Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F2F3A12F45C11EF90468E8A762E951A.roa
File: 1F2F3A12F45C11EF90468E8A762E951A.roa (raw, json)
Hash identifier: zxna3W2UTB1SXJdRLmmRmE2grgyAJxII/Y9CzfAIL68=
Subject key identifier: 8E:22:81:3F:6A:EB:7E:85:63:0C:4D:94:9B:84:05:E4:79:EE:3A:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01650E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F2F3A12F45C11EF90468E8A762E951A.roa
Signing time: Wed 26 Feb 2025 16:09:57 +0000
ROA not before: Wed 26 Feb 2025 16:09:48 +0000
ROA not after: Thu 19 Feb 2026 16:09:48 +0000
asID: 984
IP address blocks: 154.210.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91406 (0x1650e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:09:48 2025 GMT
Not After : Feb 19 16:09:48 2026 GMT
Subject: CN=67bf3cd5-ca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:04:41:4f:72:84:40:89:7c:bc:5e:33:6e:
fe:de:6e:77:17:a0:de:dc:de:18:47:10:91:bd:b5:
cd:8d:2c:2c:e6:f1:e4:2a:f8:f7:0b:f6:30:da:4e:
a7:d4:b6:be:eb:e3:9c:fb:3f:c9:25:73:6d:03:6a:
ec:08:2f:d7:78:e0:04:5f:eb:e7:5c:87:8f:7d:2d:
17:d6:a2:07:d8:90:83:5b:26:38:91:4e:32:2d:0e:
dd:01:ed:d6:3c:75:ea:71:53:63:5a:f7:2f:e2:48:
b5:d8:98:41:aa:57:03:42:dc:d2:31:0a:6b:b7:d1:
fb:ee:a0:94:71:5c:8f:4c:30:39:c9:a2:43:52:16:
c7:4c:6d:b7:e0:b8:cd:56:67:22:20:22:cd:15:53:
b3:1d:24:2e:ac:5e:31:52:5c:a4:10:21:a6:35:24:
7d:b5:ae:49:f9:ba:87:e3:e1:f7:81:ab:53:2f:32:
ab:b1:e7:7d:56:c2:df:09:98:1f:35:2f:d8:e4:92:
c4:6a:0a:3a:6b:8e:3f:e3:81:b3:fa:8d:ed:0f:10:
60:22:a8:e1:17:92:87:13:4f:b1:3f:ef:70:b3:a5:
87:ec:8e:7e:9f:d3:12:9b:15:30:a5:d7:fa:36:8b:
ed:46:80:b4:df:4a:30:d4:aa:92:82:a1:a7:cb:5c:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:81:3F:6A:EB:7E:85:63:0C:4D:94:9B:84:05:E4:79:EE:3A:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F2F3A12F45C11EF90468E8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:05:dc:18:e7:a1:3e:cf:ab:ed:ea:ce:b4:b5:01:be:79:4d:
1b:01:c6:dd:d2:e3:25:95:56:c2:81:a1:42:19:da:83:1b:67:
ff:f5:4a:55:50:df:d1:06:69:6d:dd:18:08:0b:0e:0c:4c:93:
a7:9c:82:55:72:ee:4b:2b:7f:67:6e:f6:d3:24:a0:2b:41:c7:
eb:21:e2:c2:bc:ed:75:b3:21:23:d9:14:46:e0:54:17:a7:95:
9f:cd:36:77:c9:48:3e:7b:8a:09:02:4d:97:d8:f1:3b:b7:de:
60:68:18:1d:72:9f:2c:bc:36:23:b6:93:24:13:84:f1:5b:8a:
42:10:40:51:8a:d9:04:cd:53:13:c9:02:65:73:88:88:6f:90:
aa:d9:5a:17:7e:0d:af:00:18:49:87:47:45:da:1b:d3:48:e3:
8d:82:81:c0:7e:4e:c6:b1:18:8d:8f:5c:b9:69:4d:63:52:dd:
52:18:d7:2d:94:4a:24:d1:21:73:e0:ea:9c:d2:a8:17:e2:05:
4a:72:f8:fa:b0:af:df:52:f2:46:62:fe:61:ed:53:67:11:a5:
f0:01:70:09:ec:da:8a:10:58:07:7c:1d:f7:72:98:b6:e4:36:
02:0d:c8:da:56:8e:82:56:52:da:f8:4c:64:06:0f:7b:22:cc:
00:8a:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:55 2025 by rpki-client