Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DDD69FCF42C11EFBAD11EBB762E951A.roa
File: 6DDD69FCF42C11EFBAD11EBB762E951A.roa (raw, json)
Hash identifier: sir4lZxG7inz7kCQ1oayv16CHYhhoB89FYq1jWfXdjA=
Subject key identifier: 66:A6:2F:AC:6D:1B:0B:0C:87:57:2D:DE:21:5C:C3:B5:3A:FA:C6:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016235
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DDD69FCF42C11EFBAD11EBB762E951A.roa
Signing time: Wed 26 Feb 2025 10:28:33 +0000
ROA not before: Wed 26 Feb 2025 10:28:29 +0000
ROA not after: Thu 19 Feb 2026 10:28:29 +0000
asID: 984
IP address blocks: 154.208.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90677 (0x16235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:28:29 2025 GMT
Not After : Feb 19 10:28:29 2026 GMT
Subject: CN=67beecd1-6f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:ee:cb:a6:5c:d5:fc:a6:4b:0c:0b:ee:37:
cb:f8:fe:5b:1e:5d:26:cf:a1:7b:51:64:57:a7:d6:
96:3a:8e:0e:da:97:32:9c:c7:8e:2d:15:0e:41:08:
16:56:b9:88:2e:d1:36:f9:6e:de:2b:2c:2a:10:23:
ad:df:69:44:4e:50:94:1f:b4:27:89:13:d4:a9:52:
a0:8b:78:36:e6:0c:89:df:1b:f1:e2:ae:e6:0a:1a:
24:e1:0d:91:0b:63:24:6f:31:b2:6f:42:fa:96:db:
18:17:37:6e:c5:ce:e2:24:a2:b1:9b:6d:54:3b:26:
0e:8f:cf:62:f0:ab:88:76:3b:7e:ff:9a:ca:d9:bf:
29:a4:be:00:cf:ad:e2:a9:4a:5c:f2:5e:b6:ee:28:
f8:cc:ad:ba:64:2a:9b:b1:bc:a8:ba:a8:65:28:6c:
d1:d7:59:7d:23:04:e3:15:6b:3c:ee:2e:78:32:4d:
bc:f6:16:25:d8:76:52:1a:e3:34:f8:09:ce:93:78:
04:76:04:cd:17:7a:9d:62:6b:b3:7e:56:55:51:04:
79:5a:20:32:95:87:67:40:4e:e9:9e:9b:4f:cc:7f:
38:ba:96:1c:3d:e0:f2:e0:a7:8e:a1:51:e7:01:9a:
58:83:63:31:92:1f:45:a1:29:f2:9f:4c:3a:bb:64:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A6:2F:AC:6D:1B:0B:0C:87:57:2D:DE:21:5C:C3:B5:3A:FA:C6:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DDD69FCF42C11EFBAD11EBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.75.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cb:68:4a:e9:f7:a3:2c:20:e5:0f:4e:ca:dc:79:66:ce:f5:
70:2b:35:da:c4:5e:2d:aa:4c:db:3e:88:b6:42:aa:18:b7:c5:
ac:fd:04:c0:c8:1d:5e:35:f2:0a:7a:86:25:3c:db:4c:6c:0a:
96:92:8f:cd:69:db:de:45:d4:28:48:ff:f7:6e:65:75:ad:29:
24:0b:f0:dc:79:02:c0:d4:ac:de:53:f9:17:19:9a:38:d1:9c:
66:33:09:fe:c9:7e:ac:c9:f8:58:7c:dd:07:75:55:63:0c:76:
b2:ca:4e:a7:66:d8:c7:ed:98:09:3c:be:c0:50:d5:67:d8:5a:
f0:5a:ee:11:7a:70:6c:37:c5:3b:fd:5e:81:62:3c:4f:af:a0:
c4:14:8e:eb:08:d1:a1:67:1a:93:29:2f:ee:e3:6d:9a:5b:3c:
5b:ad:f0:b6:91:55:35:be:0b:ab:87:67:48:3d:57:1f:99:59:
d1:6a:ea:03:98:53:31:8a:62:34:86:d4:b3:e4:c5:d1:63:c4:
a0:a3:ac:cc:6a:cc:be:0a:61:40:8f:74:f9:21:04:47:4d:d3:
a4:d9:ef:f0:8c:32:ef:d6:fe:8a:1c:bd:7d:65:38:c4:c7:2f:
9d:e8:92:9a:57:df:9b:56:50:51:21:34:0d:39:90:59:9c:10:
34:fa:0b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:38 2025 by rpki-client