Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/287691D0F43211EFAA529463762E951A.roa
File: 287691D0F43211EFAA529463762E951A.roa (raw, json)
Hash identifier: RAMX4LxQLq2SwmZTzryhBNLcGr/P76PQ7H+fJXTRZG0=
Subject key identifier: 94:F1:38:DE:C3:CA:41:51:38:45:6B:D8:F3:0D:1E:F5:46:F1:7D:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016279
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/287691D0F43211EFAA529463762E951A.roa
Signing time: Wed 26 Feb 2025 11:09:34 +0000
ROA not before: Wed 26 Feb 2025 11:09:30 +0000
ROA not after: Fri 20 Feb 2026 11:09:30 +0000
asID: 984
IP address blocks: 154.199.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90745 (0x16279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:09:30 2025 GMT
Not After : Feb 20 11:09:30 2026 GMT
Subject: CN=67bef66d-73db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:2e:11:61:d4:48:4d:08:c5:b1:02:0d:e1:
70:c2:77:fa:9e:e4:7d:e1:f8:d7:8d:af:53:df:72:
66:95:6b:39:43:50:51:cb:b6:92:b7:8a:91:eb:aa:
55:9c:92:da:49:50:82:dd:83:e8:85:10:3d:88:d8:
5b:4f:67:a6:19:8f:a6:25:d3:23:36:54:99:c0:68:
30:20:2b:0e:2f:28:31:24:92:30:f0:de:dc:d3:04:
69:c0:4f:b0:17:50:99:a6:9b:81:41:5a:d9:54:9e:
c3:6e:87:8b:f6:e8:9f:09:0a:4d:51:8e:c9:26:4a:
6d:23:3c:bf:07:f1:b8:c9:2a:1e:f0:c5:de:28:da:
b7:5a:08:2d:a9:2f:3c:cc:f7:e7:26:35:d8:16:f1:
b2:0d:a4:71:ca:b9:69:b6:92:cf:47:dd:1a:4d:4f:
b7:b6:81:0f:b0:11:7d:15:d7:e0:6d:e3:1f:47:ce:
c5:af:3c:a4:48:7a:fe:a6:b1:3d:27:6c:72:a9:28:
19:55:db:79:1c:bf:a8:75:89:f4:e3:9c:4e:33:31:
af:73:62:f5:39:bd:4c:bd:3f:7c:67:7a:b1:05:88:
59:7e:fc:35:03:90:db:1d:51:d0:54:aa:ed:42:25:
f6:72:53:61:66:4c:ff:28:e7:9d:07:ae:43:25:d4:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:38:DE:C3:CA:41:51:38:45:6B:D8:F3:0D:1E:F5:46:F1:7D:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/287691D0F43211EFAA529463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a6:0a:15:d8:1f:e8:58:cd:6c:c6:4f:39:a4:95:90:0d:8d:
3e:e1:f1:7e:0e:99:e0:2a:ea:c8:d5:62:06:9c:5c:6d:4a:e5:
b3:3b:94:d1:f9:b0:65:35:ee:f4:56:56:10:5f:4f:ef:c6:b9:
3a:0e:d0:87:66:ac:1d:65:e0:13:ef:6c:60:12:ff:9c:e2:c4:
6e:e2:f6:8c:64:69:1d:e6:af:f4:b3:90:a7:b1:8c:eb:85:c2:
b1:d7:5f:e5:ed:de:8e:13:f0:5a:ea:3d:f5:28:05:3f:cf:51:
0e:b7:1f:e5:e5:98:c7:a0:fb:13:cf:8f:c2:57:de:a4:28:10:
d9:d1:3b:8a:03:28:66:ec:4f:e2:4c:ca:b8:c0:ca:2a:0b:3c:
36:3d:82:9d:e6:6b:3e:2b:e6:0a:40:3d:03:72:89:c7:4c:5e:
ea:2b:25:ba:44:c2:ca:69:bd:81:ac:38:ea:95:b5:78:03:9d:
27:23:1e:5c:65:06:4b:e1:62:d3:d2:60:3c:58:27:b6:5c:01:
7e:ff:f4:35:c6:3d:88:31:f8:e7:43:d9:7c:0c:83:90:79:85:
73:9f:63:e8:cc:62:ae:2e:bb:7c:d0:8d:72:df:f1:50:d6:82:
17:cb:9b:f3:95:c7:3b:22:f0:b3:ea:18:0b:3b:e0:bc:50:4d:
d5:1d:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:27 2025 by rpki-client