Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13DC7DDEF3F611EFBF7D174A762E951A.roa
File: 13DC7DDEF3F611EFBF7D174A762E951A.roa (raw, json)
Hash identifier: VymnVWj3P17ZpyUUpLBBLcZT8/uLNXndl0ld+kLpkbc=
Subject key identifier: 4D:2D:5F:F6:40:D8:22:9F:64:01:99:B4:48:BB:37:84:34:75:59:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13DC7DDEF3F611EFBF7D174A762E951A.roa
Signing time: Wed 26 Feb 2025 03:59:29 +0000
ROA not before: Wed 26 Feb 2025 03:59:25 +0000
ROA not after: Thu 19 Feb 2026 03:59:25 +0000
asID: 984
IP address blocks: 154.203.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90303 (0x160bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:59:25 2025 GMT
Not After : Feb 19 03:59:25 2026 GMT
Subject: CN=67be91a1-6d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:12:15:8d:4d:e1:7d:04:11:e3:ae:59:5a:73:
b6:52:08:94:4e:02:84:9a:04:86:a3:fb:8b:43:c3:
c7:1d:31:cc:c6:64:7b:4d:9d:61:02:1d:42:dc:0c:
69:c8:25:bd:9d:c2:0d:9b:8a:8b:e0:ca:a3:cb:d7:
12:53:e0:0c:3b:a2:56:76:08:3e:6b:96:f7:5c:34:
86:05:dd:65:b1:43:6b:28:d6:c2:9e:5b:fa:2c:80:
dd:9e:66:26:0c:5a:12:65:c4:d3:87:5a:92:1d:75:
a5:aa:46:6a:e9:5b:d7:86:4c:d4:7d:22:25:e0:c1:
5b:d8:5c:91:e8:dd:1e:59:94:f9:f2:fb:31:26:66:
92:84:98:c0:6e:11:0b:59:3f:00:c5:48:67:c5:95:
9a:a8:45:15:f0:17:af:bc:db:78:0d:3e:57:e6:6a:
06:a1:3e:4b:32:05:95:d8:5c:4a:b9:3c:30:51:de:
d7:36:12:e5:aa:17:4a:49:39:e5:39:e2:3b:e5:cf:
31:f3:30:fd:a8:a7:9e:c9:6c:1a:fe:57:e7:28:14:
a3:92:c4:e8:84:fb:a7:6c:0b:fa:0a:4b:0c:ec:9f:
4e:c9:80:05:57:73:fe:73:9c:1a:19:7a:d7:fd:5b:
28:d7:4e:ad:6f:63:c9:3e:3d:70:32:c1:7b:a9:6b:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:5F:F6:40:D8:22:9F:64:01:99:B4:48:BB:37:84:34:75:59:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13DC7DDEF3F611EFBF7D174A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.119.0/24
Signature Algorithm: sha256WithRSAEncryption
44:bc:3b:ab:cf:2c:45:c4:7c:88:6a:9e:a5:0f:9f:87:64:45:
40:68:71:5d:62:62:66:f9:20:e2:a5:c3:0d:33:cc:08:d6:1a:
59:e9:c3:6d:08:4a:c7:4e:8a:63:2a:f9:ac:d2:2e:80:44:f4:
f2:20:96:ad:17:f2:62:69:36:76:50:04:7c:4e:88:18:e6:9c:
47:db:29:76:ff:44:d2:c9:87:3f:da:e8:a4:49:50:2a:02:1b:
0e:e9:e2:79:be:e8:06:9b:45:0d:6a:67:fe:8e:49:f0:1a:24:
dd:3b:9e:33:22:c0:54:10:8c:23:25:57:d0:35:ff:4d:41:e0:
93:b7:c2:44:42:7b:f3:ae:4c:ff:5c:42:20:04:f2:82:07:7f:
2f:81:11:b2:f9:96:60:4b:6e:c2:6d:02:3e:02:53:51:89:86:
88:51:03:43:4d:a6:f1:10:4a:4f:98:58:ca:b5:d8:a1:cc:d7:
34:ca:5e:a4:a7:86:ba:16:aa:51:7a:b7:22:48:e0:05:00:e0:
9b:83:e2:85:04:4f:47:e7:b1:4b:ef:be:e2:fa:57:d5:53:89:
83:3c:b8:12:49:3e:af:fa:d8:84:9c:5f:5c:f5:2c:73:8d:e0:
75:8d:86:55:f0:7c:61:ae:c2:db:a8:a2:51:0a:3b:2a:f9:6d:
a3:f6:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:39 2025 by rpki-client