Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70871310F43111EF88AFDD5E762E951A.roa
File: 70871310F43111EF88AFDD5E762E951A.roa (raw, json)
Hash identifier: bCPCr+EZdZddUVZYR6p2euKMa2H3toFiprAmB5yYMZk=
Subject key identifier: 7D:41:3D:23:BF:D6:4F:6C:67:B3:2E:BA:44:F4:35:FE:25:20:E3:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016271
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70871310F43111EF88AFDD5E762E951A.roa
Signing time: Wed 26 Feb 2025 11:04:25 +0000
ROA not before: Wed 26 Feb 2025 11:04:21 +0000
ROA not after: Fri 20 Feb 2026 11:04:21 +0000
asID: 984
IP address blocks: 154.199.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90737 (0x16271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:04:21 2025 GMT
Not After : Feb 20 11:04:21 2026 GMT
Subject: CN=67bef539-e6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:15:d0:f0:2b:8c:34:a6:ae:58:77:8d:53:
87:21:d3:f2:0d:c1:b8:68:1c:23:b7:7b:9f:b9:7f:
de:3b:69:88:56:04:0a:db:b6:8e:47:97:fc:4b:4b:
ef:bf:2c:6d:d5:e3:9c:d4:45:0c:fe:b7:b2:43:17:
6e:23:b4:51:14:7c:56:b1:14:97:8c:56:43:8d:dc:
c0:1e:17:53:6b:b6:9b:b6:c6:df:fb:04:47:99:35:
fd:33:e6:ec:90:bf:d2:96:3e:72:24:52:9c:42:6c:
0d:c6:c1:fe:13:2b:bc:4c:8b:4f:cd:2b:1e:2b:12:
8f:a4:8d:d2:1e:a5:b5:9b:50:cb:96:a2:f7:87:5b:
ee:e1:5a:7d:fe:5d:25:09:10:27:8a:a2:2d:c4:80:
c1:1a:5c:2d:62:57:5a:2d:ce:11:1e:c2:4c:88:81:
92:7a:4b:65:cc:0a:e2:f5:b1:24:3b:03:6e:cf:b4:
24:48:b8:fa:62:f1:fa:60:83:76:25:d6:db:53:e0:
bb:42:e4:ca:31:14:f5:f7:9e:24:b5:88:d4:9a:71:
5e:7e:ca:77:a8:14:90:43:95:8e:57:8f:84:e1:68:
d5:ec:0a:38:88:e6:9f:08:f2:1c:d4:41:67:98:67:
59:7d:64:45:4d:f7:81:3d:00:70:ed:e8:c5:eb:c5:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:41:3D:23:BF:D6:4F:6C:67:B3:2E:BA:44:F4:35:FE:25:20:E3:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70871310F43111EF88AFDD5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.18.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0f:b3:da:31:be:45:73:ea:d8:dd:fe:13:c4:fa:78:2b:40:
3d:2c:21:4b:0a:a5:36:c4:29:fa:38:f3:77:85:43:64:07:ab:
aa:24:c8:b7:d2:75:1a:0f:23:cb:16:9f:8d:a6:79:17:6f:49:
c7:b2:a2:cd:e3:7f:62:ca:04:93:a1:4a:aa:8b:b8:af:87:17:
a0:e3:cb:34:9d:f8:d8:6d:4e:d6:3b:bf:81:31:14:55:24:33:
ad:73:a2:bb:06:99:4f:3d:d3:5e:2e:a4:f9:71:40:39:ee:42:
ac:b4:6c:bd:a1:c5:f0:ee:db:e8:f0:28:72:dc:73:db:97:a5:
1b:d5:c3:d8:90:1e:b7:92:26:16:7d:52:ec:c7:9a:fb:9d:d6:
c1:29:c8:5b:7c:58:8c:bf:5e:8d:f3:28:91:2e:b5:aa:50:5a:
25:68:1d:73:db:4d:b2:58:46:2c:08:c1:89:3e:a3:fa:0d:fd:
f0:a9:b5:4f:e5:20:36:ae:6f:a9:bf:7a:86:0a:57:63:37:e8:
ae:9e:9a:17:9a:f4:c7:ee:b4:d9:99:cf:32:f2:17:ed:72:3f:
49:ed:cc:fd:64:a7:24:bd:db:46:88:5a:bb:a0:32:75:17:6d:
56:be:c3:46:ee:d1:bd:c3:56:5e:27:4d:50:d6:2a:ec:db:99:
35:ea:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:36:17 2025 by rpki-client