Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8ADDEEF45211EF847A9247762E951A.roa
File: 7F8ADDEEF45211EF847A9247762E951A.roa (raw, json)
Hash identifier: 7Hfti1kz2DeKb438ZeICWMRXnxrins7I1o463OOqwIQ=
Subject key identifier: 9B:3C:8C:1E:37:64:7F:86:CB:9E:72:7A:1A:5D:7B:ED:7B:B1:FD:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016499
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8ADDEEF45211EF847A9247762E951A.roa
Signing time: Wed 26 Feb 2025 15:01:04 +0000
ROA not before: Wed 26 Feb 2025 15:01:00 +0000
ROA not after: Thu 19 Feb 2026 15:01:00 +0000
asID: 984
IP address blocks: 154.210.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91289 (0x16499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:01:00 2025 GMT
Not After : Feb 19 15:01:00 2026 GMT
Subject: CN=67bf2cb0-d160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:6c:1a:8c:16:16:f3:04:e8:24:ee:fa:44:
cc:29:c8:c6:3d:aa:0c:51:87:a3:1f:34:12:bd:cd:
69:72:34:4e:42:a4:a0:b0:da:0d:d7:0a:a6:a0:94:
2f:8e:66:5a:af:cb:f1:60:40:06:e0:a7:51:bc:d2:
83:70:36:f1:0d:e3:af:b7:08:d1:60:a8:b5:6b:4a:
72:ff:ed:d6:1c:55:b1:83:39:55:d5:ca:2f:68:e5:
33:19:6f:7f:fa:18:8c:dc:4e:f4:9f:5c:59:45:bd:
c2:91:6c:66:84:54:02:f9:ff:4a:64:8a:bd:0d:35:
a8:6b:9d:fe:89:27:7d:dd:71:7c:75:10:6a:15:be:
53:aa:07:dc:6c:50:64:dc:2f:48:f9:31:aa:1f:5b:
4c:51:2b:0d:7d:63:e8:7d:0f:6c:a2:e3:be:9b:d3:
d2:4f:d0:f6:54:1c:64:d8:ba:33:13:47:78:93:ab:
8f:ae:42:26:cd:66:2d:ac:bc:e1:0a:99:57:bc:25:
05:f3:1f:9e:2f:57:47:c8:ab:58:df:85:ac:07:ed:
36:ba:89:b0:a1:92:50:dc:55:6a:6e:b8:f8:3f:0e:
56:c8:c8:ec:dd:c4:1e:1d:d6:84:10:74:83:5f:1d:
b1:ad:b2:e6:d7:ad:cb:5b:e4:a0:a4:ea:1f:f4:ba:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3C:8C:1E:37:64:7F:86:CB:9E:72:7A:1A:5D:7B:ED:7B:B1:FD:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8ADDEEF45211EF847A9247762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.80.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2f:81:ea:aa:d8:0f:05:86:b5:8a:63:2d:10:8c:5c:0f:a3:
23:47:04:36:71:b2:72:11:70:fe:19:d5:6b:ec:9a:ee:2b:d7:
3a:2c:56:35:63:45:bb:c1:96:da:dd:f2:0e:d2:19:10:4e:22:
3e:d8:96:96:1e:d4:ea:8e:28:07:2c:ea:d0:47:75:1e:12:95:
5b:84:e5:7a:87:80:3c:f3:3c:20:25:e4:4d:56:8f:58:4b:1a:
b2:1c:ac:9f:e9:c9:30:2c:0e:3b:0e:f5:38:09:18:67:ca:83:
c1:76:36:81:2e:54:95:7f:87:ea:01:dd:6b:46:03:8d:6d:92:
be:4a:ac:13:99:a1:cb:66:47:e9:e1:15:c4:9e:fa:d2:dc:24:
07:49:55:ac:71:e5:04:d8:9c:fd:a0:63:83:cf:5b:f8:c2:db:
27:2f:c9:c6:b1:56:96:6d:30:c1:56:57:13:ef:23:52:59:eb:
dd:96:6d:3b:43:08:b5:57:cd:83:04:2d:3c:60:98:82:4c:7e:
f0:6d:58:1d:f5:b7:22:3a:6c:08:66:26:ba:ff:31:d2:bc:ff:
77:8e:f6:ed:7a:cf:c1:36:55:d7:20:6a:68:f7:83:68:7f:84:
71:38:03:a9:0e:02:d5:73:95:8f:43:f9:12:4c:20:20:d1:aa:
28:77:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:53 2025 by rpki-client