Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61234D5EF42111EF83AAD96D762E951A.roa
File: 61234D5EF42111EF83AAD96D762E951A.roa (raw, json)
Hash identifier: PYiAz+emvqtXrTS+tWYtPZ5f79wwURHfqYxNqsBa6IA=
Subject key identifier: E6:36:D0:8F:D0:64:22:2B:81:74:EC:E2:D9:67:B4:B5:6A:01:D4:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61234D5EF42111EF83AAD96D762E951A.roa
Signing time: Wed 26 Feb 2025 09:09:27 +0000
ROA not before: Wed 26 Feb 2025 09:09:24 +0000
ROA not after: Thu 19 Feb 2026 09:09:24 +0000
asID: 984
IP address blocks: 154.206.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90529 (0x161a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:09:24 2025 GMT
Not After : Feb 19 09:09:24 2026 GMT
Subject: CN=67beda47-af28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:f7:86:1e:fe:5e:48:1d:57:d3:92:d9:5d:
8b:8a:93:e6:22:51:ba:fe:07:f5:d8:a8:5a:fc:c9:
fb:3d:25:dc:a9:da:a3:ae:80:09:ff:a5:df:99:3e:
8e:13:7b:ca:da:42:8c:d4:7a:bd:38:75:a4:bb:1b:
87:b5:ff:b6:4b:42:e2:9f:48:5d:ee:ae:20:bb:6b:
5d:59:af:a6:33:f0:7b:b0:dc:6d:e3:bf:e8:fa:d0:
d4:4b:74:7a:e0:c0:b2:57:26:ed:83:0a:3b:44:d4:
7f:8e:80:39:f3:66:45:ac:70:d8:9b:d7:51:e3:61:
3c:c7:a9:52:f0:9e:b0:5c:51:d5:eb:58:83:51:c8:
87:8c:30:a6:0e:cd:9f:bb:28:59:ce:cc:04:46:72:
8f:0d:75:20:9d:95:1b:d2:bb:e1:13:da:a8:31:75:
2d:a6:e5:d2:14:af:32:ea:04:a0:27:05:fb:5b:41:
ae:1f:a8:85:05:24:26:75:01:b8:da:03:28:f6:3e:
fa:19:2a:f3:f5:fa:cd:81:3a:dd:d0:55:90:51:37:
1e:12:a9:d9:91:3e:20:42:55:1a:a9:65:e9:d3:d8:
e9:ea:9a:32:5e:f4:36:eb:ea:da:6e:93:e2:43:44:
c9:0f:a4:e3:25:b8:58:81:9b:ff:cd:e5:15:14:48:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:D0:8F:D0:64:22:2B:81:74:EC:E2:D9:67:B4:B5:6A:01:D4:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61234D5EF42111EF83AAD96D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6f:09:99:0d:ed:94:a3:15:35:f2:3b:f0:a6:44:e5:bf:aa:
6a:2f:19:b4:f0:0b:99:06:69:6a:cf:00:2b:ec:4d:12:aa:70:
d2:a5:de:08:f6:86:b7:00:6e:33:bf:f2:3c:8f:d2:b5:3d:bc:
76:40:bf:41:4e:e2:dd:51:22:98:23:b2:03:39:27:ca:11:76:
48:11:aa:20:59:c8:2a:a1:aa:74:ca:0d:9f:60:08:9b:b4:64:
82:eb:ec:48:fe:bd:41:e6:37:82:53:48:5b:1c:99:50:42:0f:
5a:95:59:c9:4e:d7:3d:a7:36:c4:13:58:e3:97:56:f6:db:2b:
db:39:23:b6:52:0f:bb:85:af:79:e9:41:c5:53:a8:c9:18:27:
df:12:63:f3:c5:a8:9b:02:64:1e:85:e6:b3:5f:3d:1d:22:11:
24:90:db:42:78:95:5e:0b:6f:e8:8f:c0:b7:53:44:b5:16:f3:
96:45:6c:05:bf:36:89:dd:09:cd:b6:6d:02:5e:4b:83:2f:a5:
da:1f:90:62:23:a1:94:ea:f0:70:e9:00:7f:46:be:57:fc:3c:
8a:c0:0f:4e:86:80:8f:08:f4:6f:08:4f:1f:67:c0:78:3c:ce:
24:99:c9:60:2d:2e:da:32:9d:b5:42:4f:ed:1e:42:2a:28:36:
59:87:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:18 2025 by rpki-client