Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A4FDE18F41D11EF930CE053762E951A.roa
File: 7A4FDE18F41D11EF930CE053762E951A.roa (raw, json)
Hash identifier: Iur7U53c0H51A4mzGoas4X5rmUv1Jqwj0rnLO+Hl/8g=
Subject key identifier: 43:3F:32:92:81:D1:58:1D:F8:CE:0E:9D:2B:26:52:51:EE:8D:41:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01616D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A4FDE18F41D11EF930CE053762E951A.roa
Signing time: Wed 26 Feb 2025 08:41:31 +0000
ROA not before: Wed 26 Feb 2025 08:41:28 +0000
ROA not after: Thu 19 Feb 2026 08:41:28 +0000
asID: 328608
IP address blocks: 154.200.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90477 (0x1616d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:41:28 2025 GMT
Not After : Feb 19 08:41:28 2026 GMT
Subject: CN=67bed3bb-d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:ed:8e:6f:5a:25:dd:01:ec:6f:68:69:4c:
d2:65:e0:55:83:c0:a4:11:0e:e8:50:04:cb:53:ba:
c8:e8:aa:4e:2e:ad:9e:38:14:76:5a:64:af:11:a6:
d4:bc:7a:29:e4:ce:fa:b8:36:6a:6e:b7:4a:c6:41:
6e:8d:59:9a:e0:f2:cc:54:a3:e0:6c:c7:de:6f:b5:
25:4b:b9:fe:fc:ba:98:8e:5f:09:84:dc:be:99:ba:
b1:07:1f:04:f2:35:b9:20:e4:0f:ad:cf:f4:fb:c1:
71:06:ef:7d:5e:49:17:1b:3b:20:30:5b:a1:9b:39:
19:be:73:9c:79:94:f8:66:8b:4f:ae:c7:5d:28:e4:
cc:98:d3:99:ac:d8:57:16:75:d1:e7:16:e2:f3:ed:
9f:7f:fa:cf:1a:8e:d2:50:f5:6b:04:c7:fb:fb:77:
b4:f8:5e:18:d7:25:b5:3e:3d:47:19:78:b3:d5:94:
b5:7e:b7:d4:23:4e:5d:7e:2c:3b:85:fc:d6:42:65:
6f:79:a0:4a:72:a9:06:f0:8d:53:4f:2f:51:fa:2c:
53:41:b5:ef:6f:34:de:e0:4a:72:33:c8:bd:9f:99:
5c:55:d9:00:f3:eb:69:cc:e8:40:ae:73:09:d1:cc:
6d:12:e3:51:15:ee:3e:d0:d0:7c:f3:e3:9d:e2:5d:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3F:32:92:81:D1:58:1D:F8:CE:0E:9D:2B:26:52:51:EE:8D:41:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A4FDE18F41D11EF930CE053762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c3:b5:a5:82:70:35:90:0e:19:f8:84:57:4a:e0:0d:6f:42:
3c:9e:a0:d6:19:2b:32:6e:92:e9:d6:c3:71:34:91:62:36:7b:
36:7a:70:50:a1:70:be:46:65:9b:e5:52:09:25:d8:6a:7c:cf:
b2:ce:c4:f7:50:38:e9:6d:69:6b:32:23:5b:51:93:07:5e:68:
87:5f:2c:72:9d:df:50:d2:da:32:eb:e9:3d:07:22:e1:9b:14:
4e:58:3b:64:cc:ff:29:81:66:0f:6d:9c:dd:ce:00:56:0a:7a:
a1:80:f9:94:93:51:1a:d0:7f:48:39:07:d9:f6:48:c5:bf:a2:
20:a3:7a:75:ca:67:bf:64:da:e9:2e:11:f6:19:1c:33:93:8d:
15:cc:a5:a3:0f:20:dc:ab:78:55:b6:fa:bd:18:32:73:a6:c4:
23:2c:e1:d5:8c:80:22:c5:48:77:87:8f:d5:5f:2e:a4:12:d4:
78:58:bb:c9:99:07:24:77:94:b2:62:ae:2e:48:0d:ce:4b:e1:
f0:48:28:f3:3f:26:0a:ce:52:b0:9d:08:9d:e3:7d:bb:cf:79:
95:bc:e3:49:e4:fc:5f:0c:49:38:0a:00:75:bc:19:b7:65:54:
f4:4f:ab:c7:0f:9c:62:c9:ba:f0:c4:ad:bd:8c:9d:53:08:4d:
ec:5f:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:10 2025 by rpki-client