Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F86A65C60A1011F09DA50DBB762E951A.roa
File: F86A65C60A1011F09DA50DBB762E951A.roa (raw, json)
Hash identifier: 7/COeyBF4CSx2Gox4cbC4u+0Hyloq61JdN/AFqTEkcU=
Subject key identifier: D6:47:D0:5B:2C:17:03:7A:66:3A:5A:0F:E4:7B:59:A1:8F:AA:BB:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01764B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F86A65C60A1011F09DA50DBB762E951A.roa
Signing time: Wed 26 Mar 2025 07:07:25 +0000
ROA not before: Wed 26 Mar 2025 07:07:21 +0000
ROA not after: Sat 05 Apr 2025 07:07:21 +0000
asID: 135097
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95819 (0x1764b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 07:07:21 2025 GMT
Not After : Apr 5 07:07:21 2025 GMT
Subject: CN=67e3a7ad-ff5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:0b:a3:80:ec:f2:0e:37:d2:1c:d7:d9:30:
08:42:8e:b8:7a:1f:07:36:8d:98:d0:31:3d:e2:a3:
22:0e:34:ef:f6:36:e8:1a:47:7c:b2:7a:67:a8:5d:
88:57:61:4c:40:2f:ab:be:fa:ac:c9:19:70:a2:7c:
91:8b:f4:19:92:81:1b:de:79:c4:d2:73:51:93:d3:
00:ad:05:a6:88:26:4b:dd:b5:ff:c0:1b:dc:26:2a:
c8:62:18:10:03:0c:e4:b7:c6:41:f8:5d:24:9f:9c:
54:64:cf:ac:90:3f:66:ec:c6:f4:3a:82:f9:bc:21:
cf:26:75:76:1d:d5:4f:88:11:cf:0a:49:09:72:4d:
9e:2b:2b:2b:54:2b:4a:17:c6:23:a0:73:6c:55:e0:
ee:0c:cc:14:bb:6a:a9:0b:b0:03:72:a5:4a:37:a8:
17:35:03:95:14:de:70:bd:04:8b:c3:56:7f:37:df:
93:3b:85:c7:b4:dd:eb:ed:5a:74:8e:69:ed:23:06:
f2:da:3e:0b:f9:14:79:a9:61:ca:6a:0b:cd:92:aa:
df:8b:9c:2a:26:77:6f:eb:85:f6:4f:db:23:0b:95:
8c:2a:03:6c:fb:25:91:31:a7:89:54:e1:2f:30:ed:
4b:f5:0c:fd:98:cd:12:7d:f7:9a:a8:e8:fb:c5:a4:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:47:D0:5B:2C:17:03:7A:66:3A:5A:0F:E4:7B:59:A1:8F:AA:BB:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F86A65C60A1011F09DA50DBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
09:a0:cd:79:8d:96:cd:cf:b4:8e:94:51:9b:e3:b3:0c:28:16:
4a:76:a7:56:02:4c:18:1e:be:ff:db:a3:16:14:1c:af:fa:5c:
d5:5f:f7:53:a8:ba:68:f3:fb:06:fd:8e:93:83:b5:29:e3:ea:
23:8e:15:5f:f3:63:cb:da:c0:33:72:0c:13:f6:78:c8:f1:97:
9d:8a:bf:d4:97:57:ce:8d:a8:df:3c:0a:a9:18:04:39:d1:60:
dd:d8:c0:4c:c9:4f:90:22:ce:82:f4:de:91:5e:7d:f7:91:75:
32:77:8a:b5:c8:72:8f:a2:36:e8:cf:9e:13:c8:11:50:99:a1:
76:92:ce:4e:31:ef:fe:12:31:5c:14:5f:3e:f2:31:db:af:a1:
94:79:d3:02:db:af:67:b8:ec:f5:c4:d0:22:c6:20:8a:1b:53:
09:69:42:a6:fe:d0:85:a7:81:d4:52:aa:6e:88:e4:bb:c7:bc:
9e:c5:12:b6:a5:3d:64:d9:a7:fb:3e:dd:16:2b:12:ce:b5:91:
b8:d0:65:95:25:3e:6c:0a:16:78:95:ad:50:9e:12:d7:4a:e3:
7e:4a:4b:d4:c2:f3:65:d7:7a:c5:cf:69:66:da:30:af:65:6c:
33:16:13:03:c2:b5:a0:f9:13:19:2e:26:34:ce:a0:87:31:6b:
80:d9:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:35:54 2025 by rpki-client