Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EFEBE4ACDC511EF9DD98F99762E951A.roa
File: 1EFEBE4ACDC511EF9DD98F99762E951A.roa (raw, json)
Hash identifier: TnCnYoTraeJj83Pel1eAk5/dJZ/XnURGqUV18GZrW9M=
Subject key identifier: F1:65:8E:1F:4A:88:C6:10:8A:55:C6:F0:A2:8F:39:C6:F6:CF:AE:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013734
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EFEBE4ACDC511EF9DD98F99762E951A.roa
Signing time: Wed 08 Jan 2025 13:33:19 +0000
ROA not before: Wed 08 Jan 2025 13:33:15 +0000
ROA not after: Tue 16 Dec 2025 13:33:15 +0000
asID: 984
IP address blocks: 154.200.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79668 (0x13734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:33:15 2025 GMT
Not After : Dec 16 13:33:15 2025 GMT
Subject: CN=677e7e9e-ec2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:a0:fa:e5:4e:58:ef:6a:bb:06:ce:e0:e1:
43:42:2f:62:22:aa:43:03:cf:ea:43:e2:28:b5:65:
b7:d1:1c:02:6e:03:ca:17:87:65:b3:d8:dd:52:16:
54:12:3e:8e:1a:af:78:2a:0b:5e:37:05:8b:78:ed:
fb:cc:cc:e5:20:35:25:c5:41:46:b0:70:bd:3a:c8:
de:11:d9:b1:65:2b:bc:60:3c:26:50:52:b6:6e:ca:
b8:87:e1:f0:23:cd:e0:c9:f5:83:11:96:f8:f3:62:
3b:30:7b:56:8b:c7:10:3f:3f:35:2e:69:75:83:99:
85:b6:48:88:8b:03:c7:eb:95:e6:c6:88:ba:f9:35:
9d:7e:18:10:dd:52:50:4e:30:09:2d:fd:2f:92:37:
97:01:d0:4e:1f:e8:38:7b:6e:aa:b8:32:e2:c2:d7:
b2:3e:d0:d5:57:34:75:fb:a4:b8:6d:ea:c0:1f:47:
e8:5a:2e:c4:9e:0d:26:8f:ef:b1:b3:98:81:13:1e:
9b:09:3f:c9:39:e6:f3:78:d9:d2:a9:a5:26:7c:e8:
e3:b8:f2:4e:a5:77:53:2c:cf:53:82:2c:55:f1:fb:
54:27:57:6d:c0:e1:72:47:54:4c:84:93:9d:92:ab:
ec:f7:15:ab:07:3d:8c:d3:3d:b8:7a:f7:18:47:41:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:8E:1F:4A:88:C6:10:8A:55:C6:F0:A2:8F:39:C6:F6:CF:AE:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EFEBE4ACDC511EF9DD98F99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.251.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4f:dd:fc:80:c9:8b:f2:09:f1:8e:93:25:e1:a3:12:06:ae:
2f:b7:a0:36:ab:1f:95:e5:01:32:7a:9b:c2:58:f0:41:bd:f9:
8e:94:4a:75:35:2a:20:dd:3b:a4:1c:52:f0:17:68:51:e4:a7:
85:fe:3c:59:93:a2:ec:f3:6c:e3:28:4a:3b:36:4d:13:6e:27:
2b:a2:f4:82:86:d9:11:ae:28:cd:ec:18:08:82:4b:e4:cc:de:
8f:f9:ba:ba:1f:6a:d8:d5:7e:d9:df:1b:bc:05:e8:40:cf:2c:
17:60:ba:85:d7:b3:46:8d:73:de:7b:bd:1c:7a:0a:f1:82:97:
7a:1c:6b:75:12:ae:fe:7b:83:1d:e7:66:61:3c:38:e6:0d:a9:
4f:cf:db:4f:0b:da:79:30:94:b5:98:eb:d1:99:c1:94:3a:15:
05:45:36:bd:5c:3d:14:cc:00:1a:10:ed:f8:dd:33:57:8b:c0:
e1:f6:ac:1c:ee:29:45:83:b7:27:85:d9:00:b0:c2:1d:6e:6e:
3e:48:55:e4:8f:e0:c5:17:f5:9d:20:9b:cd:0d:7d:c6:57:cf:
34:25:db:76:e3:6d:70:6f:65:42:0f:8e:c4:54:23:c3:d3:69:
f4:5d:e6:8b:6b:ae:84:99:49:10:c4:30:cb:1e:c3:32:f4:15:
3b:9d:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:00:10 2025 by rpki-client