Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5930E5F8E9E411EF81B02960762E951A.roa
File: 5930E5F8E9E411EF81B02960762E951A.roa (raw, json)
Hash identifier: R0qbBhDT4cTVLfEm7ASjnsu0arpQdvehnmef5+BBPK4=
Subject key identifier: 91:F3:D7:77:98:DF:A0:06:78:2F:0F:86:AB:11:7B:0A:3B:8B:D8:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0156B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5930E5F8E9E411EF81B02960762E951A.roa
Signing time: Thu 13 Feb 2025 08:27:23 +0000
ROA not before: Thu 13 Feb 2025 08:27:19 +0000
ROA not after: Tue 17 Feb 2026 08:27:19 +0000
asID: 197730
IP address blocks: 154.201.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87736 (0x156b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 13 08:27:19 2025 GMT
Not After : Feb 17 08:27:19 2026 GMT
Subject: CN=67adaceb-d243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c8:26:57:80:7b:1a:d5:d8:40:72:cb:4b:12:
0b:00:f6:e1:00:96:35:50:d1:af:c9:c1:f4:49:08:
d9:74:c6:a7:45:37:95:dc:eb:62:a1:f4:93:a8:02:
f3:ba:78:6a:3d:0a:84:9c:aa:38:e8:c7:cc:d7:5b:
b6:9e:40:c6:b5:95:21:ce:b1:1a:b7:54:83:17:ff:
07:2d:4c:64:ce:ec:1c:6d:ee:f6:24:42:96:df:20:
0a:f6:57:1f:fe:16:af:39:74:09:76:6f:9e:5c:82:
e0:a3:c2:cd:10:3f:60:5e:1b:ec:b9:1b:d5:b8:78:
a6:0b:ce:d1:0e:2a:99:1b:1a:ba:72:c8:d0:ea:0a:
6e:e3:d2:18:bc:61:5f:02:09:8d:17:05:cf:4e:cf:
0d:97:3d:8d:77:55:a5:1f:38:33:38:57:8e:db:c2:
bf:9b:a1:00:cf:20:68:91:bd:9e:0a:a7:fb:12:06:
b1:cf:df:cb:5f:a7:73:9c:02:03:05:8f:8c:af:bd:
df:84:af:94:14:26:8e:a5:ee:1e:a6:ca:eb:ce:b0:
f8:69:4e:27:fc:c4:87:d6:84:81:08:32:e8:65:1d:
0b:6d:ef:f4:7c:15:00:9f:64:0b:4a:ea:49:8e:22:
d5:b2:6c:10:c5:7c:96:8d:c8:07:42:55:ea:ea:7e:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:D7:77:98:DF:A0:06:78:2F:0F:86:AB:11:7B:0A:3B:8B:D8:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5930E5F8E9E411EF81B02960762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.96.0/20
Signature Algorithm: sha256WithRSAEncryption
98:45:a9:62:2b:7a:9b:cd:3b:21:1e:53:12:89:27:ee:b0:12:
7e:f0:d7:50:f1:dd:ea:f0:c5:43:fb:0b:82:5a:cd:7b:89:58:
97:77:9d:de:f1:ce:51:4d:92:b6:f3:ca:52:26:bf:80:ce:15:
bb:bd:5c:a0:55:ec:be:bc:6e:6e:4e:72:db:9b:ff:eb:1f:5e:
cd:73:4b:15:ed:4d:12:31:1d:f7:b4:40:98:d3:16:18:cb:d8:
e0:3a:79:56:f5:90:17:70:dd:22:47:c8:b0:14:26:ef:2b:ce:
cc:84:99:b6:fa:59:fc:6b:4d:07:7f:bd:d1:e6:4f:d5:86:67:
11:ac:ba:c1:ea:eb:7c:94:22:62:61:d4:7e:d0:34:33:52:34:
6b:8a:04:d6:83:28:7b:3e:b2:40:4f:d6:cd:0d:76:e5:f1:8b:
23:d7:02:e3:f0:a9:ca:17:4e:4d:91:41:21:de:73:ac:fa:11:
f6:6b:d4:5d:eb:6f:e4:42:4f:cb:fb:50:c8:87:16:4e:b3:86:
3f:59:8e:e1:01:7b:13:d4:21:97:4f:4f:1b:fb:e8:cf:bb:70:
eb:91:41:80:85:3e:84:ab:2f:15:de:b3:16:fe:20:03:82:17:
f3:fb:5d:c5:6f:40:fa:fa:bd:4e:80:42:d8:b4:64:83:90:12:
b3:6a:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:00 2025 by rpki-client