Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0481C0CDC411EFA51D4395762E951A.roa
File: 6D0481C0CDC411EFA51D4395762E951A.roa (raw, json)
Hash identifier: ywF6H9wChF1wc4R2yb2x+a1cKzNi+IJGzL7ElR7cifQ=
Subject key identifier: 1E:1A:00:AA:F2:60:F7:96:8F:9C:A6:9D:1D:9F:BF:1E:61:6A:6E:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01372E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0481C0CDC411EFA51D4395762E951A.roa
Signing time: Wed 08 Jan 2025 13:28:20 +0000
ROA not before: Wed 08 Jan 2025 13:28:16 +0000
ROA not after: Tue 16 Dec 2025 13:28:16 +0000
asID: 984
IP address blocks: 154.200.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79662 (0x1372e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:28:16 2025 GMT
Not After : Dec 16 13:28:16 2025 GMT
Subject: CN=677e7d74-4b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:69:15:7e:fa:48:13:0e:24:50:50:b7:96:
74:9c:8a:7f:df:b9:33:50:d6:04:d6:28:cb:33:42:
81:6d:8f:1f:22:75:d6:f6:da:56:79:fd:e3:5c:be:
f3:9d:2b:09:b4:65:cc:e3:9e:f5:ad:7d:81:65:19:
92:f0:c0:e1:65:5c:60:c5:57:49:e8:a4:25:e9:a0:
41:8d:81:06:32:f8:49:69:96:32:05:f2:db:11:50:
3d:c4:af:de:27:58:af:80:b7:97:1e:0f:00:b3:a0:
a0:d1:bf:a8:a7:69:06:e2:82:7c:a9:ec:70:e2:f7:
aa:eb:53:a9:27:53:a7:56:ec:68:70:e9:3b:fa:52:
a8:6e:c1:0d:f1:1d:b8:bd:4d:aa:e0:cd:c5:df:40:
38:e4:d2:37:5e:98:ed:0b:6c:e2:b3:d3:85:bd:20:
6e:59:59:80:30:7e:5f:0f:91:fa:3f:0e:6b:41:c9:
fa:a4:49:d3:b8:e8:3c:a8:a6:8a:ff:b2:2e:84:1e:
aa:9b:de:95:82:ad:0d:b2:37:ed:66:0f:21:b2:cf:
1c:94:3c:67:4e:34:be:2a:f1:d2:d7:ba:59:d8:a8:
27:3c:9e:94:d3:bb:05:c4:32:f4:2f:36:98:b8:6f:
fc:b3:3e:10:13:89:a7:46:48:1f:b3:5b:dc:c2:6e:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1A:00:AA:F2:60:F7:96:8F:9C:A6:9D:1D:9F:BF:1E:61:6A:6E:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0481C0CDC411EFA51D4395762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e7:d4:58:e6:16:46:8f:e9:a0:bd:94:ad:bf:48:46:95:2e:
26:62:f6:21:8a:4a:7f:25:5c:fc:51:70:e5:c3:5c:4d:80:76:
ab:b6:74:26:e4:f4:ef:fb:b1:53:ab:60:82:e3:3c:3f:72:f7:
ea:f6:74:e8:9f:99:c9:5d:3d:7c:4d:81:ef:a3:46:32:34:8b:
5d:fc:de:23:41:e8:98:04:8d:79:d1:96:5b:d5:f1:19:15:bb:
a2:a1:c6:6e:0b:cc:e7:71:b9:1d:6c:9a:bb:7f:40:a6:94:25:
ed:42:14:7c:f8:3e:b8:27:ec:93:a3:2e:3d:3c:52:e4:cf:51:
fc:5c:98:bd:f6:e7:19:70:f5:01:ac:e9:d7:98:83:a6:b1:3f:
fe:a6:20:73:ce:68:ef:fb:45:db:97:04:22:40:d9:27:dd:ab:
5c:51:72:73:7f:71:f5:f3:04:49:c8:e3:34:2b:93:c9:06:12:
8e:11:39:13:26:8c:b4:cb:c6:36:e9:9b:e6:98:50:48:ed:29:
02:e5:d8:b9:45:34:e4:38:66:4d:73:da:14:c4:6d:6e:e2:ae:
03:8b:8a:f8:88:b8:4b:41:1f:0e:64:83:7d:40:c0:3a:89:58:
07:a2:74:de:dc:e4:fe:05:cc:56:a5:94:53:6d:5b:a7:65:30:
53:b6:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:35 2025 by rpki-client