Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/518E972AF47D11EFB8A5B072762E951A.roa
File: 518E972AF47D11EFB8A5B072762E951A.roa (raw, json)
Hash identifier: Sy03wjiyCbC7V8jFmUlyFZ6ZkK3SN3ycmwSL4LC1kHQ=
Subject key identifier: 9A:99:99:E8:CC:B9:72:3B:8E:1D:E8:EC:74:EA:9F:92:CC:2C:CD:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/518E972AF47D11EFB8A5B072762E951A.roa
Signing time: Wed 26 Feb 2025 20:07:35 +0000
ROA not before: Wed 26 Feb 2025 20:07:31 +0000
ROA not after: Sat 19 Feb 2028 20:07:31 +0000
asID: 17561
IP address blocks: 154.218.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91615 (0x165df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 20:07:31 2025 GMT
Not After : Feb 19 20:07:31 2028 GMT
Subject: CN=67bf7487-92b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:fb:af:52:fd:c6:29:b0:cc:24:0f:cd:54:
26:9c:84:bd:7a:dd:9b:ed:15:d0:c8:7d:57:b9:4a:
e0:c0:10:b8:f1:8c:74:f7:0d:28:fd:83:f1:24:2e:
04:fb:db:70:99:42:69:5c:c6:96:38:63:8c:29:c3:
66:82:81:f9:f7:6b:f4:4f:6e:01:7c:88:77:7e:15:
df:55:42:58:ac:1e:ec:07:f3:5c:6c:88:00:e3:2e:
32:31:ac:78:b0:ae:4c:c4:cb:1d:9e:06:f0:50:78:
43:8c:13:e7:13:b0:29:09:9f:8c:2d:e1:cb:d4:ba:
4f:ba:6d:83:7f:77:83:ca:52:c0:29:5e:33:29:01:
5f:2c:9b:35:35:fa:83:ef:97:bd:6e:ac:86:40:8f:
a7:52:ef:e3:25:51:db:c2:38:b2:81:89:32:fd:99:
8b:6d:40:cb:dc:3d:b5:33:cd:64:67:5e:d9:98:68:
1a:08:7c:f1:3c:a4:a6:e8:4a:bd:f5:66:63:18:27:
bd:25:a0:cb:e3:72:94:25:03:7e:ea:f5:4b:6a:9e:
f3:84:ff:a6:b5:cd:d7:c7:3c:18:fe:ea:ff:e3:46:
85:b4:21:45:86:9e:fd:20:47:81:83:a7:e8:12:88:
cb:f0:7b:cf:2c:51:9b:17:e7:60:e9:f1:0a:99:7b:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:99:E8:CC:B9:72:3B:8E:1D:E8:EC:74:EA:9F:92:CC:2C:CD:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/518E972AF47D11EFB8A5B072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.59.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4d:03:35:f0:d7:1b:e6:3c:ed:6e:ab:00:78:76:1a:2f:4d:
3e:03:ec:25:e7:b4:88:36:cc:00:45:90:18:b6:74:fb:f9:b4:
8f:af:1f:b4:21:a5:4d:2b:17:97:3a:e9:ac:c6:d3:18:4d:ac:
a6:a3:4f:59:42:2f:df:a0:a4:35:11:de:d1:37:6d:d7:0d:3a:
7f:87:c2:44:88:68:38:af:f7:5e:fa:57:aa:68:c1:71:39:18:
53:4e:d3:ba:8d:24:70:f3:5c:23:a1:7b:4f:03:ce:01:ea:ad:
ed:9e:a8:0f:84:13:15:e5:dc:8a:41:c2:14:6b:90:6b:99:ed:
6a:27:d3:87:18:a3:e1:19:f6:de:c9:fa:a8:7c:64:65:1b:29:
f2:20:29:c1:6b:e4:d9:e2:88:97:0f:a4:38:a3:9e:04:21:c9:
8a:fd:cf:f3:c4:40:3b:9d:b1:70:28:a6:84:d7:75:e5:51:b3:
a7:0b:2d:a6:93:55:23:e8:11:c2:a2:f7:ac:39:2d:e0:44:c5:
16:a2:1f:1c:90:46:fd:e7:72:df:da:57:21:b3:d0:e7:6b:14:
ab:c6:17:04:38:7a:91:d7:84:ac:fc:23:17:2d:d3:db:00:85:
fe:5b:20:40:cc:e2:51:5c:15:84:7c:b2:37:5c:a1:aa:a0:8b:
c9:a9:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:52 2025 by rpki-client