Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F03E04F45F11EFA29DDEA1762E951A.roa
File: 50F03E04F45F11EFA29DDEA1762E951A.roa (raw, json)
Hash identifier: guzcAWOsv0TKnDSI0VSF3DwHikdlH5fg79VyqkuEtz8=
Subject key identifier: 23:5A:D9:BB:DB:CF:2D:C4:FB:E3:14:81:65:D4:8D:7B:BC:80:E9:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01652E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F03E04F45F11EFA29DDEA1762E951A.roa
Signing time: Wed 26 Feb 2025 16:32:49 +0000
ROA not before: Wed 26 Feb 2025 16:32:45 +0000
ROA not after: Thu 19 Feb 2026 16:32:45 +0000
asID: 984
IP address blocks: 154.210.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91438 (0x1652e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:32:45 2025 GMT
Not After : Feb 19 16:32:45 2026 GMT
Subject: CN=67bf4231-0571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:b8:54:6c:25:35:98:5b:fb:95:0f:2e:e8:
18:ef:cd:e3:3c:3b:01:5c:16:3d:f7:45:fd:b4:d9:
6f:e7:0d:d5:af:99:f7:8c:94:d7:f5:42:60:d9:80:
9b:fb:e3:3a:3e:6f:51:ac:4c:d6:d1:5b:75:17:d9:
a0:51:a7:00:6b:62:25:74:40:64:a6:6c:f0:1f:ce:
00:54:f0:40:c7:7c:36:9f:ce:9b:84:61:e5:86:fb:
b4:a2:5e:1d:d7:91:3e:64:e0:d2:f0:82:53:f6:19:
c7:57:0d:c1:0a:73:c8:08:a5:b2:7b:cb:aa:f3:54:
ca:a9:ac:5e:f2:93:63:e9:5f:53:0f:20:8e:0b:22:
03:e6:78:da:d8:62:bc:12:d5:5c:cb:f1:26:6b:22:
5f:66:66:c0:ac:cd:5e:fb:3d:cb:c0:44:54:72:54:
6e:a2:5b:90:4f:91:0b:b7:8c:59:1b:0d:37:e0:49:
e1:5e:53:49:79:7b:95:14:8e:88:98:ae:ec:48:e6:
15:3c:54:c8:3e:13:96:49:35:15:e4:12:2f:2e:fb:
90:bf:3d:ad:e6:93:b8:1e:9e:2d:af:33:b6:e4:89:
30:8b:5f:37:78:79:7f:70:d5:0c:ff:a5:8b:13:39:
97:0e:24:ef:21:a4:de:77:b1:05:da:3b:7b:26:95:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5A:D9:BB:DB:CF:2D:C4:FB:E3:14:81:65:D4:8D:7B:BC:80:E9:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50F03E04F45F11EFA29DDEA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.238.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ce:53:a5:9b:33:f1:55:21:b3:d7:b5:b0:78:eb:bd:ed:49:
fd:ce:08:7f:b5:d8:9c:c4:b1:2d:08:7b:33:1a:e2:f4:19:c7:
cb:bc:cb:d0:92:e8:f8:46:67:f3:26:6d:f0:0c:07:04:7e:60:
e4:db:88:17:c2:56:a5:5a:fb:38:96:74:f6:0b:08:63:ea:bf:
00:34:a4:0a:4d:8d:a5:49:bb:b3:09:9e:14:fd:3b:82:2c:91:
35:4a:fb:3b:31:ae:82:32:b1:fc:81:c7:9b:e3:ab:32:d9:b5:
58:9d:9c:d1:53:68:12:4b:60:9b:69:fa:2d:63:a2:4e:7c:f5:
9a:0a:8f:95:15:20:31:09:47:ea:6d:d7:0a:b6:34:70:99:b2:
a3:10:ad:c7:87:dd:b2:80:8f:58:26:90:d1:4b:8a:83:a6:cd:
84:35:b2:19:c4:1a:67:e2:10:be:2d:8d:e5:70:ba:2a:6f:f1:
7f:59:db:6a:85:4f:cb:01:da:b9:8f:93:16:0a:a8:7f:1e:92:
76:8c:67:3e:12:c2:98:a8:84:cd:6b:25:7d:c2:28:aa:68:1d:
7c:68:53:39:3e:9b:eb:1b:a3:b2:43:90:ce:2e:ee:2e:dc:73:
fc:76:dc:7e:d5:7c:7a:19:1b:66:21:6b:c0:33:50:1a:8c:ef:
bc:a7:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:01 2025 by rpki-client