Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03218B36DB1611EFA20F4F90762E951A.roa
File: 03218B36DB1611EFA20F4F90762E951A.roa (raw, json)
Hash identifier: 9oHNd18e3m2sns/WLqGebGXBtYTIugEgdxSkEQoH/W0=
Subject key identifier: 16:66:C2:6E:8F:AC:A1:9B:78:46:CC:3C:7C:76:6B:CE:9F:DC:89:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014938
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03218B36DB1611EFA20F4F90762E951A.roa
Signing time: Sat 25 Jan 2025 12:15:06 +0000
ROA not before: Sat 25 Jan 2025 12:15:02 +0000
ROA not after: Mon 02 Feb 2026 12:15:02 +0000
asID: 132839
IP address blocks: 154.209.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84280 (0x14938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:15:02 2025 GMT
Not After : Feb 2 12:15:02 2026 GMT
Subject: CN=6794d5ca-bec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:41:45:ec:d2:af:08:3f:b3:83:50:c9:7b:
61:ae:77:04:9a:b0:2e:c5:72:87:84:47:52:89:0b:
57:4a:c9:e6:b3:5a:5f:cb:02:67:f6:32:39:cb:2b:
3e:d8:5d:03:86:d9:aa:c3:7e:66:a2:af:3f:6f:24:
69:37:e2:9c:72:21:91:3b:95:30:97:2e:0a:c5:8a:
2d:ec:8b:06:fa:bb:f3:7f:d0:b7:5b:02:b2:b0:f7:
97:09:f5:c3:00:2e:d6:4d:af:23:f7:00:a9:ba:28:
6e:dc:51:0b:60:30:39:12:63:d8:d4:60:67:11:00:
f3:81:c1:c9:7f:03:32:d4:2e:8f:83:aa:49:c8:31:
f4:e6:7e:2d:c7:6f:0f:96:7c:60:0d:ec:d7:b9:7d:
23:a7:c6:fa:ea:26:a0:97:7e:d8:8d:56:d7:d4:5c:
0f:bc:25:ab:8d:86:67:43:93:a9:b5:bf:b9:89:e4:
34:f7:e9:da:01:06:b3:d5:35:9b:94:53:65:56:31:
59:67:7e:e2:fd:ee:56:b6:2f:59:96:27:a5:0b:8e:
bf:7f:08:c1:2e:d7:4f:a5:1b:e0:e1:c5:67:f4:15:
d9:4b:fc:44:f4:9b:3e:c4:b2:0b:b1:fb:1e:75:0c:
ce:dc:8f:fb:e0:4e:22:1b:35:c2:fb:96:b0:c4:c2:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:C2:6E:8F:AC:A1:9B:78:46:CC:3C:7C:76:6B:CE:9F:DC:89:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03218B36DB1611EFA20F4F90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.96.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:19:95:96:cc:34:ce:79:78:51:fc:bc:b8:03:56:dc:12:f2:
a0:40:b2:d2:c9:80:c2:93:2d:eb:e6:36:0b:f4:52:8f:dd:71:
49:10:46:18:5d:4b:bd:f0:b6:89:20:58:ca:85:61:11:88:cc:
25:e9:a0:fe:bf:e9:5a:53:e3:bb:60:36:21:b4:b3:0c:1e:0f:
5c:29:f1:33:56:36:36:85:1e:8c:9a:67:77:04:4c:5c:d6:a7:
39:c4:1c:19:fb:1b:77:86:2c:0c:f9:c5:ae:a6:26:fe:f9:55:
1f:86:cc:9d:59:c2:55:ed:96:ad:ee:13:1c:ed:58:0e:eb:7d:
4d:af:c2:aa:41:85:4b:88:8c:e0:c7:1d:e6:a5:1f:0f:fa:14:
33:a2:8a:96:f0:1e:93:50:43:82:d6:d3:d7:dd:e8:7e:ae:98:
e3:2b:c0:6f:f5:12:cb:9f:e3:5f:63:25:6d:82:db:be:37:5b:
44:a7:7c:10:12:0d:2f:27:73:94:1b:17:cb:a3:09:05:76:f7:
0e:82:a1:3a:4e:5d:af:16:79:32:88:b3:84:26:f9:de:4f:4e:
72:c6:d2:e6:31:db:30:c1:b2:91:8c:f4:9c:85:3c:34:8a:87:
cd:7f:f6:41:15:0f:e9:ed:5c:03:b0:25:a3:2e:ad:4a:d8:fe:
a0:05:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:40 2025 by rpki-client