Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0B9F6D2F82E11EF9B6BB5B1762E951A.roa
File: F0B9F6D2F82E11EF9B6BB5B1762E951A.roa (raw, json)
Hash identifier: 1D1xyXk3LFNcHFZTX/L0OrODLkMfmgFRbSqo48lAkdE=
Subject key identifier: C3:3E:E3:EE:BB:59:30:D1:2C:30:EA:C5:12:45:CD:59:5B:3F:5F:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0B9F6D2F82E11EF9B6BB5B1762E951A.roa
Signing time: Mon 03 Mar 2025 12:56:36 +0000
ROA not before: Mon 03 Mar 2025 12:56:32 +0000
ROA not after: Fri 01 May 2026 12:56:32 +0000
asID: 136744
IP address blocks: 154.206.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94389 (0x170b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:56:32 2025 GMT
Not After : May 1 12:56:32 2026 GMT
Subject: CN=67c5a704-ef68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:0d:21:e3:29:0e:d7:0b:e1:74:30:d2:98:
fd:c5:a2:bd:d4:0e:21:96:f9:a2:b2:65:fe:7f:c3:
59:1d:7c:e6:83:fd:35:02:e6:eb:33:4b:af:90:4c:
a6:6d:75:21:4b:65:35:00:16:6c:fe:5f:f3:ec:e2:
56:f7:68:0a:8d:39:78:ac:02:85:c1:0e:14:b4:d4:
17:ef:c3:b0:10:dd:8f:49:7c:54:fe:40:d7:d9:cc:
f7:f7:f7:6e:46:98:85:8b:87:67:61:46:19:63:49:
29:1b:4f:42:4b:b7:d3:79:43:6e:eb:55:3f:57:6e:
9b:a7:fa:87:fd:37:9a:90:21:cd:e2:b6:5d:b9:ce:
69:83:b3:2b:92:a6:a8:08:5e:8b:bc:87:bc:64:07:
93:73:a9:69:dd:c5:d9:2c:06:89:26:25:6b:a3:43:
c1:4d:ce:47:e2:c3:bf:d2:49:1f:e5:fb:7a:42:ba:
61:6f:b4:48:9a:ef:51:e0:60:7a:a7:22:e6:03:dd:
e4:f7:c6:14:e5:02:31:0f:e9:b1:76:23:d5:52:cf:
08:cb:f4:ac:a1:06:e6:5e:72:8b:c8:df:d4:32:c0:
87:da:ac:ca:78:eb:94:62:cc:a6:7e:06:9a:00:4f:
72:2d:3c:dc:c5:82:16:1e:26:44:46:b6:e6:47:f7:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:E3:EE:BB:59:30:D1:2C:30:EA:C5:12:45:CD:59:5B:3F:5F:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0B9F6D2F82E11EF9B6BB5B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
48:bf:16:97:1a:59:3b:10:91:8d:9b:dd:6b:f2:23:8d:e4:d8:
d6:4f:8e:27:31:1c:e6:c5:d7:a7:1f:37:47:27:5a:de:51:fa:
f9:32:c5:0a:19:87:5c:15:c2:27:4a:97:43:cb:95:b1:53:95:
14:42:6f:e6:6e:1d:6d:57:48:eb:8d:3b:da:cb:86:6c:9b:4b:
52:11:dd:ad:6a:83:d1:c9:08:53:d8:dc:59:7a:88:35:e9:3b:
a5:68:d6:a1:9c:fc:22:ec:84:d9:7f:0f:07:8b:e2:96:da:be:
04:6a:57:ac:60:1e:a6:38:16:b3:0a:b7:10:a5:a3:e8:05:da:
57:1f:a4:52:d4:a0:39:ae:8d:d5:e1:d8:d4:61:ac:9c:61:28:
64:8e:b4:c2:a1:6f:49:96:a2:ec:37:5e:79:20:de:b4:1c:c5:
52:0b:93:1f:7d:82:01:10:ce:d1:55:7f:a9:5b:4f:f1:07:2b:
45:91:72:6f:c5:9f:53:b2:40:48:74:51:29:25:26:ec:0d:35:
a6:63:79:a9:58:9d:31:c8:ff:b3:bc:a3:f7:54:cb:df:bc:9a:
97:23:60:dc:23:2f:c3:9c:93:f9:95:10:0f:5b:d9:52:59:92:
d0:3c:61:1f:76:0a:47:b1:85:99:88:fe:f6:a8:ed:f8:b1:cd:
c2:49:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:00 2025 by rpki-client