Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44765912F44E11EFBE8502A9762E951A.roa
File: 44765912F44E11EFBE8502A9762E951A.roa (raw, json)
Hash identifier: rUu4Gkyho+ZpneONHvgNx/bxW7KiBv+k0qL8xMrlnRY=
Subject key identifier: F7:D5:E6:F6:7C:2D:DE:5C:D1:D1:CD:B7:A2:A9:FC:49:0D:FE:C9:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016455
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44765912F44E11EFBE8502A9762E951A.roa
Signing time: Wed 26 Feb 2025 14:30:47 +0000
ROA not before: Wed 26 Feb 2025 14:30:43 +0000
ROA not after: Thu 19 Feb 2026 14:30:43 +0000
asID: 984
IP address blocks: 154.210.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91221 (0x16455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:30:43 2025 GMT
Not After : Feb 19 14:30:43 2026 GMT
Subject: CN=67bf2596-b587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:48:b1:5c:19:cf:2f:85:4c:82:05:fc:f1:
55:84:21:d8:48:79:d3:01:7f:16:8e:bd:12:80:e5:
1d:59:06:12:3c:c1:53:35:92:20:bb:5c:0c:ee:37:
08:42:23:2c:df:84:52:37:23:3e:25:37:83:59:15:
60:2f:90:e8:91:62:07:f0:37:c0:38:4c:10:e6:13:
c8:01:4e:5d:f7:78:90:c1:e8:d8:6a:2c:03:9d:03:
b2:ce:63:4a:56:45:1f:fe:2a:7a:15:4f:7d:d1:45:
5c:49:45:ea:ba:79:d6:3f:b6:de:74:28:68:e8:9c:
44:be:97:74:aa:7c:4e:90:69:c1:05:8b:21:1a:a3:
f8:74:48:e8:27:5f:29:e7:94:28:2a:e2:12:b5:e7:
0f:fb:b7:c1:58:59:26:95:52:23:b5:d3:09:b0:e4:
82:cd:a4:08:c7:f5:a4:53:57:57:11:93:32:14:b7:
b4:35:12:b9:ff:75:12:11:97:44:7b:bd:38:c2:b7:
ef:23:32:0b:d3:ca:c4:bb:ca:35:b4:13:20:2a:2a:
c8:06:22:63:db:b6:f2:ad:fd:78:45:40:ea:2c:9f:
ab:bc:fc:cd:7d:a7:8a:ad:5c:be:13:85:bc:6d:a8:
dd:aa:c0:93:fe:88:bf:3b:66:69:05:bf:d4:7f:67:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D5:E6:F6:7C:2D:DE:5C:D1:D1:CD:B7:A2:A9:FC:49:0D:FE:C9:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44765912F44E11EFBE8502A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
60:af:c9:ab:c9:81:88:19:72:6d:75:d1:40:75:83:59:0a:38:
0f:f5:b3:68:01:e8:d4:d4:d6:4c:be:f7:f4:1c:74:81:99:bd:
cf:98:51:16:ad:42:b4:bf:a4:7c:95:6e:91:47:06:88:d8:f2:
a7:9e:6e:99:ef:7c:00:a1:20:1b:89:51:2d:50:81:23:51:0d:
1b:99:fb:87:73:eb:c4:a9:f2:05:46:b3:c0:5e:c7:09:a7:ee:
8f:ea:aa:82:39:a8:ba:fc:f4:35:41:61:2b:fc:01:4d:50:fd:
d9:35:42:55:47:3f:36:6a:6a:81:f2:9a:78:ce:97:bd:d9:ad:
0c:53:bd:d5:be:10:ea:03:3c:26:98:f3:4e:b4:93:c0:44:d8:
c5:1a:4e:16:ac:60:d9:77:c5:f8:83:e1:2d:c3:1f:d9:68:fe:
f9:45:7e:bd:84:ac:bc:06:cf:e0:f8:33:a8:78:2c:c5:95:19:
d1:6e:36:99:db:6a:37:15:28:d4:3a:05:9d:b6:13:a4:d6:93:
05:01:2c:bd:46:29:c1:68:75:44:34:3b:43:8c:c3:c3:3d:e9:
f7:9d:e4:8a:d2:1b:6c:41:9c:d9:34:18:57:9e:cd:15:9c:3d:
f4:4e:f7:34:33:77:c4:1e:64:b1:3b:4d:9a:3c:cd:d6:42:c7:
6f:04:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:53:10 2025 by rpki-client