Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E0305F8F3FA11EFB3ED3B66762E951A.roa
File: 7E0305F8F3FA11EFB3ED3B66762E951A.roa (raw, json)
Hash identifier: P93zl6S3L6fg8xdMSjnz9OTB7cErT+COPZuOwATz27k=
Subject key identifier: 72:44:2C:AB:0E:5E:FE:88:14:6F:58:6C:6F:5E:1F:F2:DE:96:A7:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E0305F8F3FA11EFB3ED3B66762E951A.roa
Signing time: Wed 26 Feb 2025 04:31:05 +0000
ROA not before: Wed 26 Feb 2025 04:31:01 +0000
ROA not after: Thu 19 Feb 2026 04:31:01 +0000
asID: 984
IP address blocks: 154.203.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90327 (0x160d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:31:01 2025 GMT
Not After : Feb 19 04:31:01 2026 GMT
Subject: CN=67be9909-b506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:30:0b:18:82:67:19:7e:94:3e:4a:e1:b9:
b4:7b:ad:ae:ae:86:38:b7:9b:47:d7:9d:a4:bc:07:
ac:3f:f9:50:ce:bb:a1:9a:84:c5:1d:6f:01:ca:85:
c3:33:35:59:a6:70:71:14:66:7c:f2:74:49:f7:f5:
8d:6b:18:73:5a:d0:a3:ab:6d:3a:01:20:b7:b2:bc:
ca:71:c9:79:e2:be:c2:3b:c7:24:4e:3d:00:c4:bb:
53:82:1d:79:52:35:f6:b7:94:6c:c3:0d:9e:2a:8a:
87:af:34:5e:d9:76:35:97:53:01:af:cf:4a:af:96:
5d:cd:38:d2:9c:aa:ac:08:83:bb:3e:e0:c2:1b:6f:
f6:7f:46:4c:18:ae:2b:16:33:32:83:8e:45:2f:9d:
ce:0a:6a:24:52:77:a0:18:38:17:bb:3b:b3:c2:89:
92:d8:cb:4c:21:2d:02:ef:8b:11:d1:5c:ff:2b:b8:
d4:4e:d0:16:8a:46:64:63:fa:bf:50:4c:1a:d7:75:
5b:6d:e4:e1:64:22:1e:8f:e1:69:d0:a4:51:10:9c:
1f:1e:7f:a5:da:f9:6c:29:a1:c4:8c:b6:c8:ba:ec:
51:7b:b5:35:fc:ef:a9:25:18:80:15:80:fc:5e:a2:
23:81:1e:fb:99:d0:3b:51:1d:67:8b:94:0e:6b:fe:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:44:2C:AB:0E:5E:FE:88:14:6F:58:6C:6F:5E:1F:F2:DE:96:A7:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E0305F8F3FA11EFB3ED3B66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.205.0/24
Signature Algorithm: sha256WithRSAEncryption
85:69:05:e1:0f:b1:16:d2:84:94:2a:f3:85:31:bc:3c:6a:67:
2e:b5:e7:75:1f:eb:6a:e7:e5:cf:5a:aa:42:4e:eb:8c:ef:2a:
6f:4a:75:b0:5d:37:6d:fb:ae:76:75:c9:d1:a0:bd:3a:2d:bc:
e0:fc:3e:bc:d4:46:9e:5a:bf:50:b3:9a:7b:8e:6a:32:e7:64:
14:19:58:27:2f:33:18:6c:a3:93:46:3f:74:6f:96:ee:80:b0:
f3:a5:fe:fd:5a:69:52:10:1c:4c:24:17:46:7c:b8:47:1e:a6:
eb:26:52:73:c2:77:74:2f:79:90:1f:0f:1c:a7:c8:7a:f1:81:
5f:08:53:48:f8:cf:95:78:b7:47:f2:57:70:80:07:c8:d7:ac:
05:6c:03:3e:6a:a4:c5:ee:68:75:4f:c3:8a:bf:0a:6f:57:ca:
55:54:02:a1:0c:56:7f:25:ba:1d:23:c6:9d:90:e2:59:ea:1e:
d2:ea:b7:0c:5e:fe:e9:82:bd:fc:0a:d3:87:d5:62:b2:07:ed:
8a:ef:84:e1:9e:af:e6:ce:2d:c5:d4:f1:b1:e4:2e:06:cf:29:
2e:88:67:81:57:a8:f9:31:08:d1:ca:8a:ad:03:26:0d:13:28:
25:c8:f6:96:af:93:56:12:6a:82:12:d0:61:cd:44:62:3b:e9:
31:95:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:08:40 2025 by rpki-client