Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/406A5580F42B11EF85F51DB2762E951A.roa
File: 406A5580F42B11EF85F51DB2762E951A.roa (raw, json)
Hash identifier: LXijNl/CcVUM7+KwgPHQ+p7nJi1XXXwvgRlZLadx8V0=
Subject key identifier: 7B:2F:73:59:03:9D:D1:1D:3F:8A:2F:19:82:EB:BC:94:75:24:42:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01622D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/406A5580F42B11EF85F51DB2762E951A.roa
Signing time: Wed 26 Feb 2025 10:20:07 +0000
ROA not before: Wed 26 Feb 2025 10:20:03 +0000
ROA not after: Thu 19 Feb 2026 10:20:03 +0000
asID: 984
IP address blocks: 154.208.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90669 (0x1622d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:20:03 2025 GMT
Not After : Feb 19 10:20:03 2026 GMT
Subject: CN=67beead7-7507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:53:8d:a9:5f:1a:23:f9:ed:89:11:41:58:
40:74:1d:de:5f:be:19:23:b7:26:a0:bf:7e:a2:b4:
af:a7:0b:80:39:76:41:36:14:8f:76:48:04:77:6e:
d7:28:a5:96:11:e8:bf:a1:75:e7:9a:e2:08:f7:35:
fc:28:37:cb:6d:26:de:a4:94:a5:3b:9d:e2:49:fb:
d3:d0:dc:a0:8f:02:ab:a5:7a:1e:95:9f:bb:0a:37:
fa:8c:6e:09:88:a5:18:b3:c9:3e:6a:42:df:79:a6:
2a:44:c0:29:4a:f3:e0:be:79:fd:a5:b6:37:c3:ed:
f1:5f:11:30:b0:bd:95:41:93:b0:c0:e9:77:3b:df:
29:79:e1:27:75:7b:3f:9f:5a:68:be:b2:f2:23:88:
ac:89:35:7b:38:1b:38:c4:6a:6a:79:3d:b6:f7:19:
78:b0:43:38:a1:34:bb:c1:37:71:4e:6e:1f:cc:07:
7d:0e:34:be:1e:d8:61:eb:2b:db:de:66:ff:b6:91:
12:1e:60:3b:3f:94:0f:c6:21:f8:ae:be:66:27:d4:
f0:e2:b8:69:e6:eb:d7:cd:c1:56:1c:40:3a:7d:ff:
87:d0:61:56:cc:93:c3:c8:28:16:f4:0f:ae:91:c2:
2e:50:f0:50:f0:73:e0:d5:13:e3:7e:5b:17:41:dc:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:73:59:03:9D:D1:1D:3F:8A:2F:19:82:EB:BC:94:75:24:42:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/406A5580F42B11EF85F51DB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.72.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:4a:5f:a6:45:89:67:e9:f9:6b:f3:18:6b:64:3c:c7:38:97:
54:23:92:8c:46:9b:7d:d8:a7:ae:d0:5e:54:dd:2f:b8:f6:36:
47:43:48:90:38:ea:45:40:92:c4:02:67:36:da:b1:23:33:3d:
50:ad:31:60:af:68:83:82:ce:3d:e0:6f:7e:dd:41:6e:a9:78:
2c:e3:45:53:a7:35:99:49:ed:32:16:1f:70:be:31:16:2f:9b:
1c:30:38:8e:e9:68:d5:66:e9:9d:d0:1b:25:ee:ca:b9:2b:df:
19:c1:bd:96:02:e9:6e:93:04:db:e7:0e:ff:a2:73:bd:30:6a:
ac:c7:61:b7:64:e2:c5:e6:4f:70:25:42:cd:55:3b:45:29:bd:
52:a0:a7:d7:01:86:7c:73:66:a2:4f:88:ab:fe:ee:72:f9:67:
bf:24:e7:58:de:01:a7:c4:55:ce:8f:6d:66:12:8c:db:8d:e6:
5f:64:fc:ec:0e:9b:f2:77:75:90:32:37:fb:d3:f9:01:9a:60:
5c:17:b6:0d:6b:55:a0:81:25:5f:ad:1d:b7:31:80:33:e6:e6:
0d:9e:26:b8:2c:a4:51:47:0e:41:63:c5:df:52:56:8b:59:bb:
81:91:58:0d:45:dc:a4:2a:cf:e7:39:2e:c4:af:7c:e4:fe:5b:
b8:ce:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:17 2025 by rpki-client