Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EED5BAAF3DB11EFB28FED7E762E951A.roa
File: 6EED5BAAF3DB11EFB28FED7E762E951A.roa (raw, json)
Hash identifier: nySW7arudUT7DRIyR0J3ElApy0C8jBhrGBDe4f95yNM=
Subject key identifier: 9B:A8:D5:1F:65:6C:85:57:E6:32:DD:C5:ED:E4:7C:64:98:FC:95:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01604B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EED5BAAF3DB11EFB28FED7E762E951A.roa
Signing time: Wed 26 Feb 2025 00:48:46 +0000
ROA not before: Wed 26 Feb 2025 00:00:42 +0000
ROA not after: Thu 19 Feb 2026 00:00:42 +0000
asID: 984
IP address blocks: 154.92.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90187 (0x1604b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:42 2025 GMT
Not After : Feb 19 00:00:42 2026 GMT
Subject: CN=67be64ed-3391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:d2:76:6e:96:77:b9:ee:46:4a:98:72:30:
43:79:bd:c0:5e:35:98:03:97:98:c8:50:a7:33:46:
0e:80:92:18:02:e0:5f:4a:6e:f2:06:ce:6d:62:02:
a0:ce:ed:d8:2c:4e:1f:e1:67:c2:74:ef:4b:a1:d9:
4a:6f:49:66:ed:3f:be:34:52:95:d2:3c:69:6d:e9:
b6:d3:01:f2:d5:5d:ba:a6:0f:41:1e:f1:28:c3:e2:
10:d3:09:29:dd:da:63:ba:64:60:d7:c8:bc:6d:5b:
3b:2e:0d:a2:3f:67:cb:a4:99:33:31:8f:03:ca:16:
cb:db:9f:70:d3:42:bc:78:95:6b:e4:b1:07:41:40:
86:37:ea:6e:7b:33:77:d4:68:4c:f2:22:78:b6:7d:
74:00:57:31:4d:e7:3e:60:06:9b:55:95:8e:12:60:
24:59:44:da:26:82:a6:38:fa:b3:b6:3a:a8:a4:2f:
93:aa:8e:5e:e3:ef:77:d9:41:10:e0:a0:26:73:59:
5b:9a:ef:80:e9:d5:93:63:af:51:7f:99:00:04:06:
8b:e0:d2:79:03:ac:ac:e1:0f:b4:ea:5a:da:1a:85:
c6:6d:c4:d5:2c:4b:2c:42:11:80:97:c8:56:1a:2b:
2c:af:75:b2:5d:41:85:f2:f2:f3:12:6a:84:c1:47:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A8:D5:1F:65:6C:85:57:E6:32:DD:C5:ED:E4:7C:64:98:FC:95:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EED5BAAF3DB11EFB28FED7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.227.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:e8:91:ed:c9:aa:92:49:b3:3a:ec:c2:50:c5:27:54:9d:a0:
c2:b6:ed:ac:cf:16:eb:9b:b9:99:84:5f:48:6f:60:c0:da:e0:
35:ad:19:52:2e:ce:b6:14:e0:6b:59:cf:0e:64:30:0a:2f:6e:
12:f6:d1:99:c8:23:38:24:78:81:12:52:88:2a:c2:94:a2:b0:
b9:e7:75:10:eb:84:3f:4b:fd:0c:11:b6:de:40:57:ca:cb:53:
48:b3:09:b6:5e:db:bd:35:75:96:9c:cb:08:f6:ca:05:eb:aa:
dc:13:62:cd:90:89:47:e7:da:4b:0c:8c:0c:e2:52:fb:c5:4c:
a9:78:be:45:5c:4d:fd:82:b9:14:73:3c:1f:e2:1d:d9:6a:25:
a6:ad:9c:b8:a5:a0:e3:f6:53:44:4f:95:de:21:9c:dc:fc:76:
ea:8e:f6:09:b4:7f:fb:47:e2:6c:07:69:2a:5c:a6:ff:f5:a9:
95:55:08:c9:b4:ca:bc:6a:33:2d:93:59:14:3b:79:31:31:2c:
f4:0a:8f:44:29:96:79:39:46:19:cc:7a:e7:f2:fc:cc:06:7f:
e8:f4:e1:57:5e:a5:e0:a1:9c:84:8b:01:b1:c6:2a:3f:76:d9:
cc:08:e9:f9:08:5a:d1:1f:43:00:21:c6:a3:73:fd:91:60:7a:
89:fe:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:37:45 2025 by rpki-client