Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56D930AF3B511EFA2094884762E951A.roa
File: F56D930AF3B511EFA2094884762E951A.roa (raw, json)
Hash identifier: oxaO5SVtpThA89qaof/9EQwEOuig/vOSP6VPWY4eRQ0=
Subject key identifier: EB:87:B9:96:FA:4C:85:0C:7F:C1:CE:64:6A:D4:91:F3:FE:DE:13:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56D930AF3B511EFA2094884762E951A.roa
Signing time: Tue 25 Feb 2025 20:20:30 +0000
ROA not before: Tue 25 Feb 2025 20:20:27 +0000
ROA not after: Wed 09 Apr 2025 20:20:27 +0000
asID: 138915
IP address blocks: 154.95.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90061 (0x15fcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:20:27 2025 GMT
Not After : Apr 9 20:20:27 2025 GMT
Subject: CN=67be260e-a1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:0d:57:c2:cf:0c:18:f8:c5:43:0a:0c:22:
52:95:e5:ac:26:ec:72:46:a8:86:63:e9:cd:b9:2a:
93:b0:f2:ec:47:61:08:68:71:ab:b1:3b:db:0f:9b:
91:d2:2c:2c:72:3c:df:5d:f4:3b:7a:8f:5b:dc:3c:
1e:68:e3:2b:62:8f:74:cc:e8:e0:99:19:02:7b:47:
ee:6c:c0:be:a0:bf:ae:99:e0:2b:fc:bd:28:16:9b:
c0:fb:50:d6:d8:50:2a:b4:11:8c:77:7d:ac:d0:fe:
6b:40:8b:3f:a5:68:db:1b:23:72:c1:ac:16:b0:cc:
f0:bb:1d:13:a7:ab:b8:19:64:f0:e2:56:c1:55:75:
eb:5b:54:02:9a:1c:1b:a4:8e:9b:d1:61:a5:41:a6:
76:31:a0:32:4f:b6:1b:01:bb:9f:0b:15:25:38:56:
2b:1c:ae:05:90:e1:d7:5d:58:46:7f:29:87:3a:ef:
44:76:b5:88:6d:d7:67:3d:c1:0c:12:62:a1:e0:1e:
26:dd:0a:57:8b:f6:33:81:f3:c8:fe:ad:0f:ef:5c:
39:0c:0d:ba:68:55:88:32:14:d9:d1:67:7d:93:83:
af:11:cc:d1:ff:d7:b7:a4:cc:54:6c:dc:db:2e:c4:
2c:18:3c:ae:b6:2b:04:94:0e:0a:dd:9b:0e:6d:36:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:87:B9:96:FA:4C:85:0C:7F:C1:CE:64:6A:D4:91:F3:FE:DE:13:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F56D930AF3B511EFA2094884762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.86.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:5c:c7:ae:1c:5c:13:47:8f:61:ce:6f:86:2b:97:25:cd:83:
40:84:68:53:f4:4e:8b:c6:93:fa:81:8a:17:ae:e5:06:9f:0f:
1e:03:14:d8:27:a8:c1:b6:df:c5:f4:bb:25:7a:36:77:36:6b:
fa:ad:30:7b:53:5a:da:af:c4:36:87:02:0f:66:54:75:f9:7b:
47:8b:d6:08:10:a4:2c:53:15:c6:4f:e1:43:e1:3f:de:48:2e:
06:28:3c:b3:7c:ee:60:55:60:4f:ef:6a:e9:25:16:e4:72:c1:
1c:d1:80:4e:64:29:f5:60:8f:6d:f2:b9:9c:13:a1:d1:f7:db:
bc:2a:f3:3f:77:4f:b0:63:f9:2b:81:22:12:2a:87:dd:ec:6a:
54:1f:08:fc:39:b7:a8:76:d8:76:4f:ed:34:75:df:6b:32:77:
e8:a0:36:90:58:67:5c:a2:54:e3:0c:1f:ef:95:a2:41:e5:02:
b0:9e:41:82:af:9f:b3:68:1f:12:40:6f:e0:75:3a:1c:40:63:
13:0a:0f:9a:e3:f7:75:5f:92:55:ea:72:7a:6b:d7:12:90:e8:
2d:1c:00:21:3c:cd:d8:c0:48:fd:23:b5:43:b9:26:86:fc:59:
2b:ed:e4:21:76:35:4a:bc:58:34:a2:55:3b:69:0b:35:d4:22:
25:17:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:48:57 2025 by rpki-client