Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122B1F3EF45711EFA92B8568762E951A.roa
File: 122B1F3EF45711EFA92B8568762E951A.roa (raw, json)
Hash identifier: CwyyyErtXDOEz/G5romrhQUfOZ5kYOBROvGwFGAqYe8=
Subject key identifier: C1:C9:52:CF:2D:EE:E4:6D:0D:5D:64:D6:AE:EA:43:4F:B6:18:5A:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122B1F3EF45711EFA92B8568762E951A.roa
Signing time: Wed 26 Feb 2025 15:33:48 +0000
ROA not before: Wed 26 Feb 2025 15:33:42 +0000
ROA not after: Thu 19 Feb 2026 15:33:42 +0000
asID: 984
IP address blocks: 154.210.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91356 (0x164dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:33:42 2025 GMT
Not After : Feb 19 15:33:42 2026 GMT
Subject: CN=67bf345c-9fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:2b:00:5f:61:10:29:3f:95:59:84:80:eb:
77:ba:f4:fd:5e:d5:71:ea:11:b8:d2:9f:59:35:f6:
87:f7:8a:3b:73:e0:1c:78:33:9c:e2:70:9a:93:19:
f9:15:22:e2:52:45:a3:09:36:6e:ec:bf:4b:66:73:
83:80:bb:10:aa:85:90:d9:14:14:b7:94:05:55:ca:
0e:58:ec:86:f4:88:e7:56:24:24:3b:67:1d:57:79:
55:13:29:dd:9a:ab:99:d0:a5:bb:53:de:25:08:ac:
d5:d4:a9:8c:7b:aa:16:91:6d:a7:b6:86:b4:3c:f2:
23:ac:1b:36:4b:56:02:50:94:6b:3a:f1:6b:40:75:
2b:d8:4a:dc:05:4e:9f:6a:84:46:c6:53:b6:73:72:
3a:61:53:c3:e8:11:b4:65:9f:32:0e:1b:e4:8e:f3:
60:2d:08:bb:46:91:f4:b5:21:40:49:8f:f9:e8:f5:
53:a3:36:a9:b4:a1:02:71:60:3e:8d:dc:22:49:ed:
51:f2:b2:b5:cf:ac:de:d0:b0:c0:aa:b6:90:d9:2d:
03:01:e1:a5:cd:90:87:82:f3:02:0f:ab:d4:0d:a7:
8d:38:95:8b:63:5e:ac:73:7d:20:24:29:e3:d0:3e:
a4:5a:e4:a5:eb:f6:03:f7:64:d9:cc:79:ce:2c:60:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C9:52:CF:2D:EE:E4:6D:0D:5D:64:D6:AE:EA:43:4F:B6:18:5A:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122B1F3EF45711EFA92B8568762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fa:61:0c:46:10:d2:c5:89:c2:0f:d0:fe:00:68:81:85:2e:
c1:ad:ec:2a:18:62:f6:d3:59:43:9f:86:9b:41:01:d0:5b:5d:
c9:1e:71:b1:82:8a:06:0f:ec:b0:71:63:a6:fe:74:d9:d2:7d:
51:1d:d4:86:34:9d:04:25:a1:fb:ef:4b:76:b5:f7:a3:ab:26:
88:f9:e2:2a:d3:5b:f9:3d:ea:f3:08:21:e5:f7:63:8a:50:94:
91:d4:8d:c3:51:09:38:bb:d2:e5:df:df:62:ff:48:22:73:55:
55:2c:0e:04:e6:60:ac:25:6a:4a:cb:ce:06:36:a3:95:cd:bc:
e3:d4:f7:db:5c:32:3f:ab:16:67:04:1d:b2:e8:0d:7d:31:a0:
07:8d:4d:b5:c5:45:f5:ef:9e:d2:a4:a6:bc:e9:8f:4e:5a:68:
d2:f5:d8:47:7e:01:19:0c:e8:6c:b5:cb:8d:4c:55:f3:43:ba:
08:aa:77:0a:b9:57:e0:64:39:b4:56:8e:6d:65:5d:e1:49:d2:
27:da:4c:fe:ed:0f:16:89:01:cd:32:15:0f:d8:40:c9:2c:90:
79:d9:54:93:0e:27:6f:88:42:99:fc:02:8e:9f:fe:0e:fb:e9:
f2:2f:27:ca:91:7e:4f:e4:d9:da:f2:06:87:57:f2:d3:5c:d2:
35:af:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:49 2025 by rpki-client