Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FF26D6F5C811EFA053A858762E951A.roa
File: 21FF26D6F5C811EFA053A858762E951A.roa (raw, json)
Hash identifier: 4su9WknmnwSPtzyawt6RVpFEn2V/fLMZwP5suOmLxqE=
Subject key identifier: 6C:35:70:70:F2:2B:64:30:EB:47:E2:DE:6E:A1:9B:EC:A0:77:21:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FF26D6F5C811EFA053A858762E951A.roa
Signing time: Fri 28 Feb 2025 11:35:38 +0000
ROA not before: Fri 28 Feb 2025 11:35:35 +0000
ROA not after: Fri 11 Apr 2025 11:35:35 +0000
asID: 63139
IP address blocks: 154.203.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92920 (0x16af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:35:35 2025 GMT
Not After : Apr 11 11:35:35 2025 GMT
Subject: CN=67c19f8a-6ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:8a:e1:f1:b3:26:4c:7d:b2:e5:31:4c:f0:
23:1d:79:7d:63:2f:bb:3c:61:35:97:19:6f:27:c7:
ec:05:81:37:dd:58:eb:13:28:61:9e:4e:78:a5:06:
29:bd:16:9c:78:49:63:6a:d8:35:9a:48:63:cd:6b:
e1:d2:72:05:ab:2b:10:62:9e:f7:68:3e:a6:58:a9:
96:f5:45:33:d5:21:af:08:a0:06:04:30:6c:9a:78:
5f:5c:af:9a:91:61:08:d6:f3:2a:58:fc:b9:16:84:
8d:b3:30:08:83:f0:20:20:91:ed:73:6c:27:36:60:
5f:0c:04:d8:d0:b5:0a:b3:70:a0:85:72:8a:49:4c:
53:16:99:72:fa:c7:f1:06:69:ff:73:45:85:45:f5:
8f:bf:65:0d:25:71:ba:2b:10:b3:6b:1b:68:1c:8a:
8e:19:2d:7f:2f:36:19:83:6c:37:09:c8:33:82:ce:
0a:2f:26:27:9a:bc:57:7e:9d:c3:38:f0:ab:17:5f:
e2:9c:6a:b1:29:87:57:8e:1e:e0:83:be:32:b2:58:
06:f5:ef:90:5a:d5:89:ab:cc:37:85:78:6d:6f:7b:
c1:b1:96:69:33:c9:54:d1:15:12:9e:fd:da:66:b7:
f0:43:b1:77:f7:aa:01:4f:4e:de:b5:4a:c0:85:55:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:70:70:F2:2B:64:30:EB:47:E2:DE:6E:A1:9B:EC:A0:77:21:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FF26D6F5C811EFA053A858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:49:cc:0c:ad:8e:02:a6:af:e1:97:d5:e1:b1:5a:b9:77:87:
fb:22:88:e2:a0:9d:8a:7a:22:97:f9:7c:26:87:4f:6e:1b:03:
72:1a:99:80:72:5a:57:3b:c2:8f:73:58:3b:f0:8e:dd:de:41:
59:83:a9:be:10:c9:b9:e3:c9:6e:11:fa:32:df:03:0c:3b:c2:
54:07:12:08:34:cc:12:6a:0d:7d:71:0b:69:ac:98:69:0d:07:
13:f3:11:09:4b:b5:95:77:0e:6a:a8:79:29:27:cf:2a:00:a3:
0e:1a:4b:27:8c:06:02:d4:1e:c5:20:30:05:43:d8:36:fd:b1:
2a:93:ee:fd:b8:77:75:0d:e6:ae:cf:d5:31:89:26:46:41:16:
c4:5a:b7:44:c2:7e:ad:63:b1:f2:79:8f:85:e1:95:ae:ba:dd:
38:39:10:96:3d:e5:e4:40:c9:0b:47:6f:01:59:97:40:0d:76:
46:9c:01:de:75:62:bf:d2:fc:fe:cf:7a:1d:b8:3b:f1:17:40:
4c:f1:9c:7e:97:d7:71:a0:e5:90:fe:93:c2:c2:46:ab:42:48:
df:a9:61:8d:81:5b:34:21:a8:3e:e3:f5:e7:ce:bd:50:94:ac:
24:fd:83:a2:db:44:a8:20:e6:62:48:2e:e3:c4:76:33:64:61:
bd:34:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:34 2025 by rpki-client