Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3A3772F47711EFB987EB4C762E951A.roa
File: FF3A3772F47711EFB987EB4C762E951A.roa (raw, json)
Hash identifier: oDLwLPb86BO3p8jwnpG4iiCskb4RYZReMCs7QFb/F4c=
Subject key identifier: 3C:EB:5E:26:36:85:42:00:3D:08:1B:98:B5:BE:24:C7:AE:8F:BF:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3A3772F47711EFB987EB4C762E951A.roa
Signing time: Wed 26 Feb 2025 19:29:29 +0000
ROA not before: Wed 26 Feb 2025 19:29:26 +0000
ROA not after: Sat 19 Feb 2028 19:29:26 +0000
asID: 17561
IP address blocks: 154.82.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91555 (0x165a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:29:26 2025 GMT
Not After : Feb 19 19:29:26 2028 GMT
Subject: CN=67bf6b99-8b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:ed:51:c3:de:e4:f6:fc:10:63:a7:83:63:
19:3e:30:a5:01:a2:19:01:43:d9:e4:fb:98:e7:d6:
26:b1:d8:2f:b2:7f:dc:96:80:3f:15:9d:ea:1e:ae:
8b:bb:dc:48:a2:be:c1:6c:72:74:48:70:15:ca:5d:
ed:63:f3:b0:ab:23:1f:9d:8c:95:10:53:3e:e2:7b:
b5:65:66:43:63:b5:54:28:a5:44:f3:d3:4e:59:a7:
19:20:c4:f0:c5:5e:c8:d1:c5:3e:c7:79:3e:79:28:
e3:ae:48:b5:45:e4:58:b3:ee:52:3c:5e:48:2b:a6:
e5:bb:50:3f:d4:ce:a0:87:d8:d5:a7:56:3a:a3:06:
36:97:79:3a:c5:ad:82:80:62:57:60:fa:f4:c1:24:
6b:2e:4d:f4:8d:ea:13:e6:80:0e:55:e3:3b:72:02:
2a:37:8e:17:cc:78:ae:b8:a4:60:87:27:ff:cf:44:
9d:7b:a4:b4:84:fa:ca:a9:cc:09:07:d5:df:d8:49:
89:1f:4c:b7:22:d9:ab:de:4a:a9:73:4c:9b:93:77:
b8:d1:7b:3f:6a:92:76:be:4f:c9:67:19:3e:47:1e:
bb:a8:a8:d6:2b:ca:da:05:08:f7:97:f3:0a:83:e3:
d0:f0:c0:80:0d:f5:e6:48:b5:39:08:2c:fc:c7:c1:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:5E:26:36:85:42:00:3D:08:1B:98:B5:BE:24:C7:AE:8F:BF:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF3A3772F47711EFB987EB4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:08:c3:a3:0e:15:2a:99:38:63:5a:77:73:08:64:19:7d:58:
59:57:c7:5d:0c:52:2d:28:d0:f0:fb:b0:07:6b:ac:de:42:91:
9a:7f:2e:64:86:87:ac:1f:ac:b5:63:86:c0:c5:d0:13:6d:06:
24:f1:d3:63:4f:58:cb:7c:8e:a8:6e:39:44:8f:8c:b3:55:cd:
a5:e0:c0:35:b5:62:b1:68:52:b9:ad:5c:cd:3e:54:f7:69:8d:
90:6e:1d:0a:17:9d:65:25:8a:36:ad:c8:00:0d:ec:2a:b3:f2:
f8:ae:e9:ad:c9:f8:a7:8d:f6:8d:41:64:af:83:ce:cc:bb:c8:
f1:1b:b0:c7:26:4b:93:61:70:8f:81:4f:2a:ea:19:01:b7:cb:
b5:36:1b:92:5c:5a:0c:35:3a:7e:ea:9e:97:56:7c:aa:4f:cd:
16:8f:6b:88:b9:0c:c7:c1:b2:c2:5b:bc:2e:a1:1a:ee:b0:4d:
7d:0b:91:a7:bb:1e:e4:1f:92:f0:28:0f:04:bb:4a:cc:da:3c:
c1:3b:d9:c8:d1:f5:de:a0:1d:6f:aa:54:e2:78:6b:55:22:a8:
ca:e4:f9:ae:51:2c:37:af:32:1a:d4:43:11:71:4e:10:59:2a:
1a:43:d9:bc:ea:b5:41:93:47:8c:1d:af:6f:34:fa:83:dc:40:
7d:5f:cc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:44:26 2025 by rpki-client