Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F48DC6EF42711EFA2AE8A95762E951A.roa
File: 0F48DC6EF42711EFA2AE8A95762E951A.roa (raw, json)
Hash identifier: Wwa8k2+0zaqhFfxZLCSW3v/wCMioH++rbtCmSsfHlvE=
Subject key identifier: 72:35:3B:4E:00:4F:DA:CF:EE:F0:CD:17:00:28:D1:D8:E3:65:D3:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016204
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F48DC6EF42711EFA2AE8A95762E951A.roa
Signing time: Wed 26 Feb 2025 09:50:07 +0000
ROA not before: Wed 26 Feb 2025 09:50:03 +0000
ROA not after: Thu 19 Feb 2026 09:50:03 +0000
asID: 984
IP address blocks: 154.206.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90628 (0x16204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:50:03 2025 GMT
Not After : Feb 19 09:50:03 2026 GMT
Subject: CN=67bee3cf-f0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:bc:e4:e7:d6:a1:26:fd:43:84:bb:9f:62:
8b:61:83:f1:d4:4c:e4:a9:5f:00:cb:83:e3:40:c2:
1d:3c:15:ea:24:ef:37:6d:a8:62:c5:0b:cd:d3:58:
21:97:68:8c:d5:00:53:95:cd:36:0d:01:6f:a5:f0:
f3:68:79:1d:85:4c:e8:a4:3c:d5:88:6f:6e:ce:a8:
21:fc:2f:56:6d:a9:70:d1:f5:06:5a:77:2b:dd:0d:
be:f3:5d:c4:d5:21:8f:eb:d0:7d:20:d4:f4:37:6f:
1b:f6:16:b5:26:1d:70:18:be:03:cc:5b:06:67:bb:
b3:9c:a0:19:86:90:10:b5:82:42:81:89:fc:e5:1c:
08:4a:4b:b1:36:2b:bf:1f:4e:5c:0f:12:c3:9f:59:
83:e9:1c:d5:ff:2a:df:a4:6f:b4:48:46:61:3b:6d:
0b:d1:02:d4:fb:6f:d8:dc:87:87:6a:be:89:6d:e2:
1c:2e:09:f9:b9:71:ff:71:cc:56:ae:a3:b2:3d:67:
7a:c6:00:bf:7e:71:16:3f:58:b2:91:53:0f:2f:e9:
9d:c8:8c:79:68:cc:6a:41:2f:70:1a:ce:0f:88:2c:
e5:02:47:9b:19:b4:06:ab:1e:15:4b:33:b1:ce:20:
e9:cc:f0:dd:f4:87:31:4d:a7:c0:94:e7:fb:93:49:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:35:3B:4E:00:4F:DA:CF:EE:F0:CD:17:00:28:D1:D8:E3:65:D3:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F48DC6EF42711EFA2AE8A95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.251.0/24
Signature Algorithm: sha256WithRSAEncryption
54:61:25:d7:0e:21:7a:70:90:29:fa:e5:f3:a1:ad:12:a2:18:
7a:7a:ab:cd:d3:d8:99:5d:53:5d:92:28:c3:14:18:43:07:e1:
92:33:6f:12:56:e3:05:ff:64:12:bb:c3:e7:c1:43:f4:bb:00:
01:50:45:6c:a5:fe:6a:fe:79:e2:a3:6a:b3:2a:81:7f:b6:e6:
66:47:29:93:e0:f6:25:0b:cb:ff:7a:7d:ce:94:15:10:fd:33:
67:e7:49:b2:61:a0:0c:9b:45:d1:97:fb:d6:e1:2b:54:76:01:
ac:01:2f:3f:91:43:bf:64:2c:c0:ac:48:59:6b:bd:0a:cd:95:
a4:b2:63:70:9f:6f:d9:01:93:85:0a:61:55:1d:29:08:e3:5f:
65:bf:e3:6f:56:70:85:3a:3e:a8:ca:f4:6f:53:87:fb:e3:65:
2d:92:f6:97:76:68:b9:3e:4c:fd:50:7c:ec:c6:00:c5:f0:55:
79:ad:58:25:84:2f:ca:71:c8:56:ce:16:cd:20:f8:f3:67:25:
97:13:36:a5:9e:00:12:82:2a:10:04:69:f2:da:6d:67:0a:af:
76:cd:4c:0b:77:c2:a0:3c:e2:38:c5:51:1a:44:42:a8:fe:49:
00:d1:9c:5d:c5:aa:d1:db:12:da:bb:07:e6:3d:0c:c4:4b:8b:
46:90:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:28 2025 by rpki-client