Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E67CA1A20A0C11F0BD7AB4A2762E951A.roa
File: E67CA1A20A0C11F0BD7AB4A2762E951A.roa (raw, json)
Hash identifier: 8xj7sbFWxy+U7StPPc1eKsfVOf3e5OwJMVpIoz0NVwk=
Subject key identifier: BB:B5:77:24:AB:BE:67:2C:1E:08:74:5E:65:6A:95:9F:31:9D:C0:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017649
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E67CA1A20A0C11F0BD7AB4A2762E951A.roa
Signing time: Wed 26 Mar 2025 06:38:17 +0000
ROA not before: Wed 26 Mar 2025 06:38:13 +0000
ROA not after: Tue 15 Apr 2025 06:38:13 +0000
asID: 59642
IP address blocks: 154.84.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95817 (0x17649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 06:38:13 2025 GMT
Not After : Apr 15 06:38:13 2025 GMT
Subject: CN=67e3a0d9-3aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:17:e7:06:60:a9:d8:61:9c:44:6b:21:c1:
e9:5d:9d:dd:61:4f:cc:b4:08:1b:a0:84:54:a7:0e:
1b:ed:e2:31:85:fa:02:67:3d:e6:ba:e0:bc:33:90:
19:49:37:72:4e:14:7d:de:98:50:0e:51:6b:45:57:
6b:9b:b7:e4:e9:cc:a0:0f:80:8c:ae:d6:e3:66:33:
c0:43:36:59:ab:62:a7:c5:a8:5e:d9:8b:fc:32:ce:
b4:5b:af:34:54:fe:a3:b1:03:97:9c:14:ce:54:69:
84:f8:42:69:7a:fc:89:5b:5a:20:8d:b5:cd:88:80:
c1:67:fd:dd:0a:fd:14:5c:16:50:e8:98:87:03:81:
5c:16:7e:33:d5:dc:51:d7:da:c4:52:f9:84:88:b3:
05:33:d0:35:f8:fd:52:60:af:3b:ae:04:d6:4a:77:
8c:35:8a:4e:af:4a:91:1a:af:5e:e9:6b:33:79:dc:
b7:2f:58:f8:b1:ac:61:fd:ad:4f:1f:26:20:a2:6d:
18:5d:c6:76:a2:e5:9f:57:80:77:66:21:e2:be:fe:
ab:c1:eb:30:a7:99:f2:af:84:a1:6a:b9:e8:f6:37:
06:e2:fb:89:fe:ad:69:ba:3c:20:3c:04:65:10:30:
a9:bf:c3:cf:1b:1e:29:08:f3:41:cf:46:36:f6:48:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B5:77:24:AB:BE:67:2C:1E:08:74:5E:65:6A:95:9F:31:9D:C0:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E67CA1A20A0C11F0BD7AB4A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.164.0/24
Signature Algorithm: sha256WithRSAEncryption
91:36:4e:1d:69:92:f3:21:b5:20:f6:8e:6f:86:b6:37:67:dd:
d4:58:0c:cd:a9:8c:a9:59:67:e7:e3:c0:02:e7:53:7c:92:7d:
01:a0:27:db:c4:8c:2a:94:68:c9:3c:0e:0e:4c:69:af:87:ae:
08:52:55:12:0b:4a:09:79:09:ca:fb:c5:d1:6c:1c:70:6b:68:
6f:b9:f5:b7:04:cc:6a:dc:80:0e:c1:03:59:89:0a:97:80:d6:
9f:7c:55:fa:40:15:76:e2:97:d9:5b:27:59:16:30:18:46:d9:
9e:dc:97:0b:2b:74:2d:56:38:cf:26:33:77:32:49:9f:db:ff:
ed:1f:ba:df:e9:99:3d:5b:fe:a0:58:56:73:68:28:4e:67:15:
40:af:1a:fa:47:0d:41:03:8e:dc:16:89:99:ca:54:f2:8a:95:
54:e5:95:6a:36:27:5f:a1:37:c9:2d:a7:d9:73:1d:83:7d:73:
74:72:21:65:45:00:e0:1a:fb:a1:07:3a:f5:73:cb:f2:11:cc:
dc:39:74:c5:f3:72:7d:e5:b1:64:c7:29:ae:c6:3b:d5:3c:be:
7a:ee:34:19:0a:ba:55:5a:fa:52:1d:54:6c:ef:c1:3f:6a:28:
31:f3:5c:91:a5:75:43:11:7f:87:a8:b5:30:ed:7d:c3:10:f4:
dc:46:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:44 2025 by rpki-client