Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2BDF96F2D211EF96F24982762E951A.roa
File: FC2BDF96F2D211EF96F24982762E951A.roa (raw, json)
Hash identifier: S/ksHXo2gl3TVklHJBrQHr7YJiqMNdIBOOLq0QtdJrw=
Subject key identifier: D7:DE:0E:36:D2:26:D2:63:32:3D:00:2B:89:3A:AC:AB:86:B0:48:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2BDF96F2D211EF96F24982762E951A.roa
Signing time: Mon 24 Feb 2025 17:15:46 +0000
ROA not before: Mon 24 Feb 2025 17:15:42 +0000
ROA not after: Sat 29 Mar 2025 17:15:42 +0000
asID: 203020
IP address blocks: 154.223.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89236 (0x15c94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 17:15:42 2025 GMT
Not After : Mar 29 17:15:42 2025 GMT
Subject: CN=67bca942-97d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:a1:c7:72:ae:28:10:bb:ff:c5:ce:ae:5d:
f4:03:bf:1b:d4:e1:94:c8:0b:a5:64:18:ec:b8:06:
d1:55:82:bc:5a:4a:cc:ae:ad:28:c6:31:a2:94:65:
a9:00:ec:60:56:55:d0:82:64:da:24:af:09:ce:0d:
62:e2:b7:e4:eb:7f:70:d0:b7:18:d2:19:1a:eb:99:
9f:20:33:25:21:5f:09:de:51:ba:d5:fa:9a:6e:b8:
c3:c4:56:0d:c1:91:66:2c:ac:36:71:d6:27:67:15:
05:ed:72:dc:50:1b:9e:81:73:6f:9a:bf:18:39:0a:
ef:67:32:bd:cb:2a:c1:64:23:0e:e5:31:19:78:5c:
a3:5e:8e:7f:5d:eb:28:68:d7:7d:23:75:f4:6a:a3:
62:45:72:23:63:86:98:56:ea:e1:1a:a6:26:f4:5c:
93:98:27:f3:0a:ce:8b:ae:c2:a4:93:f4:69:92:8b:
90:82:47:dd:df:2e:24:c8:f6:72:7a:e9:ed:75:52:
79:08:d5:a8:55:f0:cc:1b:28:df:bf:28:bc:99:4a:
3f:86:95:6a:0b:c8:90:72:eb:89:4e:90:2f:95:d1:
d2:42:10:68:58:8b:a1:2a:83:41:58:44:64:82:04:
fb:97:8a:ea:10:25:07:df:2b:c1:7d:0c:19:71:68:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DE:0E:36:D2:26:D2:63:32:3D:00:2B:89:3A:AC:AB:86:B0:48:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC2BDF96F2D211EF96F24982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:28:9e:04:70:ec:68:6f:7a:cc:d7:f5:89:95:e9:f9:9e:da:
95:1b:36:3d:4e:17:ba:1d:11:11:18:e0:46:55:8f:21:be:7c:
f6:db:f1:61:2e:52:ce:1a:a5:07:6a:3f:b6:0a:7d:a5:0e:b5:
fd:1b:33:08:ae:05:62:a7:ec:88:54:b0:4a:57:92:9e:db:ca:
f9:c5:94:3d:47:11:4b:0b:5c:49:59:23:5c:27:a9:79:20:e7:
e5:4f:91:e6:78:10:9d:1c:14:7e:44:e0:d5:65:81:af:c0:c9:
d9:d2:4f:d3:a2:05:87:2c:4b:c2:94:63:db:ad:e5:ef:f8:13:
ad:0b:94:b9:e2:e8:39:33:9c:1e:6b:70:cd:f8:34:92:c3:70:
a9:f6:4f:0c:b9:cf:71:e8:db:eb:3a:38:f2:92:7d:66:da:19:
12:c3:52:fd:0d:5d:c1:b5:82:64:04:b1:ca:48:47:f9:01:de:
86:11:28:d7:03:8c:ea:e5:0e:b3:0f:75:85:d2:5a:8f:3a:1c:
c1:9c:fb:94:e4:7d:d7:89:06:0d:80:3c:ed:77:45:b3:b7:bb:
c2:2c:8d:a1:6f:be:ff:71:73:ad:37:fa:3d:ba:19:c5:8f:5f:
92:de:25:33:06:82:0f:d2:da:d6:84:ca:0a:5c:66:c4:36:c7:
80:96:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:32 2025 by rpki-client