Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465790DEF44411EF9AC7E663762E951A.roa
File: 465790DEF44411EF9AC7E663762E951A.roa (raw, json)
Hash identifier: veq+KF7h5kpDVDgTEMkg3Yt0tRltkXrmMcxJvQObNdg=
Subject key identifier: ED:49:EE:89:0F:4E:61:60:2A:8B:15:18:8D:62:44:CB:DD:EA:19:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465790DEF44411EF9AC7E663762E951A.roa
Signing time: Wed 26 Feb 2025 13:19:15 +0000
ROA not before: Wed 26 Feb 2025 13:19:11 +0000
ROA not after: Thu 19 Feb 2026 13:19:11 +0000
asID: 984
IP address blocks: 154.208.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91050 (0x163aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:19:11 2025 GMT
Not After : Feb 19 13:19:11 2026 GMT
Subject: CN=67bf14d3-0519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:d6:8b:7c:d9:a0:6c:3e:07:ac:c6:6b:64:
15:02:41:ba:50:0b:c7:c7:46:29:e9:fa:8d:2a:7b:
8b:60:8c:1e:2a:e8:57:21:dc:9f:e3:3e:d4:ab:c7:
7f:16:71:1e:c4:fd:dd:98:7d:ca:67:77:45:19:22:
6b:25:24:6a:30:85:f8:cf:08:91:14:0c:39:2a:15:
61:61:10:87:1b:04:8c:92:25:46:9d:cc:9f:94:ca:
17:01:a9:72:7b:0a:0a:83:0b:e8:1d:4a:e0:dd:b0:
54:14:d8:27:77:8c:c8:ba:45:f7:d3:b4:59:2b:c5:
3f:59:2a:af:6a:73:96:b1:65:cf:cd:24:49:9d:e8:
8d:ba:5e:f9:55:6c:30:c6:76:2f:c7:08:04:71:2c:
db:4c:1a:30:a6:78:f7:22:f8:69:dc:78:f8:9e:55:
ad:c8:c5:ed:6b:d4:74:e8:12:6c:ee:f2:64:17:bd:
fc:2f:dd:b5:1f:01:10:2e:45:a1:0c:22:b7:32:f3:
0c:6e:66:0b:8d:90:6b:ef:9d:6c:18:a3:f1:1d:23:
c2:97:67:9c:3e:c1:6e:45:bf:85:15:6a:61:05:fc:
56:cc:3d:c8:57:95:25:fe:25:76:2d:44:2b:c9:e9:
11:72:f8:a2:6b:3e:b5:b6:7c:02:36:5f:4f:23:3b:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:EE:89:0F:4E:61:60:2A:8B:15:18:8D:62:44:CB:DD:EA:19:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/465790DEF44411EF9AC7E663762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.188.0/24
Signature Algorithm: sha256WithRSAEncryption
17:15:75:c3:8f:6f:b5:6f:da:70:bf:16:6e:bf:56:14:1a:ee:
d6:c6:34:2b:c4:89:d2:3e:61:d2:f8:83:c0:9a:33:f7:cf:a5:
57:92:17:e2:5e:47:6c:a8:97:32:67:d0:26:60:37:32:dc:0b:
28:32:65:db:e5:4f:4b:34:f6:e6:fd:bd:55:a9:93:11:9f:d3:
de:9c:45:70:13:d4:0c:ce:f8:76:31:92:21:f5:d5:48:0a:19:
96:ec:81:29:62:e5:30:47:b6:a2:5c:51:a8:b3:2d:3d:bb:e2:
8b:a3:c8:90:d6:72:32:12:7d:33:e2:8d:48:df:91:52:b7:42:
c4:d8:b1:20:90:c7:a7:33:01:37:38:c2:34:80:b3:b7:65:f6:
8b:0f:7b:92:5f:e3:99:53:6f:82:de:37:5c:74:c0:96:da:a9:
20:4d:02:0a:93:1f:48:da:a3:d9:29:05:04:90:f8:d8:e4:22:
26:19:f3:1f:ad:4b:3f:c0:5d:93:25:35:ec:91:16:70:e2:76:
08:7d:41:61:38:a0:ba:5f:e4:2b:e1:46:20:7c:68:13:d9:84:
73:46:cb:b4:7f:64:4f:f2:3e:35:d3:8f:45:8e:6b:cf:fa:52:
91:fb:4e:26:31:99:ba:66:2a:0f:36:db:eb:f9:8e:6f:c1:cf:
ae:9b:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:41 2025 by rpki-client