Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FDA24B0F44B11EFB4BCDC95762E951A.roa
File: 6FDA24B0F44B11EFB4BCDC95762E951A.roa (raw, json)
Hash identifier: 4xX4oXWs37Ggf0hsj0eAiD26UnqlrLK2eb8mPxAf6kE=
Subject key identifier: 60:29:08:C5:4B:6E:C0:2D:69:F4:46:10:64:6A:80:11:79:AB:CE:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016425
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FDA24B0F44B11EFB4BCDC95762E951A.roa
Signing time: Wed 26 Feb 2025 14:10:31 +0000
ROA not before: Wed 26 Feb 2025 14:10:27 +0000
ROA not after: Thu 19 Feb 2026 14:10:27 +0000
asID: 984
IP address blocks: 154.210.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91173 (0x16425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:10:27 2025 GMT
Not After : Feb 19 14:10:27 2026 GMT
Subject: CN=67bf20d7-6959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:f5:63:94:2c:cd:a0:d1:7e:7e:b1:9b:7b:
db:a2:bb:a3:83:35:a9:ad:4e:3b:4a:0d:3e:91:f4:
3e:5f:c4:01:c8:2d:90:46:ad:ee:36:63:58:62:39:
45:8d:d9:bc:df:9d:46:f9:21:fc:06:3d:50:92:8c:
6e:57:d8:39:67:c9:b2:7a:91:dc:b7:a2:36:f7:a9:
3f:a2:51:3e:2f:e6:07:de:07:d6:77:20:f3:86:46:
ae:76:5a:8d:b7:44:f7:99:f1:42:73:62:cb:b8:e4:
1c:d1:a5:dc:63:5b:fe:a4:48:c9:8b:c3:fa:d1:ce:
02:02:7d:7f:94:3b:4c:3e:c6:7a:fc:14:3f:47:a4:
ad:c8:bd:0d:fb:56:6c:f9:f3:c4:88:7a:b1:c1:74:
6e:72:37:2b:0f:9a:a1:aa:c0:c8:60:90:73:a8:7f:
26:d8:7a:4d:d4:2b:a6:37:5f:b7:a3:9d:bd:39:fe:
aa:6d:cf:63:87:2f:a7:c3:9e:5b:d1:9f:41:5b:9e:
ea:b7:1f:bf:6a:5f:09:83:d0:da:3e:3a:85:85:06:
36:dc:e3:bd:cc:4b:73:4b:d8:59:bc:2f:c5:92:1f:
0b:fb:7e:09:4a:8a:d3:34:cf:fe:4b:cb:66:0a:29:
0e:1c:9a:74:0a:d6:d7:bc:0f:d7:20:b8:17:12:40:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:08:C5:4B:6E:C0:2D:69:F4:46:10:64:6A:80:11:79:AB:CE:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FDA24B0F44B11EFB4BCDC95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.46.0/24
Signature Algorithm: sha256WithRSAEncryption
71:70:42:b5:36:5a:b1:09:90:9b:2b:24:ef:9d:7a:67:c9:c5:
86:95:14:e7:1a:5e:81:4b:45:85:c5:45:8b:26:9b:05:58:44:
4c:a9:24:ce:6a:07:63:2b:90:22:d9:68:a7:27:3e:46:98:b4:
7d:10:b5:e5:4b:49:75:1b:f1:f1:63:d3:f1:b3:1b:a9:41:9f:
6b:a6:c0:c4:50:a6:d6:98:af:84:b3:c0:2d:19:07:1b:2f:26:
b0:02:60:66:4b:91:a1:fd:3f:b9:f3:ae:e0:24:da:86:f8:68:
ab:8c:56:7c:fe:c4:b9:ef:04:4e:34:13:d1:0f:07:ba:05:6a:
e2:74:48:47:8c:6e:d9:79:5f:e4:2c:42:bf:55:4d:5c:46:02:
7a:55:d1:09:50:7d:71:45:9c:20:df:48:3a:a4:8e:1a:de:87:
0a:65:3e:e5:87:2a:6b:95:78:d4:0d:ae:4e:54:ca:39:c4:e6:
a8:78:bf:c7:59:e8:be:6a:e9:48:3b:db:8a:aa:6e:0c:77:a8:
58:16:76:71:b9:70:1a:63:04:10:a4:7a:96:87:e7:96:7f:2d:
41:24:7f:aa:83:06:c7:41:a2:08:84:62:10:bb:88:ae:8f:b0:
4e:5c:53:14:90:1a:4b:1e:2c:8c:d3:f4:48:5a:94:bd:ad:cd:
d7:df:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:28 2025 by rpki-client