Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7671C8F43D11EF89F4DAB1762E951A.roa
File: 8B7671C8F43D11EF89F4DAB1762E951A.roa (raw, json)
Hash identifier: ZtESwJ0+MkM1CPoJmhiCbrvurLddVDla5d1u1q+aD6Y=
Subject key identifier: 4D:77:DC:51:3C:03:76:A5:16:A3:CF:C4:11:D5:81:FF:C0:63:C1:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016324
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7671C8F43D11EF89F4DAB1762E951A.roa
Signing time: Wed 26 Feb 2025 12:31:04 +0000
ROA not before: Wed 26 Feb 2025 12:31:00 +0000
ROA not after: Thu 19 Feb 2026 12:31:00 +0000
asID: 984
IP address blocks: 154.208.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90916 (0x16324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:31:00 2025 GMT
Not After : Feb 19 12:31:00 2026 GMT
Subject: CN=67bf0988-2ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:64:a6:c6:21:16:01:ae:21:af:b8:5f:43:
e4:4d:23:a6:aa:29:01:5f:f7:57:76:99:4c:c8:6f:
dd:91:24:ae:c0:15:35:d3:26:87:ca:f4:ee:71:83:
08:f6:41:64:ca:9a:85:c9:97:5b:13:ac:10:99:54:
ca:a5:c3:43:11:f2:be:0a:60:c8:14:8e:ac:ef:6e:
fa:65:0b:f7:f2:ca:cc:ac:09:92:41:5a:9d:4b:6e:
d6:08:e5:0b:1f:cb:d8:35:6d:5b:55:9a:0a:60:15:
a6:f1:f1:fe:23:4b:a3:8e:36:c7:3f:f6:aa:af:4a:
8f:0b:56:1c:b2:e1:94:2b:f5:95:4b:9c:06:82:f4:
3c:04:ca:4a:65:3d:a7:f9:ac:f4:4b:42:97:12:7b:
6b:dc:58:de:b4:26:0a:3b:00:09:47:93:89:9a:79:
b5:1b:0b:9b:c4:92:b5:67:e9:92:30:71:ba:61:67:
56:82:54:9f:e8:c4:45:c8:b9:24:6f:0c:d9:2c:bd:
7d:2a:f3:65:91:96:da:25:96:05:d5:d0:cb:cf:00:
a8:c8:f1:3d:26:7e:10:4a:7f:d5:61:ef:49:4a:a7:
b8:99:86:29:0e:28:56:9c:e1:fb:f9:d8:42:14:21:
b1:7f:fb:fe:82:2a:82:e6:f1:69:3b:66:64:5e:72:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:DC:51:3C:03:76:A5:16:A3:CF:C4:11:D5:81:FF:C0:63:C1:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7671C8F43D11EF89F4DAB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:21:da:7a:86:4a:0f:9f:0f:8f:f2:07:8f:35:ee:cd:e8:5e:
8d:35:dd:fc:6b:9c:b8:ee:03:84:9f:7b:f3:e6:15:d9:41:99:
24:c6:92:3d:93:7c:e7:da:33:36:1c:28:ca:13:cd:ee:ef:ba:
18:43:a6:01:6d:a0:ef:6f:d9:65:74:50:d1:e4:fd:83:01:ce:
fb:b1:38:8b:5f:94:d4:64:3c:2d:71:9c:fe:6e:c8:86:33:6d:
6a:2a:36:8f:67:a3:f8:c9:b6:c6:4d:cf:83:62:49:5e:68:2a:
59:f8:e0:de:24:2d:4d:39:1c:68:df:92:53:1c:16:03:af:18:
4b:74:30:c4:0b:cf:50:e4:9b:35:c0:a4:89:47:63:6f:16:c2:
e9:6b:5b:d7:76:bc:f3:8b:d5:c9:e3:d9:00:8c:38:fe:32:1e:
01:3c:37:06:c2:c7:b0:38:f8:ff:e4:ff:4d:a4:0f:2f:b5:31:
58:ac:4a:0a:18:70:81:e5:c6:9e:a1:6c:45:2d:c6:e1:e9:de:
72:e9:0e:e9:d2:dc:d5:eb:39:2b:11:c4:bd:1d:f7:9e:0b:d7:
c6:87:1a:15:24:ce:ef:b9:4f:97:14:b7:ce:dd:27:b3:4d:01:
05:36:3e:f6:00:2f:d6:f7:f9:12:2d:7c:cc:d7:13:81:d1:1d:
d4:d4:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:08 2025 by rpki-client