Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D3442EF3E311EFBB9B8AB8762E951A.roa
File: 46D3442EF3E311EFBB9B8AB8762E951A.roa (raw, json)
Hash identifier: 0fidFtC19/4vT5Hpr06A3o61eKn1vkncUmvOP5fRMiM=
Subject key identifier: 23:D5:01:8D:4F:42:B6:51:26:7E:35:10:D2:2E:5F:75:AA:EB:CF:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016068
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D3442EF3E311EFBB9B8AB8762E951A.roa
Signing time: Wed 26 Feb 2025 01:44:54 +0000
ROA not before: Wed 26 Feb 2025 01:44:50 +0000
ROA not after: Thu 19 Feb 2026 01:44:50 +0000
asID: 984
IP address blocks: 154.92.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90216 (0x16068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:44:50 2025 GMT
Not After : Feb 19 01:44:50 2026 GMT
Subject: CN=67be7216-1dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:33:6a:bc:cb:c9:30:b4:d6:1d:9a:62:73:
85:4e:71:46:1f:13:7d:62:da:93:fc:3f:64:cd:91:
6e:69:35:34:b1:99:7f:e1:0c:8c:a7:b9:91:3b:82:
64:d0:e0:c7:46:bb:6a:ce:20:30:f9:ff:34:d4:e1:
ba:67:51:d4:6c:f3:61:d8:2c:a6:85:27:48:a8:a6:
42:59:92:87:dd:d1:f7:39:bf:58:ec:16:8c:7f:b7:
b2:77:45:00:f6:4e:b4:5e:e1:a5:e4:15:9e:85:db:
c5:b1:73:87:d9:60:69:29:d8:94:2b:d1:39:b0:16:
2f:db:7a:ae:57:c0:c0:a0:1a:77:a9:17:3b:aa:3a:
c9:e4:19:ee:6a:02:31:98:1a:92:29:2c:62:fe:dc:
89:a9:8a:89:48:e3:bb:9f:5a:95:f4:80:cc:04:ba:
9a:69:4c:01:88:87:13:62:40:0f:8c:06:4f:4f:0e:
7a:07:47:c9:fe:7b:2a:d8:4c:8a:60:ae:17:e4:96:
bc:c5:51:58:e8:dd:7e:7c:f0:ef:11:c6:15:b7:bd:
bd:d9:7d:5e:89:f9:d6:bb:eb:14:a0:1f:f5:40:f8:
75:9b:ab:99:e2:b5:99:85:f3:f1:e7:e5:08:f1:7e:
f4:e4:5b:e6:cd:4c:ee:2b:a7:e3:56:b0:ca:7d:76:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:01:8D:4F:42:B6:51:26:7E:35:10:D2:2E:5F:75:AA:EB:CF:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D3442EF3E311EFBB9B8AB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ee:ee:9c:7d:6a:c4:d6:54:bd:39:fc:f4:84:16:02:92:c3:
b3:28:37:fe:54:6d:a8:14:8e:fd:64:ca:47:e2:f2:a6:7b:74:
95:83:56:fb:f8:6c:03:7c:26:34:e4:f0:21:3b:ac:80:86:ab:
be:70:9f:bc:c4:01:2e:ef:1a:a3:c8:37:c7:1a:73:5f:56:53:
ab:b7:50:50:94:7a:b9:e3:27:a3:78:1c:23:bf:51:64:ab:85:
27:6c:4b:81:25:99:df:3e:80:12:db:78:a8:31:c2:e6:c2:ee:
ba:77:a4:41:a9:81:54:5e:33:1f:70:1a:68:70:28:2a:a4:02:
6b:ce:32:e8:0b:39:65:49:b2:70:0d:14:48:1f:ef:67:0c:e7:
6f:7a:56:84:6f:d3:ff:12:93:45:f2:73:fb:e1:9c:59:77:d6:
f0:0f:a2:f2:5b:07:15:9e:b9:89:ea:ce:ba:02:19:99:73:19:
34:44:2b:73:c4:a3:6e:cd:9a:76:6a:ea:ee:f0:99:9e:b4:1e:
f4:61:d1:a2:18:cd:20:89:df:7f:9a:e6:b5:8f:e4:44:1a:51:
59:5d:bc:e1:00:bd:e8:af:d4:75:c5:65:99:96:e1:36:04:76:
71:41:fb:8a:2a:b7:7c:0b:a3:b6:c6:bf:c6:a7:ce:c8:3e:54:
31:77:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:09 2025 by rpki-client