Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C509ADCF42011EFB3CBF264762E951A.roa
File: 3C509ADCF42011EFB3CBF264762E951A.roa (raw, json)
Hash identifier: iyKiq4Kt/H4N0muElx80qETra5oz34Hh17k6roE5ceg=
Subject key identifier: C3:B7:39:AE:7E:C9:56:FC:9D:07:A3:9C:04:46:3D:88:F7:E1:93:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01618D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C509ADCF42011EFB3CBF264762E951A.roa
Signing time: Wed 26 Feb 2025 09:01:16 +0000
ROA not before: Wed 26 Feb 2025 09:01:12 +0000
ROA not after: Thu 19 Feb 2026 09:01:12 +0000
asID: 984
IP address blocks: 154.206.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90509 (0x1618d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:01:12 2025 GMT
Not After : Feb 19 09:01:12 2026 GMT
Subject: CN=67bed85c-24fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:1a:42:a8:f2:cb:a4:d3:67:32:7a:b0:da:
87:ae:2b:e1:c4:70:84:dc:de:77:c8:ce:0a:9d:5f:
5a:7c:57:97:73:fe:fe:a1:f1:ac:4c:74:f3:6d:d6:
35:2d:cf:a6:f4:94:7c:d1:9e:1a:0b:ac:31:9d:e4:
16:ea:a5:6d:5f:4e:00:48:8d:ae:be:d4:16:8e:7c:
a0:cd:83:89:d7:1d:55:07:3e:d6:99:32:e4:26:8f:
4a:4e:c5:69:9c:80:ed:ae:1c:47:3b:db:74:4d:03:
f4:26:42:e1:a3:2f:64:80:4f:83:88:38:a7:e1:f3:
4d:27:f4:b7:52:3e:3a:dd:3f:39:4d:35:a4:af:4c:
96:d6:db:94:3a:e2:75:5b:e3:06:59:7a:fb:c6:24:
fc:c0:64:52:68:10:e2:9d:9e:06:51:60:ec:f6:86:
b7:72:5c:0e:40:bd:0f:a3:80:a8:fc:d5:56:f3:ef:
20:44:62:42:64:7b:2e:81:30:b2:f6:2a:00:9d:03:
45:ab:6e:aa:d8:89:5b:0a:1a:1e:1f:e5:8a:b5:7c:
fc:b1:35:12:1b:5d:cd:d0:9c:d8:ea:07:2d:ec:43:
33:41:f7:ac:ae:9f:ee:ba:99:96:a4:b6:17:5f:d4:
bc:8f:d9:80:9f:ab:46:af:2c:20:5d:51:0d:a3:16:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B7:39:AE:7E:C9:56:FC:9D:07:A3:9C:04:46:3D:88:F7:E1:93:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C509ADCF42011EFB3CBF264762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.224.0/24
Signature Algorithm: sha256WithRSAEncryption
50:71:f5:63:4a:3e:9f:33:f3:0a:08:3f:40:29:0a:7f:fc:66:
13:c9:13:c8:75:96:c4:8d:17:ec:80:d1:fa:22:9c:92:11:38:
9e:53:f8:7d:36:d2:13:a6:ea:fa:cb:be:33:7a:2d:f0:de:6b:
4a:5d:0a:83:15:4c:14:a0:38:d2:2e:03:6e:c1:d7:b5:04:92:
88:52:54:57:5b:08:e2:07:e9:53:85:df:6c:cc:b4:7a:34:48:
41:f9:e0:8f:5e:e1:d2:7c:df:d8:23:b7:75:3e:45:b4:1f:e2:
92:dd:d8:36:42:6d:8b:2b:df:3a:4b:48:ea:44:37:7f:15:65:
02:c8:e1:80:17:cb:07:2d:c8:09:7f:9b:6a:4e:20:a6:f0:a8:
c0:60:87:a6:dd:18:dd:9b:fe:d4:c8:2a:17:3a:69:e6:ad:19:
d4:d9:47:7d:87:38:3d:2d:90:17:7f:b4:66:c8:ee:1a:e9:9e:
0b:4e:74:7b:c6:42:86:c0:58:06:0c:90:53:b7:ff:cd:01:ea:
d7:0d:2f:8f:06:e0:75:f3:81:92:2e:75:c4:7f:a3:59:a6:fa:
58:dd:ee:f5:0c:1e:12:29:4f:1a:5d:74:d8:14:89:67:67:46:
f2:9a:32:99:34:54:9a:66:1b:a3:19:40:73:64:6d:a3:90:18:
a9:8b:39:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:31 2025 by rpki-client