Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7281E186F42711EF944AB999762E951A.roa
File: 7281E186F42711EF944AB999762E951A.roa (raw, json)
Hash identifier: gtyeFibK9/A+wrXgvYE2kF67N3O+ONW0XlIOXOSuBM0=
Subject key identifier: E1:9B:C8:F7:23:45:88:52:F3:BA:12:AE:3D:9B:6C:FF:54:AF:5E:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01620A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7281E186F42711EF944AB999762E951A.roa
Signing time: Wed 26 Feb 2025 09:52:53 +0000
ROA not before: Wed 26 Feb 2025 09:52:50 +0000
ROA not after: Thu 19 Feb 2026 09:52:50 +0000
asID: 984
IP address blocks: 154.206.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90634 (0x1620a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:52:50 2025 GMT
Not After : Feb 19 09:52:50 2026 GMT
Subject: CN=67bee475-78ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:1d:dd:e5:1d:c4:1e:a0:f9:9e:97:5c:f6:
af:1e:4e:5a:28:ad:1d:76:18:e7:5d:d4:15:33:aa:
3d:53:9f:e6:60:93:f9:bf:c2:74:38:af:b8:58:a1:
3d:1a:db:00:5c:18:9f:ef:2b:63:cf:8b:60:2b:4c:
cd:75:43:cd:b4:49:09:c8:dc:35:7d:37:fa:d0:0a:
8e:5f:9f:4d:d8:80:b5:b5:16:ba:6d:6a:e2:50:e2:
66:1e:46:ba:df:11:fa:bf:97:d7:d9:0b:17:d7:c0:
ca:e3:f6:80:64:19:96:7b:cd:58:42:23:71:90:05:
8d:8f:74:04:0a:2d:c7:ac:de:b8:73:2f:0e:50:6f:
77:c5:e1:01:26:f8:cb:5e:f2:94:5e:53:3b:03:4c:
dc:6c:27:f1:23:7c:41:a4:37:68:70:ea:bc:c7:d6:
a2:42:dc:cb:b8:85:f3:37:7d:92:3b:42:20:89:27:
48:1d:8f:2a:59:3f:b6:7c:2d:bf:e7:cd:6d:09:05:
15:82:34:af:c1:58:80:7f:a1:03:f5:60:57:02:83:
82:27:24:29:bf:bd:cc:dc:95:7b:68:3b:69:45:36:
6f:83:9d:2d:f9:0c:e7:c8:24:98:56:43:e3:09:79:
62:7d:24:30:ae:cd:e1:f0:4b:7f:54:b6:60:dd:98:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:C8:F7:23:45:88:52:F3:BA:12:AE:3D:9B:6C:FF:54:AF:5E:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7281E186F42711EF944AB999762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2c:f3:18:02:27:3a:63:a8:1c:b4:7f:97:6b:93:40:97:8d:
0c:ec:a4:8b:ff:02:0e:83:87:d0:cb:a0:1d:d0:db:39:95:23:
ce:90:98:21:7c:f4:85:74:48:61:1e:ca:56:95:73:0c:70:c6:
c7:0f:f2:38:d0:ce:48:dd:1d:81:7b:b1:64:72:9c:49:14:ba:
58:31:13:81:02:67:84:ca:d4:3b:9c:06:51:e5:83:ee:b1:08:
23:cc:af:61:ca:8d:86:ee:31:3d:c0:f6:b4:44:12:22:85:38:
c7:e6:b6:4b:45:40:0c:eb:ec:51:a9:c5:9d:25:b3:ac:ba:8e:
2d:74:ec:2e:33:73:11:27:2c:ef:e3:cc:48:7d:e1:ae:3a:9b:
b7:d3:ed:50:14:8a:04:a2:bb:54:53:48:b8:38:9e:c0:cb:20:
84:13:5e:74:08:87:2c:6c:2b:84:2d:18:ad:65:e8:0d:23:71:
a9:d7:0f:59:66:cb:f5:cb:99:d7:b1:88:fa:53:47:54:1c:ea:
76:fe:df:ed:65:3a:e0:87:ed:e3:f5:c5:59:9a:08:dc:55:b2:
65:fb:2a:34:bd:02:9c:32:64:2b:a2:3c:32:0f:62:ea:ee:42:
f5:11:d3:e4:5d:2f:4e:7e:47:46:ee:45:de:17:b5:92:d3:33:
49:1f:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:20:58 2025 by rpki-client