Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB70414F43511EFA11F127C762E951A.roa
File: 7EB70414F43511EFA11F127C762E951A.roa (raw, json)
Hash identifier: 3WHs3viB5g8aWQM0WxfFb1NIOvQjAn3OlBUFbXDBYWo=
Subject key identifier: 1E:8D:98:8D:0A:9B:A6:64:04:3D:FA:99:61:97:6D:00:3A:53:E9:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01629D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB70414F43511EFA11F127C762E951A.roa
Signing time: Wed 26 Feb 2025 11:33:27 +0000
ROA not before: Wed 26 Feb 2025 11:33:23 +0000
ROA not after: Fri 20 Feb 2026 11:33:23 +0000
asID: 984
IP address blocks: 154.199.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90781 (0x1629d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:33:23 2025 GMT
Not After : Feb 20 11:33:23 2026 GMT
Subject: CN=67befc07-8d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:bf:89:aa:bb:a3:14:cd:7e:55:25:c6:b8:
57:a8:4a:38:6b:a1:f6:1e:71:ff:1d:e5:74:71:72:
37:ac:b5:ec:b6:f7:db:dd:33:69:5a:a6:74:ee:5e:
db:ea:f5:41:2f:e5:66:62:64:9f:f1:e4:22:fe:48:
77:d9:bc:88:4b:82:55:3c:49:7f:8b:9c:92:6b:f4:
03:43:ff:68:bf:48:51:64:a1:bf:fb:ba:dc:86:e4:
c7:45:e3:82:0b:96:cd:7a:d1:5c:dd:e8:09:cd:87:
e9:04:1e:19:31:74:a6:bd:a0:a0:fc:b8:d5:8e:18:
65:d5:1c:2f:ad:e9:6f:6e:8d:ce:86:ff:45:d8:ac:
87:f8:74:68:15:33:ec:20:24:b1:b4:78:ed:be:fe:
7c:0d:ad:25:a4:db:c8:8f:04:8f:1f:8e:9c:ad:a5:
b0:3a:01:ff:69:ab:66:28:e1:07:c4:cf:d0:7e:1a:
c5:0a:03:98:32:e2:8f:55:55:6b:5a:af:17:0b:6b:
93:3e:04:e1:68:4f:41:0e:36:1b:f1:0e:1d:83:2c:
f5:14:19:7c:bf:06:9b:6d:45:3e:67:0e:a3:0a:56:
76:2f:dd:58:c6:ce:a3:69:34:19:b2:85:1f:cc:58:
56:4b:dc:75:a7:45:57:f4:0e:1c:11:f0:dc:38:a9:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8D:98:8D:0A:9B:A6:64:04:3D:FA:99:61:97:6D:00:3A:53:E9:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB70414F43511EFA11F127C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.135.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:2e:40:ca:ab:d8:f6:b4:7a:ca:0d:17:a1:0f:bb:be:e0:88:
1c:09:85:e4:0e:d7:d1:97:8e:78:2c:99:98:75:14:44:f9:f0:
5d:98:f5:7c:66:b3:4d:f8:a4:bb:32:3f:60:47:0d:af:9b:01:
d2:85:bd:ad:8c:70:13:64:9f:48:b9:72:a1:bd:15:39:f3:03:
07:63:cf:51:cf:bb:b4:a1:af:ed:33:b5:46:d5:85:1a:37:0f:
61:50:7f:8d:68:0f:4d:82:71:b0:1f:bb:22:eb:03:71:65:8c:
e6:e5:bf:55:4d:f0:7e:05:50:31:d9:6d:8b:cc:47:98:54:77:
27:9d:17:c2:c9:87:6a:a4:f0:f0:e2:98:a8:6b:fb:db:5b:ee:
33:5d:f8:ca:60:db:ca:23:70:19:7e:c5:df:7a:4d:fa:8b:9e:
43:ac:06:ca:d3:83:01:d1:72:e2:4c:06:15:75:a4:81:c8:b7:
b4:82:0b:3c:86:90:19:f1:ad:1c:ab:ec:91:4b:23:5e:cd:59:
bc:e7:00:ec:af:2a:14:6b:de:cb:78:e1:0c:06:15:af:34:65:
43:64:60:30:c9:00:dd:3e:fd:59:81:eb:68:1f:de:c3:07:3e:
47:a8:41:82:88:8d:a5:da:c2:db:30:29:d2:cd:5e:30:4d:b1:
9c:0e:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:45 2025 by rpki-client