Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B651028F41C11EF86D87948762E951A.roa
File: 0B651028F41C11EF86D87948762E951A.roa (raw, json)
Hash identifier: flSwWaxQAddVCxFnXbiLWGh2FxM/3ssa6L/16bdkzXs=
Subject key identifier: CD:AC:98:8C:35:56:F9:68:40:11:93:4D:A2:98:A9:8E:6C:9D:1D:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01615D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B651028F41C11EF86D87948762E951A.roa
Signing time: Wed 26 Feb 2025 08:31:16 +0000
ROA not before: Wed 26 Feb 2025 08:31:12 +0000
ROA not after: Thu 19 Feb 2026 08:31:12 +0000
asID: 328608
IP address blocks: 154.200.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90461 (0x1615d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:31:12 2025 GMT
Not After : Feb 19 08:31:12 2026 GMT
Subject: CN=67bed154-b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:09:37:a4:a6:c0:45:75:8f:8f:6b:41:10:
53:a0:4a:ea:e0:08:76:ac:ee:77:31:d0:84:3a:72:
f8:8e:57:4e:da:24:24:cb:c4:de:d8:49:7d:55:93:
5f:b6:57:b5:e0:5d:f8:34:b1:6b:29:67:ba:b5:0b:
a4:83:ce:68:1e:dc:f1:13:ee:d8:c1:0e:84:2b:65:
03:52:0e:11:62:c2:48:30:16:55:ed:c5:a7:d9:38:
6a:71:67:bd:70:d5:ae:ad:eb:b2:33:62:10:92:78:
6f:50:8f:e1:4b:fe:91:82:bf:c9:21:3c:c6:76:b3:
6a:31:c9:dd:85:8f:b1:bc:03:6e:7c:b6:99:c5:92:
ce:b4:a3:9f:4e:f8:d1:56:43:8c:9f:32:25:9a:10:
ca:a0:6c:b6:78:ae:2e:f6:f7:88:8b:12:18:e4:93:
cb:c9:0b:f5:e0:04:05:2f:0d:36:74:8d:fb:40:c9:
cf:be:98:af:47:06:96:f6:74:10:bc:d5:23:f5:fd:
a5:c9:a6:91:82:d3:79:dd:83:af:cf:2b:f0:8f:af:
c4:50:5d:62:c8:34:7f:94:38:5d:00:27:12:cc:a8:
bf:12:46:07:61:f4:00:fb:3f:46:16:c8:9e:3f:20:
2a:5f:3a:7b:dd:1d:c9:3a:5e:c3:6b:3b:44:06:0a:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:98:8C:35:56:F9:68:40:11:93:4D:A2:98:A9:8E:6C:9D:1D:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B651028F41C11EF86D87948762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5f:92:7b:a1:67:33:44:a6:1f:38:16:1c:f4:b6:42:79:86:
68:3c:77:0d:56:15:00:2e:61:a5:ba:12:55:ed:18:aa:9a:74:
0e:89:b5:8f:28:d3:e2:1c:50:08:cb:9c:0e:4b:4f:c0:c5:08:
d2:fd:5b:a4:6c:be:d0:8c:f9:af:1d:77:2d:1a:97:58:b2:d5:
d0:a4:9d:cf:ee:e0:bf:f7:df:99:c1:7c:64:63:4e:d5:49:49:
46:89:be:7f:87:45:5c:52:3d:7a:c6:33:0b:86:bd:46:b5:74:
3a:f5:0b:99:18:62:2f:09:f0:f0:a8:1f:1d:70:fe:0f:b0:77:
d0:19:33:7c:d7:3d:ef:21:a0:b6:29:67:0a:ee:f5:a5:47:a5:
85:77:ad:b8:50:3c:b2:9d:be:b5:9c:7e:8b:a1:ef:35:69:10:
4f:ab:e8:50:50:c5:b6:60:47:61:85:5e:3e:68:07:7b:c9:7c:
c2:a3:75:2a:5e:3a:43:1e:a8:68:2b:0f:6f:a8:a7:36:a4:61:
55:0c:ae:01:26:62:0c:61:67:6f:1f:0d:22:f4:a5:4b:cf:4a:
24:78:7a:99:5a:3f:e2:88:82:d4:0a:b5:e5:d7:60:4b:96:66:
16:ce:94:3c:1d:28:a5:8e:8c:e0:8b:1f:4c:63:92:00:1e:4b:
3e:94:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:06:51 2025 by rpki-client