Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CABCD26F5DB11EFB9DB055A762E951A.roa
File: 0CABCD26F5DB11EFB9DB055A762E951A.roa (raw, json)
Hash identifier: 0MBk8pZpYzy6aM/hPXAKRlcR4e/2gqyTuDbepHXd278=
Subject key identifier: F9:7B:55:F4:67:80:49:A3:C6:FC:79:06:FD:E9:87:5F:5D:23:C1:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CABCD26F5DB11EFB9DB055A762E951A.roa
Signing time: Fri 28 Feb 2025 13:51:03 +0000
ROA not before: Fri 28 Feb 2025 13:50:59 +0000
ROA not after: Sun 30 Mar 2025 13:50:59 +0000
asID: 203020
IP address blocks: 154.200.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93044 (0x16b74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 13:50:59 2025 GMT
Not After : Mar 30 13:50:59 2025 GMT
Subject: CN=67c1bf47-ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:ba:b1:42:fb:cd:ca:c2:46:1a:81:79:03:
29:65:f7:1f:61:7d:a4:b9:0e:a9:36:86:71:1c:c4:
b4:45:42:e8:04:11:57:43:8b:d4:86:d2:61:d8:6a:
f5:02:89:94:77:33:39:d2:d0:e0:0d:81:ff:29:5e:
88:d1:23:3a:b9:29:48:f1:0f:f6:8b:27:26:4c:de:
82:dd:23:9f:eb:e3:2b:0f:5e:99:17:ba:78:97:6a:
2d:18:79:12:af:bf:01:6b:af:60:66:63:7a:f9:ae:
cc:c8:c0:b2:01:55:bd:72:85:46:bb:84:2a:34:72:
a3:2d:df:9b:95:2f:b8:3d:58:a6:53:81:9d:49:42:
e0:c4:ef:22:59:b4:75:8f:50:ec:17:ec:a5:82:c8:
67:55:e6:40:de:71:8d:0f:43:97:3a:f0:e1:73:52:
54:9f:be:f5:23:9a:7f:da:5f:05:11:ee:54:6a:d4:
c4:02:37:01:1f:14:13:1d:8a:42:ee:c8:ca:8e:9a:
60:a5:66:a5:8f:80:61:45:cb:24:0a:25:14:b2:6a:
72:32:e8:8f:36:1b:c9:c0:d3:14:b0:fc:37:ee:82:
75:38:06:e0:3a:8d:23:48:22:0a:b0:e3:0e:99:97:
e1:f8:c3:31:f4:43:c8:07:14:78:83:e4:3e:ca:6f:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:55:F4:67:80:49:A3:C6:FC:79:06:FD:E9:87:5F:5D:23:C1:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CABCD26F5DB11EFB9DB055A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ad:32:05:39:70:04:b9:1d:4e:7f:94:57:e6:e2:13:af:b2:
f7:ce:6c:1b:10:3b:9f:8b:c2:4f:13:9a:04:ae:08:48:f4:5f:
2e:1c:9c:1c:41:1f:db:0a:de:6a:97:5a:b1:26:e6:3e:58:16:
da:1d:ff:03:2b:98:be:c2:1e:c4:fb:10:04:83:ba:53:d1:fd:
40:ab:99:54:1f:b1:e4:d9:af:0a:aa:f4:04:f4:fc:c9:5f:22:
a7:56:20:e2:06:db:96:ad:6a:63:7e:b1:50:26:4b:4f:00:1e:
84:6a:3b:1e:1b:da:c3:57:15:33:e7:86:c0:3e:69:35:52:5a:
bf:58:f4:82:9f:29:73:3d:9a:dc:8c:ff:19:ec:bc:52:67:a1:
e0:23:48:a8:c3:61:87:a3:84:63:1b:6d:3f:89:fb:1f:ea:33:
62:af:29:1a:76:e5:51:91:04:8d:fa:76:89:dd:9d:06:74:31:
ff:e0:c8:b7:76:a5:93:b4:11:af:6d:44:98:e3:ab:29:80:ea:
2c:05:f4:78:d5:75:ac:aa:3a:87:51:39:20:1e:7b:e5:2f:f8:
2e:94:1d:72:c3:0c:4e:31:97:98:8b:49:4c:1c:d0:eb:db:b2:
5f:9b:ed:21:1b:a1:3c:c6:f2:49:2e:3c:6d:8c:ed:0a:c6:dd:
95:c1:f0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:33 2025 by rpki-client