Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E207FCF43411EF9E624772762E951A.roa
File: 77E207FCF43411EF9E624772762E951A.roa (raw, json)
Hash identifier: p9eyd7d1VgSINi7fZUdpKrDT2w4NPR4zBLlBkQuLWTQ=
Subject key identifier: D1:60:96:BF:A2:BE:89:D4:5E:42:C5:82:F9:4E:91:DD:1E:06:3B:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016294
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E207FCF43411EF9E624772762E951A.roa
Signing time: Wed 26 Feb 2025 11:26:06 +0000
ROA not before: Wed 26 Feb 2025 11:26:02 +0000
ROA not after: Thu 19 Feb 2026 11:26:02 +0000
asID: 984
IP address blocks: 154.207.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90772 (0x16294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:26:02 2025 GMT
Not After : Feb 19 11:26:02 2026 GMT
Subject: CN=67befa4e-2989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:1b:5e:73:60:ab:bd:28:1f:57:b6:71:4c:
5a:aa:26:96:e6:10:dd:71:1f:23:29:02:08:54:14:
26:55:cf:91:30:c2:c2:89:3a:41:5d:c6:d2:23:0a:
db:c1:a8:2d:1f:22:e3:ae:62:fc:28:81:02:0e:03:
85:92:d8:bd:87:64:d1:e4:b9:db:75:7d:e5:c2:ce:
68:1a:1d:4a:55:98:dc:80:68:0a:33:55:36:02:63:
96:74:62:40:1f:d0:9b:30:d9:f2:5f:21:4e:6b:65:
f8:a5:83:a4:7c:f1:89:b1:b6:5b:84:80:29:b2:01:
aa:e6:6b:9a:15:36:e5:69:d3:9e:39:b0:64:1a:65:
dc:44:cb:98:63:ea:4a:20:ae:cd:b2:c9:0c:1b:75:
90:36:0a:56:84:66:07:40:c9:27:ef:ac:ec:3c:b8:
9f:d6:e5:5c:73:b7:b8:8a:a8:f9:ca:04:d0:4a:b2:
b1:2a:3a:51:6a:3c:9b:b4:70:fb:ce:f5:aa:90:58:
57:77:e1:76:a2:3d:56:39:c1:66:96:79:09:f8:74:
a0:98:38:e4:c4:f7:8f:d4:a9:b2:76:28:91:67:9b:
8d:27:55:73:66:e5:88:2e:5e:c3:e9:66:53:99:1f:
a7:48:de:d9:31:e2:c3:e3:2e:de:d7:2a:40:62:a7:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:60:96:BF:A2:BE:89:D4:5E:42:C5:82:F9:4E:91:DD:1E:06:3B:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77E207FCF43411EF9E624772762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.93.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6a:03:72:56:d8:b6:b2:5a:32:24:44:01:9f:c4:7a:60:2e:
ab:19:ef:21:cf:38:98:c1:72:ef:1f:d6:cf:ca:c4:b4:42:7b:
b5:cd:05:9b:c4:d9:8f:7d:0d:aa:1e:ba:81:31:b9:f6:96:0f:
08:b0:cc:68:f0:ed:65:a8:7d:c4:9a:5d:3f:13:0f:5d:6a:28:
af:88:ad:16:87:34:a7:d6:e0:7f:b7:23:7d:ed:72:4a:be:42:
af:19:95:9a:d1:92:e9:e1:38:fe:21:7b:87:1a:81:56:fc:d9:
15:4c:0f:68:2a:8e:cd:c8:cb:6d:cf:4b:fd:ac:a8:4e:a6:df:
59:a1:24:81:0d:76:1e:41:7c:4b:4b:13:85:75:a9:1e:a7:da:
da:23:c4:9c:0f:61:fe:f1:8e:cf:10:92:4e:9b:38:bc:7d:f1:
33:33:c6:a4:25:b4:83:68:d2:12:a8:f0:66:30:9b:b7:7d:1f:
0f:8b:1a:ef:fa:7c:2d:be:fa:8f:9e:1d:56:fa:d8:c8:23:e6:
9d:06:14:92:d6:ab:cb:86:6e:67:93:49:44:b6:de:8b:e0:f6:
73:be:45:be:38:6b:46:c8:39:92:58:33:08:64:83:6d:25:93:
1e:84:d1:45:00:59:f0:e2:24:e9:dc:c3:dd:b3:31:91:4c:56:
4f:22:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:52:52 2025 by rpki-client