Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B5D244F3E911EFB49A5B6A762E951A.roa
File: 41B5D244F3E911EFB49A5B6A762E951A.roa (raw, json)
Hash identifier: 2fF/cMdxHI6zAC/cMMKSosDd3F3wb9h8rnUyNYPxNA0=
Subject key identifier: 28:2B:93:65:F6:89:24:23:B0:0E:62:CE:06:33:BD:62:2C:D4:9B:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016088
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B5D244F3E911EFB49A5B6A762E951A.roa
Signing time: Wed 26 Feb 2025 02:27:43 +0000
ROA not before: Wed 26 Feb 2025 02:27:39 +0000
ROA not after: Thu 19 Feb 2026 02:27:39 +0000
asID: 984
IP address blocks: 154.203.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90248 (0x16088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:27:39 2025 GMT
Not After : Feb 19 02:27:39 2026 GMT
Subject: CN=67be7c1f-0d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:fc:4f:10:f8:66:5e:9f:b0:42:bf:ac:f6:
e1:da:4f:35:c5:da:ed:54:60:22:bf:6b:45:be:3e:
26:fb:8c:e8:46:c8:38:2e:ec:50:a4:95:b9:83:d4:
ee:e5:03:69:12:9a:d9:1a:25:0a:f1:ea:0d:22:13:
fe:4c:8f:10:b3:02:f9:51:90:cb:2c:fe:c5:b4:7b:
9c:6a:d2:43:65:42:49:2f:d8:da:ce:2c:b3:77:6b:
72:7f:b5:25:68:81:01:5d:62:6f:14:ec:13:ed:b4:
76:74:d8:e9:fd:e7:86:f0:bd:27:fe:b3:bb:8e:58:
a4:4c:0c:53:8d:51:3c:2d:d7:0f:7a:f2:e6:22:39:
cd:f4:56:75:50:98:82:eb:15:35:ff:a2:0c:81:84:
0b:ea:73:7b:78:54:9b:74:6a:e2:7b:06:65:0f:d5:
26:d0:be:72:b3:b6:1c:44:a6:b6:d5:bd:1c:e2:db:
64:f6:0a:f6:31:87:85:2d:b1:dd:be:1e:aa:0e:61:
b8:03:43:14:0f:e5:c3:24:ea:7b:d9:b4:cd:5d:4b:
d6:51:79:b2:90:c8:3b:ef:5a:97:60:36:b8:ce:bb:
7e:36:87:36:41:eb:b2:84:29:ec:7c:68:fb:d2:30:
4d:57:3f:7d:76:3f:56:9e:6e:ba:61:a6:ff:9f:76:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:93:65:F6:89:24:23:B0:0E:62:CE:06:33:BD:62:2C:D4:9B:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41B5D244F3E911EFB49A5B6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:49:bd:b6:11:0e:89:44:38:7c:ef:fa:99:8e:f1:7a:38:26:
ff:e9:5a:eb:41:7a:9d:be:45:7e:9a:33:79:d8:07:19:12:2a:
05:31:57:1d:68:74:b5:aa:ac:ae:e0:8d:05:bf:04:0c:4e:7a:
4c:40:0d:90:bc:0c:d7:d2:2e:5f:d1:51:f4:ea:4e:d8:13:1e:
d7:5d:79:17:de:0e:d3:4e:15:81:0b:44:5b:9e:80:27:46:ef:
68:bd:c6:af:43:80:1c:d9:24:17:21:eb:9c:06:01:b6:b5:68:
1b:39:8e:ba:c1:50:12:c5:0f:16:f7:ec:3f:44:77:1a:36:e0:
53:c1:f8:51:6e:a7:8a:9a:53:63:00:10:4b:76:b7:5a:f9:2c:
a0:69:0d:a6:ad:62:1f:28:f2:0a:26:13:ef:e1:3a:f2:7f:ad:
ab:fd:16:b2:14:0d:c0:8d:88:27:18:7c:67:5e:6a:e6:da:f0:
4c:49:b7:94:6d:cd:90:8e:49:fe:2b:38:1c:eb:6f:25:b4:d8:
59:f8:c3:8d:4e:91:5f:8d:91:a5:97:de:a5:57:8b:7e:ab:06:
0b:fb:f8:06:07:4c:2c:da:34:3a:24:00:d0:0f:11:90:2a:fc:
46:6d:aa:fe:7c:44:e8:31:ae:de:2e:5d:60:ac:6b:a7:41:75:
0c:0d:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:37 2025 by rpki-client