Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079695B6F3F911EF9739015D762E951A.roa
File: 079695B6F3F911EF9739015D762E951A.roa (raw, json)
Hash identifier: H2le9FpG3OLDgwTLrZFZvbnzckcaL/kA2C0b7gfih68=
Subject key identifier: 21:F4:29:54:F9:C9:A0:1E:06:11:AA:AA:93:03:29:19:8F:1C:D2:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079695B6F3F911EF9739015D762E951A.roa
Signing time: Wed 26 Feb 2025 04:20:37 +0000
ROA not before: Wed 26 Feb 2025 04:20:33 +0000
ROA not after: Thu 19 Feb 2026 04:20:33 +0000
asID: 984
IP address blocks: 154.203.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90319 (0x160cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:20:33 2025 GMT
Not After : Feb 19 04:20:33 2026 GMT
Subject: CN=67be9695-4515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f7:16:65:2a:72:1e:65:42:ad:fc:74:78:99:
5c:94:ef:dd:ee:3c:d6:b6:f7:6b:b5:8c:67:96:5c:
a5:db:20:4b:41:af:1b:7c:ea:41:0c:20:23:bc:b7:
87:ea:14:b1:7e:45:69:9b:93:19:5a:df:7c:a3:93:
a2:01:85:5d:58:69:bc:37:96:df:58:d5:df:04:59:
57:6c:88:12:ff:58:10:7c:1d:3a:9f:82:5e:4b:11:
bb:cf:59:58:b5:8b:db:00:0c:9b:d9:54:49:25:33:
00:8d:fb:fe:68:1c:a2:11:00:2d:22:96:f7:29:e2:
e4:3c:5c:c7:b8:5d:5f:bf:e6:e3:37:94:ae:7f:b9:
42:d9:91:a5:89:0e:6e:3f:a1:29:fd:62:c8:f0:2e:
5d:95:f8:13:20:65:b4:66:ca:86:17:73:07:11:ce:
cc:bf:d3:1b:ad:19:0f:a0:20:1b:dd:cb:9c:7e:ff:
6d:5a:d3:5c:e3:7e:05:1d:cf:13:04:54:44:81:df:
27:bc:81:81:3b:62:81:93:cd:4e:bc:ac:ae:08:e3:
d1:31:0f:0b:c4:b2:a7:fe:f6:be:2c:3f:42:4b:59:
b2:dd:e6:dc:a2:26:7d:94:af:c6:c6:c0:63:20:74:
04:75:ea:8a:17:86:5d:ba:e0:81:9b:69:54:37:8a:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:29:54:F9:C9:A0:1E:06:11:AA:AA:93:03:29:19:8F:1C:D2:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079695B6F3F911EF9739015D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.127.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ac:dd:f1:60:d2:98:a4:a9:98:db:d3:dc:6d:00:24:6d:23:
fd:b5:f6:5d:8b:52:b7:55:95:45:48:ee:8b:c3:ea:65:a5:12:
74:b3:18:9f:c1:e2:12:36:ef:1b:7b:91:ca:5e:4d:a9:dc:c5:
36:52:8d:dc:05:81:fc:06:18:ef:8b:12:51:fb:02:15:cf:2f:
e3:eb:3a:6a:35:a5:e0:5e:20:55:bd:da:9d:88:dc:a5:6c:6a:
7f:69:0c:75:4b:93:a3:a6:ad:9d:b5:f1:82:28:64:98:df:43:
34:a4:a5:69:3d:1b:38:11:42:2c:6a:8e:7e:61:7d:6e:ba:e0:
65:e8:a0:bc:71:ca:be:4d:92:71:7a:d5:1a:6c:2c:31:5f:5e:
b6:2f:75:a5:85:8a:fa:a1:0c:1d:ca:d2:1c:09:5a:91:fc:97:
85:66:b1:70:d0:7c:23:1e:ac:d7:20:e8:3d:86:9c:c9:ee:85:
41:99:94:8d:a7:e9:24:de:92:bb:1e:11:17:44:63:31:a7:5d:
46:3c:5e:ef:87:e6:5a:a8:0a:2e:4d:51:a2:37:19:73:59:98:
a4:80:44:58:06:09:44:c8:8f:1b:5e:c5:5f:da:bc:8f:e2:6f:
c9:c4:01:4b:49:ea:7c:02:29:e9:06:60:ec:7a:54:a1:93:87:
a8:b1:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:52 2025 by rpki-client