Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6123E1A0F44511EFB6AD186D762E951A.roa
File: 6123E1A0F44511EFB6AD186D762E951A.roa (raw, json)
Hash identifier: aW0VPdA6gAhVIBUVaQjE6CIkpIz10h2suJdbxtKcun4=
Subject key identifier: 6E:B8:9F:BF:D2:3F:B8:3A:96:24:D9:4A:AD:33:26:A9:24:5B:57:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6123E1A0F44511EFB6AD186D762E951A.roa
Signing time: Wed 26 Feb 2025 13:27:09 +0000
ROA not before: Wed 26 Feb 2025 13:27:05 +0000
ROA not after: Fri 20 Feb 2026 13:27:05 +0000
asID: 984
IP address blocks: 154.83.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91073 (0x163c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:27:05 2025 GMT
Not After : Feb 20 13:27:05 2026 GMT
Subject: CN=67bf16ad-6857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:9d:eb:62:28:5c:72:70:50:90:b9:dd:41:
37:81:64:e9:8b:3b:f8:47:53:90:88:65:57:7c:7a:
ec:6f:3f:5b:eb:5d:5b:8a:da:92:02:38:74:bc:f8:
2c:af:60:de:4f:95:15:33:fc:98:97:6e:58:80:67:
d6:d8:c9:2f:da:17:98:f2:01:8d:26:0f:29:47:1c:
03:24:cb:4f:9a:3d:6f:d8:49:82:80:b8:bf:8b:f0:
f5:a6:29:5a:ff:a8:fa:9a:e2:d0:f0:e8:49:67:ab:
83:6d:f1:5f:e0:8d:de:14:17:c8:5f:7e:d0:43:e2:
4e:b4:1d:fe:cf:ab:43:06:fd:53:ee:49:5e:63:1a:
41:a8:c0:dc:8f:22:0f:96:c4:d1:b0:cf:5a:d2:14:
e2:b4:6a:62:6d:75:1a:e1:98:a6:18:72:9d:57:33:
15:a2:4c:c8:83:8d:e0:26:52:0e:9e:b9:b4:32:c8:
0e:42:7c:93:a4:a6:7d:5c:a6:14:14:fe:11:ed:83:
63:23:bd:59:ca:48:03:88:de:7f:46:8d:ed:ad:d7:
de:f3:26:6b:de:7d:cd:4c:e7:1d:d7:ac:83:b1:e1:
43:49:7a:c4:5f:1e:bb:4e:e7:4b:ba:b1:78:01:d8:
e9:54:d7:5f:46:c9:a8:20:2c:0a:b0:b8:73:b6:74:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:9F:BF:D2:3F:B8:3A:96:24:D9:4A:AD:33:26:A9:24:5B:57:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6123E1A0F44511EFB6AD186D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.174.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c3:30:68:c1:86:81:87:fe:5b:24:9a:83:a3:50:ed:1c:a7:
b5:55:16:16:12:34:0d:02:9d:da:55:48:b7:4f:e1:6b:a2:a0:
5d:9b:ff:18:48:1a:b8:19:6b:5a:7a:24:f2:6b:86:56:59:b6:
b4:0c:e5:50:e6:70:03:07:34:6f:cc:2f:0e:21:b9:e2:98:4a:
6e:ed:63:7f:bc:f7:7d:ec:e0:d3:67:4c:09:ff:ba:e1:06:bf:
41:49:93:c0:74:48:6f:bb:53:29:5d:27:f3:e1:a9:4b:17:ef:
4a:6c:29:8b:22:3a:b8:fd:2b:f5:48:52:29:12:41:f8:76:33:
70:c1:f8:1a:76:01:88:cb:42:84:d7:a3:59:6c:5d:b1:10:06:
98:60:c6:61:75:69:5a:77:64:3a:d7:2b:6c:aa:69:d6:c5:18:
d9:a6:6c:32:95:38:9a:6a:48:1e:db:89:28:66:5c:c3:b4:0b:
b2:8d:ae:5e:b6:f8:38:e0:7c:32:ea:bf:b1:4e:14:1e:d8:6c:
d5:dc:9f:0e:b6:9e:28:d6:cc:91:6e:36:95:1d:25:fd:88:a0:
f7:42:7f:a0:21:a6:93:e7:10:4f:67:04:9b:82:d8:60:73:ec:
4e:1a:20:d1:10:42:e6:c2:36:86:41:3c:c7:39:15:0c:38:e8:
0d:b8:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:52 2025 by rpki-client