Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C57F490F41B11EFA3464747762E951A.roa
File: 7C57F490F41B11EFA3464747762E951A.roa (raw, json)
Hash identifier: AqAuV3z4S7GNC0yTzHt/ZikYUV6ar4q2a41b0SVDnOE=
Subject key identifier: 44:D1:3F:6D:A3:E8:E0:32:4A:9E:18:D4:1F:B4:D1:EF:55:C2:88:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016155
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C57F490F41B11EFA3464747762E951A.roa
Signing time: Wed 26 Feb 2025 08:27:16 +0000
ROA not before: Wed 26 Feb 2025 08:27:12 +0000
ROA not after: Thu 19 Feb 2026 08:27:12 +0000
asID: 984
IP address blocks: 154.206.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90453 (0x16155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:27:12 2025 GMT
Not After : Feb 19 08:27:12 2026 GMT
Subject: CN=67bed064-242f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:70:06:73:82:88:d7:31:ba:bd:0c:06:f7:
86:17:96:ac:3e:26:5c:ad:73:f5:f7:f6:c8:6c:51:
7d:f6:30:8b:58:0d:2b:87:42:1e:6d:0b:bf:57:6d:
3b:c7:30:d4:62:49:4c:bf:8f:ce:a0:79:81:a6:21:
1f:81:d8:b0:4a:c7:cf:51:1b:e9:78:5d:d9:1e:02:
7e:cd:d1:62:56:bc:b2:b1:a3:5b:51:c4:ed:6f:85:
99:49:9a:cb:79:68:88:9b:af:27:e9:81:e1:87:48:
c5:40:b4:aa:b7:98:cf:aa:b2:7f:bf:d0:14:25:cd:
a6:9c:27:7e:7a:2e:73:fa:ae:bc:4a:e1:3b:1d:83:
a6:7e:80:dd:87:a8:60:c2:2b:e8:10:a9:b6:57:a5:
4f:19:c6:75:67:35:6a:46:b8:e9:7f:98:75:5e:f4:
3b:a5:7b:65:bd:2f:ba:14:46:1c:67:55:8c:ce:b4:
7c:2d:5a:bc:c3:17:09:36:36:bf:94:1a:61:d5:85:
76:f8:82:4e:d7:df:00:ae:98:f0:ac:cb:2a:c0:b7:
a2:4f:af:f6:8a:20:b3:e9:6e:c6:d3:c9:ec:d8:81:
21:70:81:2e:93:41:ec:f2:48:03:51:e9:c3:de:92:
6e:eb:d0:b8:03:08:08:38:52:19:c0:a1:fc:61:ab:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:3F:6D:A3:E8:E0:32:4A:9E:18:D4:1F:B4:D1:EF:55:C2:88:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C57F490F41B11EFA3464747762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.211.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:43:61:57:38:77:27:e1:49:c3:d4:0f:9b:ad:13:07:ff:c3:
0c:66:a0:09:d9:db:e6:61:d3:2f:56:36:fe:09:ee:5c:35:bf:
3b:94:68:1a:c5:48:32:63:e8:7a:00:5f:a5:c0:30:a9:d6:2d:
ed:bb:58:cc:d6:7b:69:93:d8:55:1c:a2:b2:d6:a8:a9:ea:08:
17:e1:ac:6b:37:4a:64:28:33:ce:b1:38:c6:8c:55:e8:f9:36:
bd:1f:bd:b8:73:b3:f4:2d:47:2b:55:fe:56:83:c5:7b:5b:c1:
d6:ac:74:00:20:73:9c:05:72:a9:a8:e7:64:df:a7:aa:17:af:
90:1f:b3:a3:3e:03:13:b3:c1:2d:d1:a4:4a:5e:67:09:f7:1f:
60:8e:63:ea:74:46:4c:c5:3a:71:00:80:e7:db:32:11:ff:aa:
12:18:6e:42:85:5a:bb:c9:79:bf:4d:bd:37:da:05:c1:e2:6d:
19:54:1f:9e:81:31:b0:1c:23:1b:81:b8:06:76:6a:3d:fb:b2:
ec:be:ec:4b:77:de:5c:fa:c3:b8:49:5f:54:64:49:51:6a:ca:
bf:6c:35:4b:06:85:1e:4e:9b:d8:84:3b:e5:a0:98:b1:c6:d3:
ab:e3:98:65:63:75:ed:aa:65:51:c9:a9:b6:1b:c6:74:6b:6d:
be:9d:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:53 2025 by rpki-client