Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F897BAF2F53F11EF9ACABAAC762E951A.roa
File: F897BAF2F53F11EF9ACABAAC762E951A.roa (raw, json)
Hash identifier: igz+WXtTObecxaSfxwWAVRCrWseAOof5nvkxzJj6aas=
Subject key identifier: E1:84:D2:7A:25:94:F4:C1:8E:67:94:D8:9F:85:0A:8D:0A:40:D7:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016998
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F897BAF2F53F11EF9ACABAAC762E951A.roa
Signing time: Thu 27 Feb 2025 19:20:57 +0000
ROA not before: Thu 27 Feb 2025 19:20:54 +0000
ROA not after: Fri 11 Apr 2025 19:20:54 +0000
asID: 63139
IP address blocks: 154.203.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92568 (0x16998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 19:20:54 2025 GMT
Not After : Apr 11 19:20:54 2025 GMT
Subject: CN=67c0bb19-daa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:a4:92:3c:93:c5:ad:dc:7a:a6:11:6b:f8:
a4:83:ff:98:63:76:56:2c:d6:eb:f3:f8:80:b2:cd:
64:9b:5a:c3:09:84:c8:b5:f6:fd:2b:68:ea:63:5a:
22:fd:60:4e:22:33:6c:55:ff:c4:c2:bb:0c:5d:21:
66:0f:49:42:94:4d:28:f5:77:4b:26:45:24:fd:fa:
fb:ed:e4:a3:05:74:2a:c7:80:38:76:11:a5:45:fb:
9a:37:bf:a5:bc:bd:a1:19:c7:92:e8:29:b3:b9:85:
40:8a:5e:89:67:b7:d6:f3:6d:ee:01:e9:ba:8f:3a:
83:86:9d:b6:2d:42:ed:fd:16:74:67:08:52:6e:69:
c4:e7:ee:15:76:ae:fa:bc:40:c7:03:b1:4d:75:e6:
2f:7d:5d:94:da:77:8e:cd:d9:08:c2:8d:2a:c7:db:
3b:8a:e1:3b:d0:76:ab:36:38:62:5a:b4:e3:29:99:
77:6e:6e:f0:36:92:ed:3f:7e:58:f9:d1:ea:8f:16:
ea:e6:2e:c5:9d:29:1e:65:45:3a:2b:2a:d3:c3:e7:
05:06:d3:66:e2:7f:fc:77:24:74:b2:1c:20:1b:13:
65:a5:ee:a8:fd:c1:f3:d6:ec:92:d9:70:17:c4:82:
dd:a2:1d:f1:94:95:86:39:7e:10:f7:c3:41:d4:2b:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:84:D2:7A:25:94:F4:C1:8E:67:94:D8:9F:85:0A:8D:0A:40:D7:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F897BAF2F53F11EF9ACABAAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.185.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ff:b1:de:83:7b:bf:7a:68:2b:83:17:49:13:a5:7a:2b:63:
5b:a8:96:8e:f9:a6:31:94:7d:cf:02:09:ef:98:43:13:d1:de:
ed:20:47:f7:61:28:db:20:de:39:2a:96:e0:5d:b0:d5:4c:c9:
ab:ea:a7:f2:46:3f:63:82:2d:a9:d1:ac:73:99:84:a3:b7:1b:
8c:0d:74:69:b9:b2:58:b9:60:58:b9:33:32:95:42:91:3e:3a:
7d:fa:dd:41:16:67:5f:59:07:7d:d1:39:ff:98:1c:29:d1:10:
80:96:29:11:07:a1:b1:33:ba:65:53:27:8e:02:9a:c2:dc:2f:
59:dc:eb:cd:d6:87:3d:14:39:e0:a1:00:a4:6e:bb:9d:b2:e2:
89:98:0a:bc:5b:fd:ef:11:5b:47:d0:b1:89:40:c9:0a:56:62:
cf:69:d1:c6:39:07:83:30:4e:56:ed:83:ea:c6:36:39:f6:47:
ad:8a:53:68:82:ce:24:74:d9:36:2f:73:75:ee:db:7b:9a:6c:
56:e4:e5:2e:ff:93:ba:4d:27:78:03:4e:5e:8b:43:c5:cb:7a:
2c:e7:5a:6e:76:47:3e:df:20:af:36:b6:9b:69:93:72:3a:c6:
3c:4c:5e:e6:bc:82:c8:d9:42:d2:50:92:72:cd:14:07:bc:12:
42:26:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:05 2025 by rpki-client