Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59240C30F41A11EF94A289BC762E951A.roa
File: 59240C30F41A11EF94A289BC762E951A.roa (raw, json)
Hash identifier: Yjl12xf9Jf4FnY4Cwpqv4d6AGTZZmiWmxaUUhUsV5FY=
Subject key identifier: 99:B8:96:18:7E:92:B3:9F:72:24:F9:05:6C:E3:5D:01:DC:84:92:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016142
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59240C30F41A11EF94A289BC762E951A.roa
Signing time: Wed 26 Feb 2025 08:19:07 +0000
ROA not before: Wed 26 Feb 2025 08:19:03 +0000
ROA not after: Thu 19 Feb 2026 08:19:03 +0000
asID: 984
IP address blocks: 154.206.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90434 (0x16142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:19:03 2025 GMT
Not After : Feb 19 08:19:03 2026 GMT
Subject: CN=67bece7b-a98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:14:ee:2f:fb:9b:1f:4f:8d:48:dc:29:69:
43:a9:c3:b4:6c:50:a4:1d:b6:6c:dc:14:25:26:c9:
d9:af:86:9a:df:f0:72:c4:04:3d:0f:7c:5c:00:92:
91:ca:1e:4a:b5:4a:f8:cc:a4:6f:77:44:3f:8f:8e:
74:70:48:ad:fd:b9:46:55:b2:40:ed:3a:19:39:a4:
d6:39:0d:a2:44:15:00:da:91:11:18:05:4d:8a:28:
39:61:99:a4:b5:3e:ef:b0:4d:54:cf:72:6d:9a:5b:
3f:a7:9d:e9:05:f4:bb:cc:11:e8:22:cf:5f:de:82:
8d:1d:73:d5:7e:8a:fe:c3:96:a4:00:9c:fa:90:54:
30:37:9d:7f:fa:65:5d:b1:af:14:ca:02:b2:9f:d8:
ac:57:89:cb:71:dc:74:a5:42:00:46:45:f1:ff:c3:
d8:49:b1:e8:d3:f0:e7:3c:42:02:a4:79:8d:27:de:
50:bb:be:97:11:6a:a8:e4:a7:13:6e:e2:0e:5e:14:
e5:45:5d:72:ff:7e:df:69:35:c5:33:7b:7f:5a:f0:
4b:30:b6:8a:d6:74:fb:d4:df:b3:d2:9c:d9:3b:19:
76:8e:6e:74:5b:61:05:12:b1:9d:7e:67:ab:b8:2d:
48:bb:96:38:3d:f1:30:35:5f:58:a4:87:0b:94:3d:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B8:96:18:7E:92:B3:9F:72:24:F9:05:6C:E3:5D:01:DC:84:92:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59240C30F41A11EF94A289BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b8:70:e6:74:c7:8f:85:6d:dc:04:5f:f0:6c:1d:a7:99:b4:
71:c9:d0:a2:20:e1:f0:b8:92:22:97:dc:a4:22:30:e2:41:d8:
7b:ab:a6:2e:cd:53:be:93:d3:61:98:ff:1c:46:2e:31:00:c1:
82:24:11:a0:a6:be:2a:71:10:e1:ee:60:4b:a0:5c:4c:a0:a2:
89:3d:63:67:00:f9:35:43:44:d7:cb:40:88:b0:2a:4b:83:c0:
70:de:43:df:5d:04:67:0a:cd:e2:80:46:74:1b:53:e8:37:24:
86:a8:a7:c8:f2:32:82:e0:c1:ee:b5:7b:b0:3c:fc:21:fb:f9:
04:bb:45:34:70:63:c7:ee:8c:db:9a:49:71:28:08:f6:1e:ce:
b2:bd:75:eb:6d:59:66:db:b1:97:c0:be:d5:00:d4:84:36:7d:
3a:33:28:d7:ac:98:04:3c:e7:bb:d3:52:12:3b:81:b7:99:0c:
92:ee:6a:bb:e2:00:b0:5a:0b:da:55:86:e3:e6:fa:b4:15:9d:
ae:68:c1:75:76:79:31:70:c7:a0:bc:f0:d9:eb:1b:50:48:bc:
c8:d2:f4:e3:73:ff:ed:4a:29:51:38:09:b3:db:29:a5:58:7e:
14:4e:4d:02:86:22:06:fb:aa:20:6e:5c:4d:1c:5c:75:bb:e7:
e6:28:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:27 2025 by rpki-client