Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E1B654F61811EF95E68A7B762E951A.roa
File: F4E1B654F61811EF95E68A7B762E951A.roa (raw, json)
Hash identifier: ohnYZbprZCNsE0sv2gr2ZqDdBsHsh3f5LhtRk9POKTM=
Subject key identifier: B2:E4:2F:2D:1B:29:DF:2C:8C:E2:6C:9A:D5:FD:0F:AD:8C:F7:7A:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E1B654F61811EF95E68A7B762E951A.roa
Signing time: Fri 28 Feb 2025 21:14:12 +0000
ROA not before: Fri 28 Feb 2025 21:14:08 +0000
ROA not after: Sun 13 Apr 2025 21:14:08 +0000
asID: 138915
IP address blocks: 154.206.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93227 (0x16c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:14:08 2025 GMT
Not After : Apr 13 21:14:08 2025 GMT
Subject: CN=67c22724-3112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:c4:f3:61:28:bb:34:c0:4e:56:36:2e:25:
59:26:2f:4a:12:07:4b:c6:c8:ad:3f:8f:60:ff:4c:
cf:6d:d8:5b:5f:85:45:d6:ed:9b:c2:4c:32:a1:13:
5a:8c:b5:1a:cc:49:05:4f:91:e9:7b:c5:3f:4b:7b:
0a:17:55:62:ec:85:fb:3f:d1:13:7d:fe:58:89:d0:
29:2b:0b:21:37:4e:bf:6e:21:39:84:5b:13:70:a9:
59:83:78:4a:57:9b:ec:3d:ee:d0:d8:1d:1c:f0:4f:
ec:11:c7:d6:91:3b:ee:a0:ef:a5:a4:e4:37:c6:5e:
5b:6c:7a:c4:0d:52:3c:69:29:b6:e1:51:36:18:6b:
be:3b:58:4a:aa:3e:ff:5f:3b:bf:db:3a:98:fb:1d:
13:8a:3b:85:f1:63:63:fa:1a:6f:f9:24:4d:f6:a5:
21:5a:49:7e:c7:64:60:ab:bd:25:69:4b:ef:b0:09:
0c:ef:e4:24:cf:ed:d6:6f:d2:7c:08:83:63:a0:d8:
23:26:79:f1:46:53:2b:34:8b:60:50:47:0a:23:3b:
82:84:15:4a:84:16:b2:c7:39:e0:1b:81:a7:72:8a:
e6:c6:2b:a4:56:1b:5f:47:5b:e5:62:1d:fb:82:6d:
a4:f0:84:11:2e:fd:18:a3:2c:ff:57:cf:07:4e:58:
69:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E4:2F:2D:1B:29:DF:2C:8C:E2:6C:9A:D5:FD:0F:AD:8C:F7:7A:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E1B654F61811EF95E68A7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.104.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:0f:1a:00:33:96:11:43:5e:34:f3:99:d1:b6:e6:f1:f9:85:
92:73:07:0e:a8:20:df:97:1e:ba:c2:fe:f8:57:45:d3:88:1f:
e3:ba:2e:9a:f9:e0:4b:a4:54:5c:0a:61:96:77:4a:6b:c2:fa:
61:c9:e7:af:9f:73:ca:e4:55:1d:1d:62:8a:15:d1:4e:12:44:
67:5c:16:f2:3c:95:b5:bc:6f:b8:b5:d0:37:d1:3d:8a:e7:60:
1b:79:a4:1a:27:6c:91:b3:e8:ea:de:19:61:3d:12:a1:9a:16:
74:93:96:bc:f3:07:ce:b7:0b:5c:f7:b9:be:34:b9:af:3d:b2:
d6:a4:fd:ee:e6:49:ef:a1:a2:46:c6:54:be:76:69:85:2e:ef:
13:e5:ff:3e:81:0e:86:1f:49:e8:46:aa:10:75:d4:ac:6c:67:
11:4d:62:21:50:c8:6f:f1:45:27:7b:47:22:e9:79:0f:2d:bc:
13:a4:92:ce:e9:dc:f4:c9:26:58:f6:cc:a8:34:ef:3f:4a:76:
a5:89:61:9a:6a:fc:82:2e:cb:a2:7a:23:46:c6:a2:53:35:6f:
ae:e1:60:c5:00:fd:48:d2:20:f6:d6:05:7b:1d:75:b0:ec:88:
6b:67:66:75:dc:ce:b3:ae:fc:a5:6d:f1:4a:a9:d0:a1:61:54:
df:31:d6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:05 2025 by rpki-client