Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65997688F44911EF974E8287762E951A.roa
File: 65997688F44911EF974E8287762E951A.roa (raw, json)
Hash identifier: z7otm0b0BfPTJqAtVMO6aM1Sb4hRu0uxgPGJDQLlWDc=
Subject key identifier: 08:35:EB:DA:D4:E8:85:E8:30:03:FE:5E:1C:FA:09:B1:91:B2:1A:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016403
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65997688F44911EF974E8287762E951A.roa
Signing time: Wed 26 Feb 2025 13:55:55 +0000
ROA not before: Wed 26 Feb 2025 13:55:51 +0000
ROA not after: Thu 19 Feb 2026 13:55:51 +0000
asID: 984
IP address blocks: 154.210.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91139 (0x16403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:55:51 2025 GMT
Not After : Feb 19 13:55:51 2026 GMT
Subject: CN=67bf1d6a-8a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:78:f5:51:ca:de:a1:59:03:11:30:dd:98:
11:5b:08:85:7f:f6:f6:1d:ce:64:ad:ca:b1:4c:62:
99:02:5e:8b:86:aa:5a:94:60:9d:9f:3a:b3:99:a6:
53:98:06:91:9a:6a:f2:83:eb:12:fa:6e:cc:e1:a8:
16:b3:c5:67:02:45:a7:c8:12:9f:63:4b:16:a0:44:
37:02:9c:47:3a:03:5c:6c:4a:18:c8:0b:d0:6e:f4:
1c:fa:cc:e0:5d:a3:7e:a2:1c:ad:01:64:1b:12:9d:
b8:e3:c5:cc:12:69:78:94:62:b4:c8:b0:c8:d4:7a:
d0:90:d3:bc:22:43:a2:2b:b5:66:6e:06:d7:46:93:
0c:a7:56:77:17:28:7e:4f:b9:ea:27:67:34:6c:1a:
8c:ed:fa:26:a0:f3:fa:1e:83:26:b0:e1:28:aa:af:
1e:4e:4e:b4:e9:72:30:2e:86:e5:42:e7:50:f4:a9:
df:12:7c:5f:f9:a7:0b:95:41:51:88:c5:bf:00:be:
0d:69:8d:70:9d:14:ed:5b:bc:e8:49:92:3e:68:f1:
8e:ad:37:71:16:08:b2:82:d4:89:c0:bb:3b:d9:bc:
89:0b:ae:f6:7a:7e:a0:41:10:3f:1e:87:bf:0b:d5:
d1:20:8e:bc:b7:36:d0:ae:3e:11:62:5f:73:62:27:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:EB:DA:D4:E8:85:E8:30:03:FE:5E:1C:FA:09:B1:91:B2:1A:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65997688F44911EF974E8287762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.40.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3f:82:65:03:e0:cf:0c:74:81:46:da:46:c3:f1:8b:bf:f4:
dd:66:16:fe:64:a9:98:eb:a6:27:55:35:c9:2c:cf:6a:12:ef:
f1:a1:98:cf:12:37:61:2c:78:eb:41:28:c4:77:e9:38:a4:61:
db:a0:51:16:6b:a0:44:f4:fd:21:18:94:81:15:a9:04:1e:b8:
03:98:6b:b5:1a:fc:26:d7:96:5b:35:45:ec:b7:39:c1:a8:8e:
d0:0a:c8:7a:b9:f8:f6:4f:c7:7a:f8:a6:e9:a0:8a:84:59:ba:
9b:1f:10:c7:9f:b1:62:ac:61:fe:13:49:35:c9:7a:25:bc:be:
e9:9f:93:e4:13:6f:dc:6d:77:b1:42:ee:c1:33:f2:cf:f2:c4:
65:c3:b5:18:5f:00:af:64:84:8b:44:7d:98:88:3e:ac:41:cd:
5e:62:91:80:92:39:11:fb:0a:e3:d2:5e:d4:1a:5c:4e:c3:4e:
84:f0:b8:d9:4f:cd:61:5a:89:39:ea:bb:10:0e:41:6e:0a:72:
55:db:34:22:ea:ec:7f:c3:92:48:ff:93:c8:2c:2f:2a:dc:88:
ba:f9:e5:6e:45:aa:8c:64:cc:97:be:16:fa:43:e3:8f:86:49:
7f:64:3e:b1:f9:be:ab:84:7a:14:4f:05:c0:b6:ab:fc:ca:df:
78:46:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:38 2025 by rpki-client