Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76874FCEF45811EFA727F671762E951A.roa
File: 76874FCEF45811EFA727F671762E951A.roa (raw, json)
Hash identifier: UE1SbGE5FLi3z25PHXzMkgIhgyBODj2/J7jjsVJmBUs=
Subject key identifier: C1:B5:4F:E0:55:2A:6E:30:ED:0F:D5:88:EC:AD:9E:A2:48:0F:CE:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76874FCEF45811EFA727F671762E951A.roa
Signing time: Wed 26 Feb 2025 15:43:46 +0000
ROA not before: Wed 26 Feb 2025 15:43:35 +0000
ROA not after: Thu 19 Feb 2026 15:43:35 +0000
asID: 984
IP address blocks: 154.210.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91371 (0x164eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:43:35 2025 GMT
Not After : Feb 19 15:43:35 2026 GMT
Subject: CN=67bf36b2-4080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:00:fb:d4:01:9e:de:da:c7:03:dc:51:6e:
b4:4b:94:63:fe:18:b9:82:ec:10:e3:aa:c1:cb:0c:
09:9f:4a:f9:0e:8a:64:f8:23:f4:fe:92:7c:9a:61:
2a:71:cd:76:7f:2a:88:65:e7:ee:71:31:b1:dd:30:
15:08:e5:a5:37:7d:68:12:20:07:fa:7d:0a:44:0c:
98:8a:08:b1:c0:46:1f:cb:c1:a4:7c:61:56:b2:f4:
92:7c:ff:e5:67:90:99:0e:27:e2:b4:de:07:1e:36:
0f:d4:d7:71:6b:d9:26:94:94:75:f6:5a:76:17:51:
68:63:96:cf:cb:0b:d4:e7:31:4c:bf:0f:a2:85:cb:
13:47:5c:74:9c:9c:b6:00:f6:8b:06:33:1b:e8:15:
92:f3:83:9a:6a:6b:c5:69:5b:b0:8c:91:bb:55:6a:
58:4c:f4:40:9c:c5:c2:b4:8d:73:8f:bd:2c:1d:86:
ad:83:50:64:c9:3e:34:02:b0:43:eb:df:41:48:ab:
52:d3:9f:dc:76:e2:03:2a:32:8a:51:6d:0d:22:d1:
31:00:af:21:7f:3a:34:e9:f4:ac:a4:7d:cd:91:a9:
e9:50:b8:ac:7d:18:93:92:46:91:24:3e:71:9b:5c:
85:be:da:74:ff:a6:c3:7e:67:4f:c4:f4:13:5d:c2:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B5:4F:E0:55:2A:6E:30:ED:0F:D5:88:EC:AD:9E:A2:48:0F:CE:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76874FCEF45811EFA727F671762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.100.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:95:5f:9d:05:2b:43:94:17:7d:cd:f1:d3:78:06:61:f9:d3:
9a:1a:b6:d4:e8:c7:13:b8:29:af:40:41:a0:b7:25:24:8a:6c:
4d:6a:b5:48:da:48:40:8c:b5:01:58:ee:5c:d4:d9:15:c6:fb:
ed:c9:30:c9:af:02:29:20:6f:f6:fe:86:53:fb:1a:d6:c4:15:
5f:21:c1:23:33:81:e3:5c:31:47:8f:b1:cc:f8:ed:96:4f:35:
0a:7b:4f:9e:48:af:89:aa:e3:ad:77:c6:ef:b7:44:29:4d:8c:
ea:4a:25:7c:e5:a2:f1:5b:aa:60:fa:f3:06:bd:df:26:00:b1:
97:ca:54:d3:1c:5a:13:e7:9f:63:5e:18:97:cb:53:11:02:4b:
e3:60:15:2d:61:42:6f:db:4d:f1:01:c4:1d:46:b6:f7:0c:e8:
cb:66:74:07:f0:05:ff:16:07:15:71:3c:64:2c:af:cb:bb:ab:
a7:5a:69:4c:d2:18:2d:e9:a3:ea:35:a2:1c:5d:d6:e5:2e:48:
8b:24:bd:91:6e:9c:58:aa:2d:16:2e:92:27:8d:65:2e:02:0f:
11:bb:74:f9:70:85:3c:2d:6f:27:a7:d7:3e:b6:97:8e:e6:b8:
32:53:47:fb:a1:30:12:37:cc:c3:a2:cb:3e:eb:76:b6:ea:f5:
b6:5e:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:20:04 2025 by rpki-client