Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F727CE5EF53B11EF9AB14693762E951A.roa
File: F727CE5EF53B11EF9AB14693762E951A.roa (raw, json)
Hash identifier: 3Vw/OryT0dEghGNkzlpHXa+2CEqi6Hj2QjKkcxschRo=
Subject key identifier: CF:B3:99:97:1A:AD:AE:B3:CE:73:4C:98:D2:7E:FB:7C:B7:74:8C:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016982
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F727CE5EF53B11EF9AB14693762E951A.roa
Signing time: Thu 27 Feb 2025 18:52:17 +0000
ROA not before: Thu 27 Feb 2025 18:52:13 +0000
ROA not after: Sat 05 Apr 2025 18:52:13 +0000
asID: 205125
IP address blocks: 154.203.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92546 (0x16982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 18:52:13 2025 GMT
Not After : Apr 5 18:52:13 2025 GMT
Subject: CN=67c0b461-b0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:bd:d8:89:6f:a9:36:9c:01:60:b2:8e:f5:
2b:1b:55:aa:c0:9a:17:34:ad:a4:99:48:bf:f5:7e:
9a:ae:dd:8c:75:e3:96:b6:8a:d8:01:3e:8e:b7:ae:
a4:6a:2b:35:39:c7:b2:37:37:94:6d:0d:f2:14:20:
af:d1:6a:c8:e0:4f:1b:62:9d:b3:ca:3b:c5:a2:65:
08:b9:2c:ef:9c:48:f8:57:35:34:d1:8e:22:88:bf:
f7:cb:a4:63:1c:7a:98:08:07:01:16:28:7d:d7:e8:
5f:b5:b9:fb:53:54:95:92:3e:b7:3b:9e:a6:57:5e:
61:fd:5d:03:81:91:a9:34:78:9d:77:41:05:73:ab:
60:eb:4f:92:de:dc:50:02:09:95:52:62:bb:b8:a6:
af:75:72:27:d9:61:a9:18:ed:5c:d3:53:b3:c7:9f:
97:6f:31:e2:b2:bb:53:07:bb:ef:76:34:cc:c6:6d:
6e:79:9d:16:53:0a:4c:ab:0f:74:28:19:9f:0d:ac:
a2:cc:6c:03:07:01:a4:a7:55:17:c2:d8:1f:d7:4c:
a2:cd:6e:0c:04:1b:65:16:ff:3c:8d:5c:c6:16:02:
28:b7:a7:df:79:aa:16:80:3b:67:ed:dd:fe:86:e4:
5d:17:e2:9f:a9:6b:78:a4:ed:8a:10:a5:12:0a:ce:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:99:97:1A:AD:AE:B3:CE:73:4C:98:D2:7E:FB:7C:B7:74:8C:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F727CE5EF53B11EF9AB14693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.193.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f1:ca:cb:68:34:40:4b:54:b0:ac:d3:eb:cf:33:53:be:df:
69:f3:66:09:0a:9c:ac:7c:96:ac:4f:cf:f3:1a:1c:79:06:fe:
e4:11:24:79:e9:8c:d5:40:18:18:ca:1a:d2:12:a2:b9:05:ce:
22:8d:10:bc:31:27:cc:d3:30:d4:12:b9:6f:14:1d:dc:6e:2e:
73:fd:db:af:a3:05:51:a2:64:93:2b:7c:ce:a4:8a:c3:b5:a6:
d8:6b:3a:fb:4c:f6:ea:fb:91:da:2c:da:fd:5b:1e:e8:0b:e7:
78:3f:6f:46:b0:ae:d6:ff:d6:23:c8:24:cf:c8:3e:58:51:7b:
ac:76:94:05:7c:33:43:2a:8b:6f:41:d6:4b:eb:00:cb:81:20:
45:80:0f:1c:e1:cb:81:10:fc:5a:95:19:de:91:5d:9f:06:54:
b5:d6:3e:36:c9:2c:ba:da:ce:b9:8b:42:be:6d:a9:48:b6:1f:
df:9d:83:96:7b:ae:7a:b6:99:c1:8d:6b:46:91:98:c7:22:cc:
dd:f1:98:2e:56:cd:dc:63:73:c9:01:6e:d5:af:7a:84:d3:2b:
3a:4b:f9:65:0c:c6:8a:04:35:29:68:1f:a2:cb:3c:00:c3:76:
16:a9:aa:d2:86:fb:0b:e4:21:d9:d2:b8:4c:0d:fd:be:e0:96:
46:e2:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:40 2025 by rpki-client