Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168A2A2EF44411EF948DB463762E951A.roa
File: 168A2A2EF44411EF948DB463762E951A.roa (raw, json)
Hash identifier: 8UXImVMc3T/xMLz0RExFvFwYrTlx+WYc7LtvcJqHQ2Q=
Subject key identifier: FD:F7:92:16:EB:08:CA:E3:27:A6:73:3F:3D:4E:08:FF:8F:15:03:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168A2A2EF44411EF948DB463762E951A.roa
Signing time: Wed 26 Feb 2025 13:17:54 +0000
ROA not before: Wed 26 Feb 2025 13:17:51 +0000
ROA not after: Fri 20 Feb 2026 13:17:51 +0000
asID: 984
IP address blocks: 154.83.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91046 (0x163a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:17:51 2025 GMT
Not After : Feb 20 13:17:51 2026 GMT
Subject: CN=67bf1482-0702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:96:9b:fc:85:e7:80:3d:0c:73:f9:70:ad:
46:90:81:d2:1a:77:37:52:fe:52:67:af:3e:7e:4b:
4f:2a:e7:04:5b:f4:d9:54:95:60:86:65:6e:7b:84:
3c:66:34:a5:b9:5c:b5:01:b5:6d:ed:da:f1:17:ba:
83:de:2a:59:f5:a7:3a:c5:4e:bb:33:fa:61:fb:4e:
41:f3:b2:66:51:96:d4:43:5e:f3:9d:a3:36:84:8d:
9f:e1:f3:87:ce:27:4e:49:20:a5:17:61:51:04:27:
30:aa:23:aa:47:e4:4c:10:25:fb:2b:80:c5:9b:e1:
cd:93:87:e0:03:2a:82:f2:1c:ba:75:c4:9b:3f:c4:
25:4c:25:cb:7d:fb:ba:4f:cf:c8:9b:23:84:67:71:
23:e3:6a:b5:90:a5:50:49:5f:ed:c0:f4:ca:4c:7a:
2c:9b:a8:60:f0:f1:e0:d0:dd:91:c8:2d:47:0d:22:
65:4d:76:3b:c7:06:58:9d:d3:35:a3:89:41:49:15:
ce:08:cb:bf:bb:c2:63:ec:7c:d7:49:df:56:9f:3a:
d0:c4:75:e1:a2:03:53:4f:62:61:b1:47:c4:74:29:
d9:e8:d7:c5:ad:e2:05:00:9b:fc:13:6e:59:83:9b:
94:d7:f6:ce:3b:80:74:32:54:1d:40:b6:e5:13:75:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:92:16:EB:08:CA:E3:27:A6:73:3F:3D:4E:08:FF:8F:15:03:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/168A2A2EF44411EF948DB463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.168.0/24
Signature Algorithm: sha256WithRSAEncryption
31:95:8a:d2:a7:c8:53:1e:62:61:84:5c:f6:50:b1:3c:65:a7:
0b:a3:03:02:31:53:e3:d2:89:6e:bc:ca:05:e7:0b:db:e9:4b:
97:6e:12:8f:15:23:69:fa:46:2b:e1:f4:15:ce:d9:86:8d:91:
c2:f6:97:84:f7:3d:41:0a:c5:d2:e0:1f:e0:8b:eb:ad:46:4a:
72:60:dc:72:a5:36:cf:62:38:15:7c:e8:d9:d7:be:cf:08:65:
19:86:44:4c:56:7f:07:26:96:98:bb:a5:e8:c2:c2:7d:b8:9f:
7f:7c:4d:de:5e:10:92:fb:32:f4:8f:23:c3:0e:26:7a:f0:a2:
1e:4a:41:ef:08:47:58:d3:9f:1e:0e:83:00:0e:c6:b4:0e:36:
60:d9:b2:69:b3:e8:8a:d1:bd:55:24:c0:03:83:bc:81:08:ec:
61:12:a3:27:33:93:dd:ea:07:b2:56:c6:b6:c2:35:a9:37:09:
e3:66:5d:2a:8f:46:89:90:13:f0:a3:66:7e:0c:62:e6:b1:4f:
af:07:9f:7e:5b:16:6f:e0:5c:df:56:90:38:6f:ae:58:b5:34:
04:e0:54:15:2f:45:96:b7:5f:6d:d0:e7:e2:1d:15:dd:72:e6:
d0:56:78:d2:96:f9:e5:73:d3:bc:05:62:93:eb:39:ba:f4:98:
ca:14:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:38 2025 by rpki-client