Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F88303F0ED1011EF8E562A84762E951A.roa
File: F88303F0ED1011EF8E562A84762E951A.roa (raw, json)
Hash identifier: tpcolVMI2Mvx/Dc638DHHEH/UIDCJloYf/SBrkpbVb8=
Subject key identifier: 64:6B:0E:21:5E:8F:2B:E7:91:F1:28:35:6D:22:E4:D6:E0:83:D6:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0157DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F88303F0ED1011EF8E562A84762E951A.roa
Signing time: Mon 17 Feb 2025 09:24:22 +0000
ROA not before: Mon 17 Feb 2025 09:24:18 +0000
ROA not after: Thu 17 Feb 2028 09:24:18 +0000
asID: 17561
IP address blocks: 154.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88026 (0x157da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 17 09:24:18 2025 GMT
Not After : Feb 17 09:24:18 2028 GMT
Subject: CN=67b30046-26a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:33:0d:63:d9:26:8c:9a:b6:95:47:0b:e6:
42:d5:7c:de:9e:a4:0c:e7:cd:3a:10:0b:2a:c7:dc:
80:65:3e:c9:11:d2:12:87:b1:8f:64:92:e9:74:96:
36:70:c0:11:87:22:77:36:f0:64:85:76:93:fe:ca:
ab:ff:8a:11:36:2c:c8:59:a2:6b:44:26:47:7b:ca:
71:ba:82:4f:72:5b:d5:d1:b1:11:2f:a8:4c:b3:bd:
93:57:26:f8:58:09:20:5f:25:dd:8d:52:07:58:25:
62:df:1f:f6:a7:ad:7c:9f:19:63:58:d7:96:22:e1:
25:b7:d8:7d:65:85:1a:92:55:be:e0:25:9c:ce:80:
68:f0:59:ab:c6:dd:2e:a1:c8:d3:80:96:45:68:6d:
42:59:3e:99:18:26:84:33:22:bc:b1:08:a4:6f:c4:
3c:b9:f4:ee:c7:63:33:f6:bc:61:2e:17:3a:ef:e0:
03:b7:d8:f9:64:f7:7d:0d:aa:3b:44:50:1d:9c:d1:
93:72:09:52:08:be:b9:a7:2a:32:f7:8a:16:02:b4:
98:6a:d0:44:63:47:b9:b6:df:62:02:99:d4:73:c0:
98:b0:3f:bd:93:e9:df:e1:a3:f8:64:36:97:21:e3:
72:93:f9:a0:fe:bc:22:07:ed:e3:74:ce:c4:9e:be:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:0E:21:5E:8F:2B:E7:91:F1:28:35:6D:22:E4:D6:E0:83:D6:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F88303F0ED1011EF8E562A84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:ba:f8:e9:fc:30:8c:a9:70:d4:06:15:2e:4b:1f:ac:86:62:
d8:da:d1:4c:d9:ba:f0:67:ae:90:58:1f:6e:f8:af:91:de:f7:
02:64:f3:be:20:47:6a:32:e4:eb:65:dd:a4:33:28:4f:f9:7a:
a7:25:ca:6c:07:14:82:19:b2:5c:02:2c:d5:7c:ff:07:e7:59:
70:d9:7d:51:84:1a:c5:59:44:1a:20:b9:7e:99:8c:93:3a:81:
bf:07:1f:11:16:b1:20:06:06:16:51:30:ac:ff:c1:ca:2f:eb:
78:12:ed:4d:b3:d2:29:0e:af:3a:1c:b3:aa:04:5a:31:b8:66:
94:00:db:5c:f8:a5:e6:87:15:4b:d5:af:20:9f:af:2d:da:53:
29:43:59:ca:c2:dd:1c:48:25:16:70:1d:31:a9:18:a9:ee:0f:
37:eb:8d:9d:17:b7:9a:d1:92:57:21:58:be:96:a9:25:6d:79:
46:a4:bc:31:64:fa:a7:e8:2f:25:77:65:2e:26:83:65:64:af:
3d:62:5d:e2:e7:fb:e7:0f:2f:21:f1:0e:d5:a2:61:6d:31:5e:
6f:7b:bd:6f:8c:4f:b7:6a:b2:ba:4f:7a:12:ac:96:4f:b5:40:
56:8d:b0:e3:75:eb:22:41:65:33:90:d4:78:60:76:59:87:49:
32:95:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:10 2025 by rpki-client