Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F85E5BF8FB2611EF920F2750762E951A.roa
File: F85E5BF8FB2611EF920F2750762E951A.roa (raw, json)
Hash identifier: ffTX3jCdDfz61lKzHarmhPBURbw2NLf7F+Ypzq8kPLw=
Subject key identifier: DB:68:C1:CC:F3:17:83:8F:8E:44:9E:3F:B2:40:2A:4D:26:F8:CD:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F85E5BF8FB2611EF920F2750762E951A.roa
Signing time: Fri 07 Mar 2025 07:37:07 +0000
ROA not before: Fri 07 Mar 2025 07:37:02 +0000
ROA not after: Mon 14 Apr 2025 07:37:02 +0000
asID: 152179
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94898 (0x172b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 07:37:02 2025 GMT
Not After : Apr 14 07:37:02 2025 GMT
Subject: CN=67caa223-5387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:95:2f:d1:ec:b6:ac:62:5a:d8:3c:6e:87:
c6:d8:85:82:6d:a6:b7:99:7b:9a:39:e3:81:6e:6f:
94:6a:22:03:33:0a:0b:38:6c:a2:ec:6c:ab:98:16:
e6:46:39:5a:31:6b:54:11:c6:c2:f3:04:89:04:10:
3f:cf:a8:3e:6c:c7:17:b6:9e:48:8f:b1:89:f4:10:
8c:7c:22:4e:61:0c:e7:cd:0a:eb:e4:78:84:62:2f:
28:27:88:0d:ab:3b:f5:9b:01:b9:32:c0:19:0c:25:
97:25:77:43:cc:c0:a1:c1:05:d6:c6:9f:cf:32:08:
97:70:29:ce:7b:63:9c:7b:cc:35:8a:55:d7:57:8d:
7b:09:ac:b5:e2:45:d7:ef:cb:c7:7e:32:01:59:70:
80:79:a8:0f:fc:95:a1:8c:ce:a0:fb:ce:7a:ac:fa:
48:6d:50:2a:fb:a4:24:6d:2a:96:0f:77:6e:7a:99:
6b:76:89:07:e1:cd:00:00:35:b5:b8:cd:68:84:c1:
5a:9b:5b:60:65:c5:8e:22:bc:eb:c3:20:e7:ed:06:
36:d0:b2:48:ee:cd:f5:f2:13:bb:da:5c:76:c1:0d:
aa:83:5a:50:d8:5f:5a:b2:78:d2:4b:aa:f8:e8:95:
3d:86:4e:3f:03:db:a6:e4:95:d5:ba:00:47:f5:01:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:C1:CC:F3:17:83:8F:8E:44:9E:3F:B2:40:2A:4D:26:F8:CD:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F85E5BF8FB2611EF920F2750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5a:84:71:e4:2a:f3:c8:ec:65:b8:c2:75:81:d1:4e:2a:5b:
05:26:03:c3:1d:69:84:e7:f5:73:d6:67:ad:b3:d7:3a:35:07:
ec:56:18:f6:25:71:bc:f7:f1:78:07:ab:e0:5c:97:fa:76:9d:
c3:6c:53:e7:51:99:b7:cd:30:39:09:5b:b6:d0:99:9d:1b:3a:
c2:78:1d:fa:1c:4b:6f:0f:29:dc:a5:23:22:f5:c6:8d:da:d2:
98:07:f6:47:7b:56:ad:63:90:dd:2b:53:1d:a9:62:62:c0:72:
6d:c3:b4:2a:45:57:2e:1f:7e:a4:e6:d1:91:f7:c1:17:14:11:
4b:fa:86:79:54:51:74:4f:ed:cf:d1:f8:ce:8a:b8:38:d3:17:
8d:67:cd:f2:0a:e9:32:6e:2a:fb:3a:f2:be:ed:dd:eb:3d:59:
59:af:5d:4d:e1:39:54:53:1b:f3:de:a0:0f:5c:b2:1f:b2:aa:
04:79:ac:f6:87:79:1b:22:a0:b3:7a:e4:f1:8f:1e:14:9e:8b:
b2:d0:54:c1:9e:8e:e0:ab:5f:ef:22:34:38:80:81:76:6a:fc:
3f:34:07:5e:99:c1:68:c3:19:67:39:c0:5a:16:b9:70:43:9d:
b0:6c:72:4e:51:43:23:13:34:29:36:c8:8f:b8:2b:8f:a6:e7:
01:40:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:42 2025 by rpki-client