Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E794138F44B11EF8F132095762E951A.roa
File: 0E794138F44B11EF8F132095762E951A.roa (raw, json)
Hash identifier: YowZpbiv966K4nYPPBBrVlvxQmbjlP8L6TJ8+M7J1xg=
Subject key identifier: 0C:11:C8:EE:BB:3B:5D:3C:1E:AB:B9:88:FB:DE:ED:64:33:00:F3:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01641F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E794138F44B11EF8F132095762E951A.roa
Signing time: Wed 26 Feb 2025 14:07:47 +0000
ROA not before: Wed 26 Feb 2025 14:07:43 +0000
ROA not after: Thu 19 Feb 2026 14:07:43 +0000
asID: 984
IP address blocks: 154.210.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91167 (0x1641f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:07:43 2025 GMT
Not After : Feb 19 14:07:43 2026 GMT
Subject: CN=67bf2033-82a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:c3:7d:3d:de:7f:cc:cc:46:53:d2:93:2c:
96:a3:8e:f0:a8:18:91:a5:77:27:90:fa:e1:e8:04:
3b:f5:bc:50:b6:a2:ac:49:d1:6e:d9:2b:b1:80:36:
f5:7f:d3:f8:3e:3a:1f:6e:a4:52:24:31:03:09:f7:
bc:32:fe:46:85:51:7a:84:63:2d:96:33:3a:b8:24:
2c:aa:d2:00:38:b3:ea:9c:bc:03:62:8b:2a:8d:af:
2e:1a:e5:81:dc:cf:7a:f7:d1:a2:41:09:5d:74:83:
dc:9e:5a:f8:6f:ce:7e:ea:d0:b5:48:5f:95:c4:09:
72:a7:62:48:38:d5:61:51:cc:b0:81:2a:7e:ef:8a:
3d:8a:ee:a7:87:13:a7:0c:66:4a:e8:30:39:1e:2c:
e7:da:5e:c4:fa:54:f7:e7:1a:bc:d9:99:6c:99:e1:
d3:a9:fc:3f:98:bc:c5:79:fa:3f:53:95:5f:47:9d:
cb:c3:0d:19:9b:ea:8e:3e:e9:60:52:ee:95:78:1a:
bc:75:21:6e:bf:3c:b0:b5:d7:b1:10:45:f3:a3:32:
0f:d0:1d:0c:e7:ac:d2:fb:c0:23:58:e8:12:4c:c7:
af:5c:7f:19:ef:b2:23:29:99:d9:a0:99:31:62:2d:
c8:2b:e9:6c:2a:5e:d0:f4:36:7a:cb:0c:42:a8:27:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:C8:EE:BB:3B:5D:3C:1E:AB:B9:88:FB:DE:ED:64:33:00:F3:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E794138F44B11EF8F132095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.45.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:3c:9b:e6:7b:d0:26:32:85:2b:ca:ba:c8:30:34:69:f2:51:
ff:46:49:9e:88:04:97:4d:17:73:59:78:42:0f:c7:34:b1:95:
81:14:33:a5:a4:9b:ff:ae:55:3a:52:42:56:75:52:25:72:ab:
8e:4b:ca:d5:76:a1:d5:02:2c:f7:e2:7c:01:e1:26:73:32:e8:
2c:b4:de:b7:3e:b9:55:a8:b7:89:1e:7a:6a:80:54:73:f1:d4:
aa:da:de:dc:41:bb:da:6c:18:21:4e:3e:dc:db:fe:c7:38:73:
f2:a3:44:c9:ea:99:eb:61:60:80:5f:ca:57:4d:77:41:3f:2c:
1f:fd:df:33:44:36:d4:43:91:e3:f1:1e:30:b5:92:a3:30:f4:
8a:f7:db:ff:f9:fd:98:a5:4f:9e:5e:bf:56:38:bf:dc:73:a5:
31:28:a4:4a:78:c3:84:92:a9:bf:71:95:71:4e:41:bb:b4:ec:
74:ec:62:e5:02:56:73:3c:e6:52:96:9f:bb:0a:dd:c1:8e:a0:
4f:58:2e:e3:e2:ab:d5:0c:a3:aa:33:3e:85:42:60:f4:fb:43:
0e:de:9d:c0:b4:d9:2c:5a:e7:63:fb:51:e4:98:5c:a8:63:c6:
f1:f4:14:b2:b4:8a:34:a7:43:11:fa:f5:5a:6f:65:a8:f3:fa:
72:c1:98:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:01 2025 by rpki-client