Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DAF9880F43011EFB52FB457762E951A.roa
File: 5DAF9880F43011EFB52FB457762E951A.roa (raw, json)
Hash identifier: se7qHEQ6m9egGXPKSJ5fttWD4wyCI1UC2nGfY+F52/I=
Subject key identifier: 17:B1:0A:36:59:51:29:2C:61:24:0A:D9:74:75:AC:6C:69:3F:F1:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016265
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DAF9880F43011EFB52FB457762E951A.roa
Signing time: Wed 26 Feb 2025 10:56:44 +0000
ROA not before: Wed 26 Feb 2025 10:56:40 +0000
ROA not after: Fri 20 Feb 2026 10:56:40 +0000
asID: 984
IP address blocks: 154.199.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90725 (0x16265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:56:40 2025 GMT
Not After : Feb 20 10:56:40 2026 GMT
Subject: CN=67bef36c-2859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:ac:05:03:31:07:79:d1:2a:39:d3:30:a1:
66:18:6b:c8:8e:33:a8:02:48:6a:47:00:db:a5:dd:
33:db:a5:91:c3:84:10:16:c6:8d:b9:69:1b:0b:86:
34:14:7f:98:f2:38:2d:b1:c3:3c:2a:cc:5b:3f:cf:
5e:77:d7:91:de:50:3c:9e:ae:82:da:3b:e1:9c:30:
9d:b1:8e:0f:65:2c:74:02:63:10:e4:df:ec:75:d5:
80:1a:e1:45:5a:fe:f1:31:cc:50:e1:08:d1:7f:92:
0c:d2:25:17:e8:4e:74:35:19:d4:b8:35:5c:c7:68:
12:00:9c:0e:63:78:10:54:7f:14:67:29:cb:01:c8:
fd:61:94:97:ff:47:eb:b9:f5:46:33:67:52:7c:ab:
d6:b7:4e:4e:6a:90:03:b8:e1:07:fd:6e:c0:78:d5:
57:ba:d8:91:7a:cd:98:76:13:47:fd:cc:0d:a8:d5:
55:14:5e:7b:c0:f0:ea:d3:6c:8c:85:4c:80:18:9c:
da:ac:9b:5b:9b:cc:29:f8:8d:20:9e:14:57:0e:56:
84:01:61:c7:47:3b:a0:49:86:71:d3:8c:f5:3a:e3:
63:b1:f8:f0:9f:4f:c1:17:57:e3:68:a9:c2:5d:09:
21:55:d6:e1:01:d9:b8:11:87:c1:a3:09:a1:8e:c4:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B1:0A:36:59:51:29:2C:61:24:0A:D9:74:75:AC:6C:69:3F:F1:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DAF9880F43011EFB52FB457762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.13.0/24
Signature Algorithm: sha256WithRSAEncryption
12:19:ab:57:c8:da:77:74:e3:f6:ff:6f:9f:05:af:6f:05:fd:
8a:83:fc:bb:d3:0f:b6:72:7a:c2:55:6c:77:f1:70:76:79:e8:
a7:94:21:39:1b:4c:5e:c0:d8:8f:73:9a:62:91:37:78:2c:66:
a5:46:0f:b2:32:68:40:42:2e:89:5e:8a:57:c9:33:52:1c:ec:
59:d8:f1:88:a4:57:16:cc:21:78:76:74:08:e3:30:e3:b2:d3:
0a:db:fd:dc:78:ca:d8:7b:f3:d2:6e:c6:08:6d:80:ff:6c:b8:
49:3f:81:4e:e4:73:de:1c:f8:01:a3:b0:f1:1b:3c:56:9e:55:
05:16:4b:fc:32:2a:d6:dd:6f:ba:55:c0:cb:be:97:2c:e4:6a:
02:84:95:2d:0d:64:63:f3:5a:1a:f2:da:e7:4f:21:db:86:04:
d1:ea:f8:d4:81:22:bf:7f:cf:1f:2b:86:41:6e:c5:b9:b9:df:
7c:74:82:2e:83:05:2e:ae:05:be:dd:9d:4c:ac:00:97:c5:94:
b2:cc:aa:79:81:b7:ae:61:37:d7:86:a2:3f:fe:59:09:88:64:
6c:a7:f6:d3:13:5e:7e:cf:c2:44:4e:fe:fa:d3:28:a3:da:bb:
7b:3c:62:35:1d:97:e7:a1:7d:b7:3c:63:3f:cc:5a:02:d7:5f:
d4:e3:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:47:43 2025 by rpki-client