Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFAFD63CD97711EFB2E150A1762E951A.roa
File: FFAFD63CD97711EFB2E150A1762E951A.roa (raw, json)
Hash identifier: dXuXAAXISHRgcmgjT0elHHe82Ed9DX9RcrHqBag7DwU=
Subject key identifier: 10:CB:7B:30:2A:90:B5:B1:1E:74:9C:64:82:F1:E1:4A:0E:5C:B1:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014153
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFAFD63CD97711EFB2E150A1762E951A.roa
Signing time: Thu 23 Jan 2025 10:51:29 +0000
ROA not before: Thu 23 Jan 2025 10:51:25 +0000
ROA not after: Wed 28 May 2025 10:51:25 +0000
asID: 62240
IP address blocks: 154.195.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82259 (0x14153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 10:51:25 2025 GMT
Not After : May 28 10:51:25 2025 GMT
Subject: CN=67921f30-02e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:5e:29:7e:5d:2c:f1:fa:83:15:6c:48:55:
02:a6:dd:33:5b:3a:16:c1:43:a7:6b:a3:00:67:33:
44:ad:a4:af:2b:83:0d:21:c6:c6:ba:b9:9a:0e:fe:
14:a0:74:ac:b4:2a:46:79:c2:f4:f8:ba:c9:83:6e:
c2:7e:17:c4:72:18:f1:6e:f1:e7:f3:3e:31:72:95:
74:2b:73:67:49:b7:86:7a:d8:1d:ef:aa:9e:7e:6d:
3f:15:40:a4:4e:54:fa:6b:32:a6:0a:3a:f7:58:d1:
4d:2f:06:82:6c:23:a9:dc:39:f2:95:f3:3c:6f:0b:
c6:32:0a:d1:57:bc:8a:97:6a:ea:2a:d6:b1:fd:17:
fe:28:79:b4:24:99:57:ba:fd:00:0a:c0:13:d8:0a:
bf:e9:83:6b:6a:8c:6a:f9:06:31:ef:67:12:31:d3:
98:96:f1:0e:7f:0e:84:84:ad:2a:99:f1:9c:84:cc:
df:c4:eb:f7:64:2d:02:c8:32:e6:fe:64:79:06:74:
a2:d2:92:93:0f:91:31:10:4b:86:bd:90:d6:a8:d8:
9b:87:01:42:78:5d:0f:ed:40:14:ea:32:61:e8:13:
a1:fc:99:3e:75:99:8a:fe:2c:d6:26:5c:64:44:51:
6e:cf:3b:27:07:54:88:6f:62:a2:2c:6d:51:23:62:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CB:7B:30:2A:90:B5:B1:1E:74:9C:64:82:F1:E1:4A:0E:5C:B1:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFAFD63CD97711EFB2E150A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:65:bc:38:c8:1d:70:09:ad:75:7a:61:c9:64:fe:ed:e5:d7:
99:96:da:06:a8:67:07:70:13:3b:9f:40:86:a8:48:25:29:29:
19:96:d0:7c:b7:f7:16:01:c5:e1:c4:96:cb:d8:8a:84:60:68:
3f:4a:88:5e:73:6b:3e:f7:11:19:42:92:9f:9a:22:69:95:59:
4b:1f:66:be:99:20:8c:6f:5c:c7:7d:2a:54:87:91:c3:9c:13:
31:ef:09:7b:83:60:e5:05:99:11:ce:63:41:ae:4f:8a:a9:dd:
cc:d3:ad:44:10:e4:82:46:25:31:f9:f5:71:2b:cb:d4:59:27:
5b:1a:a0:fc:f0:be:6b:8b:2d:7c:cc:74:6e:6f:fd:ae:a3:17:
d1:6c:6e:a8:b2:c6:06:54:d4:b4:83:31:7b:a6:a4:5f:ef:0d:
4e:9b:dc:55:6d:8d:e2:bf:3d:8e:b4:c0:0b:17:a9:3a:62:77:
28:77:3d:93:6c:17:bf:30:d6:08:64:18:49:ad:51:2b:f6:22:
e6:42:1c:c7:97:61:9a:8b:5c:38:99:10:02:b5:73:9f:54:4b:
1e:39:bd:03:cf:6f:7a:08:8d:69:25:83:ee:72:80:e8:0b:30:
21:fe:48:0b:75:e8:be:c6:47:52:f7:99:9e:5e:e5:b4:c6:a7:
a3:2b:d2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:31:31 2025 by rpki-client