Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9600AC8F45611EF8A497568762E951A.roa
File: F9600AC8F45611EF8A497568762E951A.roa (raw, json)
Hash identifier: 0CDdXErjdGxxbCAOnFHP10gZ7jMWLXVVYsddowP+JsE=
Subject key identifier: DD:34:2E:37:3D:A0:25:11:BA:0F:7D:F8:AA:D0:6B:65:4D:3F:9D:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9600AC8F45611EF8A497568762E951A.roa
Signing time: Wed 26 Feb 2025 15:33:06 +0000
ROA not before: Wed 26 Feb 2025 15:33:00 +0000
ROA not after: Sat 19 Feb 2028 15:33:00 +0000
asID: 17561
IP address blocks: 154.82.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91354 (0x164da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:33:00 2025 GMT
Not After : Feb 19 15:33:00 2028 GMT
Subject: CN=67bf3432-eb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:7a:9e:fd:b1:fb:7b:a2:c3:5e:52:54:fb:
2b:8e:a7:c8:a3:af:bc:f4:14:26:d5:eb:20:c0:95:
0f:e3:21:dd:c8:54:d8:5f:5e:88:c9:44:83:d5:95:
4a:5a:d8:85:d9:23:cf:e6:1a:95:eb:2c:30:5e:ee:
2d:a2:cc:b8:22:a1:16:df:af:b9:51:97:4b:9d:00:
e7:aa:e1:01:7f:72:aa:8e:85:ff:02:8f:ea:53:1d:
18:dd:cf:f3:ab:90:f0:1c:fb:d3:1a:97:8e:63:70:
58:e1:21:17:18:19:ec:f0:a5:a1:27:2b:8e:74:c1:
5f:91:d6:89:9a:21:51:cc:eb:f0:5b:3b:92:89:d2:
bd:c7:b7:b8:71:2b:06:bf:1a:9a:55:58:8b:ba:53:
d5:ff:01:17:6c:8c:6f:46:ac:09:23:fd:ae:03:85:
d7:50:91:f6:05:44:b1:e3:5b:e0:24:a3:05:71:3f:
3e:96:a7:86:ad:86:bd:1b:23:f1:bd:34:9c:64:ae:
ad:eb:39:33:63:57:e1:55:13:35:fb:98:7f:53:5d:
bd:c9:e8:94:44:c6:ae:8c:4f:2c:af:a9:fe:7f:b5:
71:96:81:ec:8d:e8:27:ad:19:f4:17:61:ba:63:e7:
b5:69:d1:e2:0c:22:68:4f:00:a1:8f:fb:c6:25:37:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:2E:37:3D:A0:25:11:BA:0F:7D:F8:AA:D0:6B:65:4D:3F:9D:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9600AC8F45611EF8A497568762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.237.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:28:85:96:f6:25:94:f8:de:44:c5:e9:ae:7f:fc:89:2f:c1:
0f:dd:eb:87:c2:9a:1d:7a:fa:1f:53:0b:3e:39:c5:58:3f:be:
25:10:db:67:e2:e2:7d:d3:70:6c:e3:bc:4b:86:2f:70:53:e4:
1f:47:05:d3:0f:f8:a8:d3:27:f2:fb:11:c2:62:ec:29:23:46:
48:01:ba:e2:cc:87:fc:c5:a0:34:84:8c:fa:6e:03:e8:aa:a8:
bd:f9:15:b1:76:8b:85:f4:5d:ce:d4:b1:35:34:22:bb:50:59:
2f:27:5f:2a:8a:5b:c7:9d:71:64:74:0f:6f:fb:17:b8:96:d5:
e3:ec:db:35:bd:b6:28:09:07:ab:dc:22:75:94:8e:97:c5:9a:
fa:9c:f5:60:04:83:c9:6d:31:dd:fa:e9:3f:a8:2d:b3:55:57:
69:79:7d:3e:d4:a1:53:eb:83:a7:8c:4e:4d:fe:15:86:74:4d:
1a:31:1a:16:69:89:59:08:8f:ab:29:5e:fd:d0:67:bb:ca:b9:
15:ee:e7:13:66:a0:a9:3c:6e:7d:b8:48:3e:ae:b7:ee:fb:ee:
c5:ab:3a:e3:c0:6a:5b:11:fd:40:bb:83:c9:16:5d:03:49:19:
7f:a8:47:67:13:50:83:f9:62:77:10:09:e6:d8:7a:33:ba:16:
3b:35:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:44:17 2025 by rpki-client