256WithRSAEncryption
82:24:bc:85:17:40:f4:9c:56:1b:24:b9:17:d6:f4:6d:8b:68:
47:7e:49:6f:61:0c:d4:d3:c9:b4:8a:50:1f:56:fa:61:05:aa:
a1:31:44:cb:cf:ce:95:03:aa:e8:ca:29:8f:e7:95:5d:e6:ab:
42:81:2e:96:03:75:58:6d:42:15:71:e6:8c:15:db:8f:3a:df:
70:dc:15:31:2a:63:a6:e6:2f:73:95:96:9f:62:90:24:49:ba:
d1:b9:f1:9f:3c:52:2c:17:5d:99:94:a6:6b:57:a1:46:7b:2e:
50:71:c3:a9:a3:91:14:45:b5:83:bf:2c:2b:cc:fc:81:41:08:
ba:c6:5b:a2:16:a1:ee:a7:01:14:ea:3e:d0:61:4a:7f:c0:46:
d6:d5:7f:17:d6:1a:43:ae:4b:9c:c9:49:06:0d:b4:fb:c4:0d:
2c:2e:a7:4b:cd:f3:35:45:64:8d:fb:95:19:c4:3b:f2:dc:d9:
0f:66:36:b8:3b:6b:97:af:ab:3d:79:e4:a5:59:95:f9:73:d9:
b1:82:59:63:20:1c:3a:a6:72:8a:b2:7a:ba:35:c9:f6:8c:af:
8b:f1:3d:9e:9a:51:66:0f:5f:b6:40:ce:e0:41:53:aa:58:c0:
49:8c:ef:f1:bf:ee:1e:96:df:20:9e:0d:f2:ea:12:8e:32:3e:
17:9d:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:43 2025 by rpki-client