Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96CFC7B6D8E711EFBE15ED51762E951A.roa
File: 96CFC7B6D8E711EFBE15ED51762E951A.roa (raw, json)
Hash identifier: a6krKpUXTdzaTiRptQZT/uxCa4tC019jw+yaaMSuCIM=
Subject key identifier: F6:D1:B7:90:F4:54:CB:92:30:0A:47:6F:91:A1:B7:AD:03:FD:60:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014018
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96CFC7B6D8E711EFBE15ED51762E951A.roa
Signing time: Wed 22 Jan 2025 17:37:45 +0000
ROA not before: Wed 22 Jan 2025 17:37:41 +0000
ROA not after: Sat 15 Mar 2025 17:37:41 +0000
asID: 138915
IP address blocks: 154.206.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81944 (0x14018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:37:41 2025 GMT
Not After : Mar 15 17:37:41 2025 GMT
Subject: CN=67912ce9-11eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:74:e2:5e:2f:bd:57:08:41:6a:0d:e4:43:
b1:f1:c3:bf:77:7c:19:0a:06:69:f3:d7:2b:38:33:
60:14:3f:56:9a:e5:26:28:2c:64:92:bf:09:69:1e:
13:e5:df:d5:30:2d:1e:d1:ef:b7:e6:9e:12:57:6a:
ff:84:0e:5b:3d:ac:f1:8b:3e:d3:60:f0:6e:7d:5c:
1f:d5:3b:31:69:d1:c3:66:98:8e:78:db:33:2a:6b:
53:6e:48:e3:6f:99:db:3d:6d:6d:ba:c2:d6:24:1a:
02:d8:97:2c:4a:ae:14:3e:c0:ef:99:bd:a8:3a:e8:
05:a2:bc:d6:11:4d:d9:d6:73:b2:5f:54:da:db:b3:
bd:b9:86:f5:0e:8f:9b:ca:96:6c:9a:45:ce:5b:9e:
e0:71:28:57:30:ab:2c:e3:31:e6:3d:10:bb:5c:74:
5f:1f:16:2f:d0:c5:5f:66:07:5d:5c:c8:2c:82:0e:
cf:f5:bd:d2:c6:f2:35:0e:e9:22:8e:ad:8b:76:f8:
1a:4c:b3:c6:e9:4b:4f:61:15:8d:43:2a:65:9d:aa:
94:79:d5:64:c4:4e:97:97:95:5a:31:ca:a0:90:ca:
ff:81:4f:39:67:89:d7:1a:a1:a3:a2:82:7e:35:36:
78:ec:f2:df:a3:41:06:28:9c:5b:1a:42:34:bc:cb:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:B7:90:F4:54:CB:92:30:0A:47:6F:91:A1:B7:AD:03:FD:60:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96CFC7B6D8E711EFBE15ED51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.102.0/23
Signature Algorithm: sha256WithRSAEncryption
44:00:3f:1f:94:5a:25:6a:c6:ec:29:fe:38:01:0f:ce:63:a1:
4a:72:84:a4:df:eb:c3:05:b8:11:80:50:79:47:1b:19:85:02:
e2:ea:1e:04:ba:86:52:42:80:f7:a9:d5:ed:fc:8c:f2:b7:96:
91:7e:8a:27:32:44:e7:11:21:76:bc:8d:72:93:01:12:a7:81:
f1:07:61:2d:80:1c:71:19:e2:d7:79:1e:7f:ed:65:c1:b9:1c:
48:41:5e:72:95:5c:46:3c:38:ad:e2:db:c1:33:6e:8b:78:d1:
84:af:4a:77:73:33:51:ed:c0:b0:69:2b:2e:73:94:a2:aa:02:
9c:ca:6d:04:88:c2:16:e9:f4:9c:20:29:c2:6f:8a:97:74:33:
a6:2e:65:14:68:5c:f2:25:ac:20:3e:d0:f5:f5:b2:47:2a:f6:
89:11:86:39:44:6e:9e:60:c8:e8:51:38:14:3f:09:0e:c4:11:
82:f4:b5:f0:78:30:4a:18:93:24:7d:3b:32:81:4c:38:52:18:
7e:a3:35:17:84:8d:fa:63:9e:0c:af:aa:df:c2:72:84:89:8d:
cd:ad:14:6b:4b:18:79:c5:34:c5:04:ab:89:99:97:04:22:94:
cc:0b:15:ac:d0:34:b9:7b:b9:89:13:4a:5d:ed:89:21:33:9f:
f3:4e:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:10:10 2025 by rpki-client