Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B25BC4F43C11EFB44922AC762E951A.roa
File: 60B25BC4F43C11EFB44922AC762E951A.roa (raw, json)
Hash identifier: YsOTMyk3vv8GrQo7kqiR8vPAOw9HqGrK/leIVjoIm+U=
Subject key identifier: CC:3A:1B:62:92:45:2B:D6:77:9D:EC:F5:CE:BA:85:FA:34:DF:FF:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016313
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B25BC4F43C11EFB44922AC762E951A.roa
Signing time: Wed 26 Feb 2025 12:22:43 +0000
ROA not before: Wed 26 Feb 2025 12:22:39 +0000
ROA not after: Fri 20 Feb 2026 12:22:39 +0000
asID: 984
IP address blocks: 154.199.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90899 (0x16313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:22:39 2025 GMT
Not After : Feb 20 12:22:39 2026 GMT
Subject: CN=67bf0793-2d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:bb:30:4e:d6:c6:63:a4:99:c4:2b:bc:77:
9c:91:df:1c:8c:96:d7:74:01:d3:e5:cc:71:c1:36:
69:3d:68:ed:5c:16:35:19:7a:91:63:8b:aa:b6:f6:
c1:6a:c8:a8:29:ea:fd:b6:5f:e3:65:ed:b2:ea:75:
0f:36:a6:cc:49:38:b3:6a:28:3f:a3:7b:c1:5f:d0:
5f:ed:20:03:30:6c:cf:b9:5f:bf:98:51:76:03:3f:
7e:ba:82:eb:b2:f7:58:43:76:fc:6a:6a:c5:43:c0:
6f:2b:e3:b4:35:c8:e0:50:ed:ce:c2:f0:2a:aa:1a:
5b:a0:f6:bc:23:ee:f7:e9:6c:5a:98:56:b3:32:74:
cc:d5:6b:2a:66:ec:6f:e2:55:b0:ee:44:b7:49:1e:
c0:16:5a:e7:f8:37:9c:79:be:83:5b:a2:30:7c:f9:
70:c5:3e:52:ea:64:a9:57:79:c0:9b:64:7a:b5:a3:
45:8c:2d:ae:3e:8b:e7:8c:ef:4e:34:b6:36:0e:3c:
92:58:be:3e:7c:f1:6b:4e:e1:e7:8e:86:90:8c:b1:
f1:8f:ac:f0:db:03:0e:10:56:93:41:73:49:7f:d3:
b4:77:33:56:53:b7:69:ed:24:e0:92:e0:db:5d:e7:
57:1b:8d:0b:a1:f6:f8:a4:3d:7d:4e:56:14:76:06:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3A:1B:62:92:45:2B:D6:77:9D:EC:F5:CE:BA:85:FA:34:DF:FF:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60B25BC4F43C11EFB44922AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.156.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f0:8f:61:48:e1:ab:62:6b:60:10:b1:b7:88:74:86:92:a0:
24:34:de:d0:f9:c2:b3:13:c6:a0:bc:dd:6b:34:1e:0e:9d:80:
b8:9c:ff:84:a9:b3:09:69:da:62:5b:76:73:9e:60:5d:b2:2d:
bd:e4:35:d0:06:a5:18:2b:c9:ab:6b:9d:89:89:ec:60:f0:bc:
01:0b:98:f3:6d:15:17:0b:f3:66:d1:86:7d:b1:f8:0b:cc:24:
71:32:34:3d:37:83:8f:33:aa:6f:cf:15:f3:02:6c:2a:30:27:
9c:89:59:59:85:d5:31:8a:c1:72:82:f9:f3:3a:a6:bc:4d:ac:
78:82:62:6f:50:32:4e:6a:a7:72:dd:fb:4c:88:07:8c:ac:f8:
60:2a:56:f0:21:cc:b7:58:0c:28:5a:46:ef:a8:9b:e7:dd:dc:
5d:13:0e:37:7c:33:5f:58:27:65:9e:f9:76:87:fb:91:9e:eb:
58:f2:5c:38:92:93:fa:e8:0a:af:64:6a:32:b8:15:91:74:b9:
ac:18:ba:e4:7f:a9:fa:ec:16:2a:46:9f:e8:f8:d0:d7:97:c5:
c1:a7:10:b3:e9:b6:5b:98:a4:09:f1:6d:d5:21:36:9f:94:9c:
92:07:e3:51:da:b2:d5:be:4f:1f:33:b8:ef:00:34:a0:5e:cf:
c1:5a:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:49:42 2025 by rpki-client