Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7345998F60F11EF888280BD762E951A.roa
File: E7345998F60F11EF888280BD762E951A.roa (raw, json)
Hash identifier: YsPjIcnsWhWbaOLEuqmOw9k3PSO7B04UNsYOzmev/50=
Subject key identifier: 78:31:D2:87:42:7F:FC:51:B4:6C:9D:53:28:22:E4:EB:C2:38:2D:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7345998F60F11EF888280BD762E951A.roa
Signing time: Fri 28 Feb 2025 20:09:24 +0000
ROA not before: Fri 28 Feb 2025 20:09:20 +0000
ROA not after: Sun 13 Apr 2025 20:09:20 +0000
asID: 138915
IP address blocks: 154.206.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93163 (0x16beb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:09:20 2025 GMT
Not After : Apr 13 20:09:20 2025 GMT
Subject: CN=67c217f3-a3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:6b:39:dc:f3:42:47:43:9f:96:28:1a:c6:
8b:e0:b2:5e:7a:1b:9e:19:13:dd:45:e1:ca:25:99:
dd:b0:5b:0a:b7:8b:ba:c1:26:86:07:f9:e1:be:69:
95:29:85:42:01:e1:d3:00:7e:31:88:10:94:bb:54:
69:99:a1:3c:b0:8a:86:c4:70:fd:c9:03:47:f1:0e:
75:61:f9:01:de:21:32:e9:87:85:aa:3a:fb:ab:ac:
52:85:ca:82:3a:3c:08:7e:40:20:91:0b:59:69:73:
22:90:57:7b:f8:14:ce:16:ef:45:a8:64:e9:d7:46:
5c:3a:52:88:ac:86:03:5b:d4:1f:22:b1:fe:62:70:
98:5b:87:1f:84:42:00:a5:52:40:7a:eb:dd:f6:ec:
6b:b8:77:b7:fa:6c:a2:5e:aa:f3:e1:71:4a:42:88:
61:d3:60:16:52:4e:8e:29:2c:e9:30:11:07:1d:e2:
ad:59:83:df:36:00:63:0c:c6:cb:aa:f5:29:ce:5f:
51:ce:b5:06:d5:05:44:3a:2c:77:ea:e4:e0:04:99:
c8:ff:07:a4:21:c1:67:7e:d3:37:a8:41:2c:f5:cd:
eb:83:52:c5:9b:06:46:5e:4c:7b:3d:a3:aa:6b:88:
89:64:65:20:8e:71:86:b1:4c:a0:de:37:36:37:c0:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:D2:87:42:7F:FC:51:B4:6C:9D:53:28:22:E4:EB:C2:38:2D:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7345998F60F11EF888280BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.112.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:bc:de:a7:a6:df:80:71:31:6a:26:26:0c:4e:a5:7a:ad:a5:
40:cc:9f:d1:a3:08:b3:7d:ba:b1:e9:e9:b5:81:3f:d9:ed:38:
b9:dc:5d:bf:47:a0:36:ae:8c:f8:1e:b4:66:7f:4d:bb:84:53:
2e:a6:91:14:16:c8:ad:72:ca:3e:68:d2:79:c6:70:04:44:1a:
6b:c3:7c:5e:1a:e9:f1:20:ca:a1:a6:fa:79:61:cb:70:bd:a7:
7f:2d:41:07:06:a8:c8:c3:ea:87:f7:79:ed:75:21:f4:db:fa:
2f:d6:42:57:be:d9:a3:49:94:88:f7:0e:18:3d:2d:b9:be:82:
03:7d:eb:5e:10:cb:eb:e6:7d:45:64:37:c4:f7:6f:a1:74:45:
68:31:61:d1:52:8d:fb:69:09:fc:e5:f7:f1:87:55:7e:cb:c2:
1d:70:bb:28:9a:60:58:56:25:1b:aa:a4:f7:38:cd:bf:2a:e0:
95:ae:fa:c1:b7:cb:f7:40:a7:fa:5a:82:3e:e3:c1:74:af:3e:
6d:91:f0:ff:05:2f:ff:cd:77:1e:7c:f6:dd:cc:ef:d1:f9:eb:
bf:ef:ce:f9:86:63:24:52:1f:86:dd:d2:7e:09:61:54:08:b4:
c0:b7:d0:88:e8:ee:7d:2a:73:ee:25:ff:f3:28:8b:14:ad:39:
83:4a:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:20 2025 by rpki-client