Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F756E0F44F11EF94BC02B2762E951A.roa
File: 69F756E0F44F11EF94BC02B2762E951A.roa (raw, json)
Hash identifier: K8x7Sma1lOLcdfggs2Z7hSh8rErNMLMnOrB5i4xjJOM=
Subject key identifier: 59:66:D4:A4:17:57:2F:66:C2:9A:2D:D6:C0:4D:9D:BC:F4:42:DD:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016468
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F756E0F44F11EF94BC02B2762E951A.roa
Signing time: Wed 26 Feb 2025 14:38:59 +0000
ROA not before: Wed 26 Feb 2025 14:38:55 +0000
ROA not after: Thu 19 Feb 2026 14:38:55 +0000
asID: 984
IP address blocks: 154.210.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91240 (0x16468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:38:55 2025 GMT
Not After : Feb 19 14:38:55 2026 GMT
Subject: CN=67bf2783-4577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:2a:60:32:bf:ee:a8:31:f2:f6:33:3b:f3:
42:0e:27:41:97:e3:65:85:a1:04:7b:26:bd:78:d3:
d0:7e:e1:dd:0d:66:20:00:88:0b:1f:1a:66:d2:5d:
0d:47:c7:f8:84:7b:6a:62:a2:9a:2f:31:61:bb:47:
06:d9:2d:d9:2f:c2:e8:e6:a2:f8:da:50:5d:f6:9f:
ab:b4:d7:6e:c1:80:f4:98:3b:3f:41:fd:8e:fe:cc:
ba:ac:03:54:a2:c5:35:82:06:b8:ef:71:52:b5:ea:
d9:ea:f3:97:8e:6b:10:81:94:f6:d1:22:4b:5f:b8:
37:21:dd:b5:ed:e1:92:a0:09:c8:b8:3d:42:e7:3a:
2c:aa:dd:fe:d4:07:d6:28:74:7a:28:7a:d5:d6:aa:
b8:8b:72:19:8e:e4:82:ab:fb:c1:1b:4b:5d:a8:15:
6b:7e:ce:28:18:f8:5f:ba:9f:d8:58:d9:55:3d:85:
0a:d3:f3:8a:5e:cb:3d:a8:d0:f9:2d:21:db:7d:15:
78:0d:98:b3:cd:23:20:df:93:c6:90:cc:e5:60:c1:
2d:1d:4b:53:df:28:6a:5e:b7:54:0f:ad:fd:e4:a3:
1d:c3:ae:87:f5:f1:c7:9c:ec:33:3d:89:f2:d3:28:
81:f0:76:1a:d4:2c:1f:43:eb:8a:e3:40:3b:cc:95:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:D4:A4:17:57:2F:66:C2:9A:2D:D6:C0:4D:9D:BC:F4:42:DD:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F756E0F44F11EF94BC02B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.57.0/24
Signature Algorithm: sha256WithRSAEncryption
33:6c:93:b3:5c:93:9a:e4:c2:f0:d6:dd:ec:13:60:a9:f1:00:
ad:07:5e:ed:5d:8c:ca:27:6c:37:e7:76:bf:69:d4:4d:c9:f8:
aa:a6:1b:0a:fc:5e:6c:10:21:da:81:fe:d9:23:c8:f2:e2:55:
ab:4e:7b:31:f1:0a:82:21:d1:42:a9:11:46:e4:ab:56:fb:86:
d7:a0:79:13:0a:a7:89:a7:77:74:79:76:4c:28:47:96:70:0d:
8a:89:02:2e:1b:c0:cc:52:29:bd:bb:73:e1:d7:18:de:6a:70:
39:03:89:b2:69:33:a2:5f:8a:c7:7c:3b:f0:69:00:19:b5:8e:
12:c7:bb:f2:12:3b:17:76:87:5e:6f:7a:cb:a9:72:31:86:98:
17:85:8e:61:ad:a4:b2:4a:b9:92:cd:99:7e:71:6c:d4:b9:5c:
af:0f:5a:4c:c8:e4:38:fa:0e:53:8a:99:5e:34:e9:b6:ba:32:
2c:ee:09:84:fe:7f:81:a0:e9:53:ca:e9:be:c9:4d:b4:fd:68:
89:a9:3f:b1:a7:81:8f:e1:e9:13:47:cf:ca:95:15:b8:bd:21:
ee:e8:f1:83:5a:c2:43:81:74:b3:f0:ac:ae:b5:62:b3:7b:43:
11:79:15:b5:9b:cd:e0:0a:ea:28:39:3d:70:20:35:ac:57:13:
fb:4a:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:18:37 2025 by rpki-client