Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AC96C6F4A311EFAC2D4F70762E951A.roa
File: 12AC96C6F4A311EFAC2D4F70762E951A.roa (raw, json)
Hash identifier: Z2myCmJE8DgIkL+eADmpOOgS+YrgZtqpHcD+ZqTu7Js=
Subject key identifier: 82:FF:14:45:4F:18:C0:48:79:A1:C3:0E:BE:90:8B:24:AA:09:83:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01660B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AC96C6F4A311EFAC2D4F70762E951A.roa
Signing time: Thu 27 Feb 2025 00:37:50 +0000
ROA not before: Thu 27 Feb 2025 00:00:46 +0000
ROA not after: Thu 19 Feb 2026 00:00:46 +0000
asID: 984
IP address blocks: 154.200.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91659 (0x1660b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 00:00:46 2025 GMT
Not After : Feb 19 00:00:46 2026 GMT
Subject: CN=67bfb3de-6d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:64:9b:7f:5c:0e:4c:a6:41:3e:30:9e:ef:
8c:86:39:7c:1e:92:07:06:67:2c:4f:ef:b8:da:e1:
e8:66:26:26:01:53:9e:dc:c9:9a:e5:4e:8f:df:36:
b5:43:df:4d:4c:6b:37:d6:f4:e8:4c:dd:12:af:87:
6c:cc:54:19:b9:1e:2a:72:e6:24:5e:af:7c:c4:2b:
06:09:25:54:77:36:54:d2:24:a4:f9:61:0c:f4:80:
c0:be:7d:66:8c:ec:d9:5c:2d:3f:1c:54:b6:6d:d3:
f0:fe:a1:96:fc:f2:34:b1:45:0d:f8:93:3e:06:5a:
77:ce:c1:c7:56:aa:d3:ee:04:eb:e0:8f:98:a6:a2:
0e:12:a1:fa:86:26:c4:38:26:3c:b1:24:c8:e5:5a:
5c:d0:01:43:0e:f7:73:7d:0f:8d:f8:2c:6a:08:3e:
bd:b1:0e:65:c9:1e:49:b3:fd:0d:e1:92:11:ae:8c:
31:1c:e9:23:59:4f:dd:96:fa:43:37:9b:dd:2d:c2:
a5:79:6c:1c:0e:9f:3e:20:56:75:37:65:5e:88:4d:
b1:f3:4a:8d:9e:71:fa:d3:86:17:3e:b2:cb:5a:d8:
3c:7a:93:50:13:fd:c2:9e:15:77:49:f0:04:00:54:
c0:08:c6:d4:be:5c:f7:85:01:57:ac:e2:6d:09:26:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FF:14:45:4F:18:C0:48:79:A1:C3:0E:BE:90:8B:24:AA:09:83:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AC96C6F4A311EFAC2D4F70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.45.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b4:a4:fb:b7:32:a3:c2:15:c5:f4:b6:1c:ca:c3:61:fa:d4:
8d:bf:92:08:bc:44:a3:e8:4e:bc:6c:07:20:81:13:db:07:2a:
80:69:1f:d2:83:af:63:b7:47:07:a6:7b:ed:1f:d3:08:84:49:
be:7e:a4:51:b6:3a:6f:8d:f2:ae:29:f9:94:63:e6:9d:51:42:
f8:03:d1:4a:4d:16:51:a2:c3:2f:d0:2b:b3:db:a9:6a:cf:c6:
00:f4:75:5d:0e:ce:6b:a9:cd:b6:6c:6d:bf:95:21:de:25:cb:
a0:1f:54:e7:d0:a4:21:fd:57:27:30:37:08:8e:ad:fd:74:4c:
85:33:d4:d6:6f:53:90:a8:8e:8b:ba:7c:ac:8f:86:db:7b:86:
d7:f7:1e:f2:8d:d0:52:0c:1d:e9:7a:8b:d0:ae:d9:d5:5b:c2:
bd:92:99:c9:b3:d2:2e:89:79:8d:3e:aa:00:ee:12:d3:4e:85:
e9:d1:54:ee:fa:3a:f1:ae:fe:af:45:e3:97:f8:ac:90:6a:7a:
21:77:a2:55:c4:af:14:1b:5e:c7:93:83:97:60:78:a9:5c:06:
70:67:db:50:fb:16:f7:dc:b9:58:e8:da:c8:6b:2d:06:06:41:
af:7e:5a:1c:7f:26:ee:23:67:9f:fa:f8:99:86:12:cd:46:40:
05:0a:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:00 2025 by rpki-client