Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90394584F42711EF85BACD99762E951A.roa
File: 90394584F42711EF85BACD99762E951A.roa (raw, json)
Hash identifier: B5f7piZT1rCAnY3rI/8u5fZ1Yhn0NKWMi0tEcIt0/NI=
Subject key identifier: 04:33:E1:03:8D:20:B1:19:EF:98:87:C5:48:4A:5F:1B:A8:82:58:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01620C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90394584F42711EF85BACD99762E951A.roa
Signing time: Wed 26 Feb 2025 09:53:43 +0000
ROA not before: Wed 26 Feb 2025 09:53:39 +0000
ROA not after: Thu 19 Feb 2026 09:53:39 +0000
asID: 328608
IP address blocks: 154.200.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90636 (0x1620c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:53:39 2025 GMT
Not After : Feb 19 09:53:39 2026 GMT
Subject: CN=67bee4a7-c43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:a8:79:b7:92:1d:85:35:95:d7:a2:f3:21:
dd:96:6e:44:42:8f:58:c7:c3:14:5f:e0:00:ec:ca:
e4:a1:50:d8:ca:4f:ce:d7:fd:d1:dd:de:ae:91:a3:
a9:eb:81:51:4a:9f:f3:76:ed:61:8b:e9:f4:76:14:
81:8b:fc:34:8d:86:77:f9:93:98:8c:7d:20:f0:7a:
fa:94:92:59:c8:aa:cb:47:8b:76:ce:9d:00:f2:e7:
06:9d:da:32:34:18:19:08:1b:c3:5a:29:ef:ed:c6:
91:5e:52:89:1d:50:66:dd:4c:9e:92:ba:a7:b3:a2:
9e:09:9d:f8:d6:9b:a3:a1:db:f9:fe:c5:bf:79:45:
ba:e0:ea:06:55:56:04:11:75:ed:40:db:a9:06:a2:
fc:e5:eb:85:60:39:e1:7a:3b:fe:4a:af:1e:41:5b:
51:8d:44:66:b0:1e:a1:50:28:f4:5e:2e:39:59:2d:
72:6c:30:30:47:ae:4b:da:9d:79:0e:ce:4f:1d:9b:
70:2a:d4:f6:44:c6:16:85:41:5f:8a:42:8a:c3:0f:
c5:01:a9:68:35:49:ad:f1:30:6e:1a:9b:75:ff:02:
a8:00:1f:60:80:dc:4f:0d:eb:26:da:f6:29:f4:dc:
d1:23:b6:b8:6f:c2:7b:a3:e2:76:74:53:65:5c:54:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:33:E1:03:8D:20:B1:19:EF:98:87:C5:48:4A:5F:1B:A8:82:58:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90394584F42711EF85BACD99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:23:da:ad:e7:9e:f8:d0:92:53:84:8e:a8:2f:b1:b4:90:09:
36:5a:8a:e5:f6:f4:ff:ee:fd:1e:8e:a6:65:c2:ed:58:52:f2:
2e:a2:94:c2:cf:e1:d6:5e:76:eb:95:cb:4f:1c:39:cb:2d:29:
63:0f:3e:6a:40:12:11:0b:81:00:63:d5:eb:f7:48:15:62:33:
92:9e:60:1e:d1:8f:64:dc:ca:8d:df:10:b7:07:4b:7f:e6:f5:
e2:00:c1:f9:e1:d2:03:8d:7d:9f:5a:3f:48:dd:39:52:18:51:
13:66:e6:bb:db:3b:77:96:82:0f:c0:53:60:a2:e0:7b:8b:fd:
c0:9d:81:e0:eb:42:c5:e0:b0:4e:bd:0c:c2:da:6a:5d:ed:d7:
04:ce:66:6c:d1:2a:fb:ed:36:c7:c1:9c:1d:18:64:65:78:df:
16:d0:73:fb:fb:90:34:c6:56:a9:fb:d6:95:3e:77:cd:a1:b5:
23:a0:a4:65:15:66:f3:29:9f:b8:16:b5:c2:69:36:0e:68:0f:
2e:da:33:65:46:e1:db:20:40:2c:d4:ac:f7:05:26:f1:42:3c:
35:70:dd:04:2b:4a:2b:4a:c6:1b:0d:60:15:fe:64:e0:dd:b7:
9c:c3:9a:ff:7b:1a:f8:30:c2:9f:53:08:a5:62:a4:6c:03:73:
87:11:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:13 2025 by rpki-client