Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839DB6ACF44511EFB5AE7E6D762E951A.roa
File: 839DB6ACF44511EFB5AE7E6D762E951A.roa (raw, json)
Hash identifier: ltRVzMzDiEanOBA6aANlAOeHIQY7z6o0R9y8XxT/rxE=
Subject key identifier: 8F:CC:93:AF:5C:D2:96:96:60:CA:5D:8D:63:D7:D6:3B:33:27:30:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839DB6ACF44511EFB5AE7E6D762E951A.roa
Signing time: Wed 26 Feb 2025 13:28:07 +0000
ROA not before: Wed 26 Feb 2025 13:28:03 +0000
ROA not after: Thu 19 Feb 2026 13:28:03 +0000
asID: 984
IP address blocks: 154.208.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91075 (0x163c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:28:03 2025 GMT
Not After : Feb 19 13:28:03 2026 GMT
Subject: CN=67bf16e7-19dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:59:05:58:c3:d2:da:9e:ad:f9:c7:c8:0d:
c3:bb:a8:5c:93:18:f9:65:9e:8f:83:57:56:4a:1c:
ad:b4:27:f6:5e:39:e8:d4:d2:90:0e:28:16:fc:a2:
4f:fc:b0:9a:11:1f:31:bd:a3:ac:e4:ca:a5:a0:a4:
da:28:e9:6f:6a:da:df:d8:e0:8b:f1:77:95:86:3b:
34:cb:39:b0:03:c6:48:cf:aa:61:a7:30:02:54:60:
6f:5f:35:5a:94:c9:94:cf:ad:1c:d9:bf:3b:b8:12:
72:99:66:42:92:ce:78:2c:79:f3:94:5e:86:9e:db:
29:39:80:45:b5:2a:a8:71:ce:92:ce:c6:c0:ce:9e:
9a:09:ce:05:a2:64:fa:91:f8:12:1e:33:a0:aa:9f:
d3:7d:d4:53:8d:20:82:07:1a:09:ee:8b:d0:5c:b5:
4a:1c:e6:91:2d:36:c9:eb:a1:eb:46:1d:15:6e:45:
e7:66:fe:71:09:0f:79:13:de:16:6c:33:80:a7:b7:
9b:62:dd:2d:36:db:af:08:29:c9:06:43:66:92:e3:
74:ac:14:c5:55:47:d8:4c:00:64:d3:b9:7b:68:6a:
3b:c0:e1:37:1a:e2:f0:51:df:1b:72:67:30:2f:73:
83:f3:41:62:b9:e1:87:03:d8:e8:01:00:d5:88:c9:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CC:93:AF:5C:D2:96:96:60:CA:5D:8D:63:D7:D6:3B:33:27:30:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839DB6ACF44511EFB5AE7E6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5b:c3:63:d7:7a:b0:aa:9c:8c:97:4d:d4:ee:5a:58:5d:07:
64:62:03:47:34:66:a2:d8:aa:c7:ba:ff:f4:da:00:51:ea:fb:
fe:e2:00:bc:33:27:c0:4d:fc:fb:ad:f0:01:78:fb:1b:0e:f6:
69:aa:1a:51:0b:c5:0e:2d:d5:3e:00:a8:f3:28:fe:54:69:97:
12:30:67:c7:f6:c8:29:b4:9d:24:7d:5d:4e:24:ea:1e:be:50:
0e:63:10:65:96:72:32:35:3e:91:d4:3c:6a:aa:44:d3:ac:57:
c8:17:5a:b0:e7:90:91:c6:85:9d:c2:cf:3c:53:84:a2:42:0e:
0e:e9:ab:d0:19:02:17:e8:12:3a:51:27:2a:33:23:52:ea:1d:
0b:17:be:49:60:e3:01:a0:b9:0c:67:a4:a6:32:23:c7:fa:57:
ef:e8:72:d2:6a:ea:d6:8e:10:f3:bf:bb:99:0b:22:e2:f3:a1:
57:55:2a:ae:48:9f:8d:d0:9e:96:eb:88:ab:7f:13:ac:63:d4:
b0:93:bf:d3:64:95:de:c2:74:07:6c:3f:3a:e5:28:5f:d6:94:
80:1f:fe:f1:02:9a:60:8c:98:d7:41:05:94:cb:1f:a0:9b:59:
6f:ac:b0:2a:06:c9:bb:1c:bf:16:28:02:f1:75:d4:fb:bc:40:
7a:c8:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:16 2025 by rpki-client