Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFCFA6A0057911F0B61980B2762E951A.roa
File: FFCFA6A0057911F0B61980B2762E951A.roa (raw, json)
Hash identifier: oEa8FQjIkf3gVP+SqQTSY3/u6fU3Nr0Bz0aS0tse5fU=
Subject key identifier: 1F:4C:34:7C:14:58:86:46:7F:21:14:92:2D:84:A1:9A:74:5C:00:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017535
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFCFA6A0057911F0B61980B2762E951A.roa
Signing time: Thu 20 Mar 2025 10:56:39 +0000
ROA not before: Thu 20 Mar 2025 10:56:35 +0000
ROA not after: Wed 09 Apr 2025 10:56:35 +0000
asID: 55020
IP address blocks: 154.211.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95541 (0x17535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 10:56:35 2025 GMT
Not After : Apr 9 10:56:35 2025 GMT
Subject: CN=67dbf467-8c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:1d:54:a8:98:71:b9:df:d3:43:f1:84:ac:
36:7a:01:0c:ad:c0:fa:6f:df:42:13:b4:a5:8f:45:
82:62:50:2a:b7:47:80:95:ec:6e:a6:ec:58:3d:0a:
f7:4e:59:64:71:39:e8:30:db:c4:b1:70:6c:b0:74:
f2:bb:24:98:12:ed:77:1a:90:41:0f:67:3f:41:20:
4a:e3:91:75:1c:11:1c:8f:c9:c0:84:84:ce:b4:24:
6a:86:41:65:04:08:27:ca:ee:c8:3f:58:d4:41:0d:
9b:8a:9a:ea:c5:24:a2:ac:7d:19:00:74:4a:f8:18:
2e:b6:cf:71:29:a2:6f:f5:45:85:c9:88:44:be:1f:
2d:39:77:83:2a:c9:f0:eb:31:83:95:ac:a1:a1:ca:
99:2f:fb:7b:ba:9e:15:ed:ca:29:d2:6a:fc:33:e2:
60:79:cd:6a:d3:21:f2:91:6a:68:6e:23:e4:b3:0d:
42:ad:27:39:20:86:b4:ea:fb:03:31:71:5b:22:20:
5b:22:65:0a:8c:2a:49:9e:1b:e6:38:30:a7:a7:f1:
61:af:d2:e5:73:25:da:7c:1a:2a:5a:53:d2:1b:94:
4c:9b:9d:68:cc:7a:de:59:58:ed:1e:37:0b:9d:53:
b9:12:ce:72:d7:08:4d:ca:ed:12:41:d0:3b:68:f3:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4C:34:7C:14:58:86:46:7F:21:14:92:2D:84:A1:9A:74:5C:00:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFCFA6A0057911F0B61980B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
93:0c:19:6b:61:c2:5a:8f:22:d7:c3:d8:ff:a7:84:29:9e:b8:
38:3c:7f:94:ed:80:c8:60:4c:4c:30:2f:30:50:19:e0:3a:c2:
1f:e0:6e:84:5a:d5:13:27:c2:66:46:67:2e:6e:65:cb:00:2a:
d3:b7:de:dd:77:15:56:4a:cd:cc:f0:47:3e:88:1e:80:e7:fc:
fd:c8:f8:ae:a4:9f:41:98:f3:68:94:80:fa:ff:d2:ba:9f:0c:
da:83:78:fa:98:9b:c8:25:59:be:a1:45:5c:b9:3d:00:8c:b6:
54:28:cd:b7:df:66:9a:88:40:a8:fc:24:25:f6:fe:0f:5f:3c:
3c:f6:78:7e:33:52:24:78:85:3f:c8:84:9d:a8:19:8e:fb:a2:
1d:1b:d3:76:c7:94:dc:62:2a:fb:7f:42:f6:ef:40:45:37:2f:
bf:0b:b9:fa:22:8e:e9:c1:e9:9e:2d:5d:fe:c7:c5:14:ad:c2:
8a:12:1e:fc:e7:e7:ec:55:8c:8f:d0:04:51:49:b6:dc:db:20:
22:f1:90:50:26:96:94:e2:39:87:5b:14:df:0d:a0:63:ba:4a:
bc:e6:a1:ef:21:67:47:0f:da:56:36:0b:b9:64:d8:e9:ad:4b:
85:1a:f2:dd:95:a8:30:b4:42:05:1d:d2:e8:a4:7c:93:49:50:
b4:a6:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:29 2025 by rpki-client