Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90DC0954F45E11EF9B07D89C762E951A.roa
File: 90DC0954F45E11EF9B07D89C762E951A.roa (raw, json)
Hash identifier: O2FRjrwmbSlKW4d4R5TTMGdcmiK/NUjrbegxPEBwm40=
Subject key identifier: 68:70:79:B5:1C:E0:03:9F:A2:33:F7:37:82:2B:66:88:8D:E6:AA:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016526
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90DC0954F45E11EF9B07D89C762E951A.roa
Signing time: Wed 26 Feb 2025 16:27:27 +0000
ROA not before: Wed 26 Feb 2025 16:27:16 +0000
ROA not after: Thu 19 Feb 2026 16:27:16 +0000
asID: 984
IP address blocks: 154.210.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91430 (0x16526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:27:16 2025 GMT
Not After : Feb 19 16:27:16 2026 GMT
Subject: CN=67bf40ef-ef8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:e3:22:40:54:7c:a8:c2:bd:93:88:b1:11:
82:2a:d8:c7:fa:63:d4:d0:0b:f9:1e:53:a8:0a:16:
2b:40:e2:bc:a5:82:1b:12:0a:73:22:66:a1:5f:a8:
c3:8b:3a:06:31:53:1d:19:39:57:ee:49:9f:dd:c5:
5d:f1:8f:89:70:70:1d:25:44:4b:32:26:b2:b3:6a:
50:bf:b7:88:fe:9c:0b:dd:d8:6c:68:c3:9d:6a:2b:
16:2a:c5:46:4e:3b:07:56:78:78:c9:aa:a3:d5:81:
9d:a5:b3:0b:fa:f1:1a:ba:4f:3d:bd:44:8e:18:d1:
34:d6:db:d4:59:34:d2:b3:ef:c2:49:ea:1a:d8:80:
18:c9:87:20:02:70:61:a0:cb:92:f3:bc:83:46:a7:
70:5b:2e:ba:76:8a:bb:e4:43:b9:65:66:8c:a0:54:
f3:8e:05:28:01:04:8b:f4:fd:1d:e3:0f:9e:6d:5a:
58:68:76:1e:b7:6c:6f:6b:de:1b:4e:6b:64:4f:fb:
eb:6a:80:78:1c:9b:cb:6b:eb:ae:fe:40:50:ab:7d:
9d:50:9f:4b:28:8f:57:e1:db:58:5c:5e:73:15:0b:
a0:4e:f9:9d:52:cc:ac:19:68:ec:98:e9:83:63:11:
96:29:5d:d2:7d:57:e7:6c:81:51:06:b7:b9:00:98:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:70:79:B5:1C:E0:03:9F:A2:33:F7:37:82:2B:66:88:8D:E6:AA:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90DC0954F45E11EF9B07D89C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.117.0/24
Signature Algorithm: sha256WithRSAEncryption
03:29:6e:ed:3c:31:70:8e:e8:c5:a0:31:10:c2:99:8c:6b:88:
45:63:92:ff:46:6e:8c:e0:7c:c5:1d:63:da:2d:fb:a5:df:d6:
a7:be:cb:8d:51:be:df:6e:dc:43:eb:10:6f:f6:0a:af:bf:2e:
88:06:c3:a0:dd:e0:98:4f:03:5f:b2:14:ef:34:22:d4:33:cb:
13:f6:c3:09:40:91:9d:de:cf:4f:dc:da:1c:57:ac:ae:0b:68:
66:bc:f5:3f:74:64:34:1a:03:99:fc:86:f4:95:c3:ca:e0:ec:
68:77:9c:7d:4e:5c:70:00:a8:4c:12:76:ff:8f:88:71:09:c1:
ea:b3:50:66:bb:e2:77:58:7b:f5:8f:e8:de:f6:2d:5f:df:fb:
c9:ff:79:b3:70:b8:bd:bc:86:17:70:80:34:9e:b8:3f:02:90:
c3:79:6d:88:8e:17:17:07:08:ce:ce:d1:61:cb:a1:fe:f4:32:
e3:1b:35:5d:78:ac:c0:6c:d9:5b:28:18:8e:8a:f6:87:65:6f:
3c:7f:f6:ce:03:4c:92:4a:9f:94:99:49:02:19:08:99:10:16:
78:a1:03:6f:bb:5c:de:ce:26:d9:9d:b2:7f:86:6b:40:c2:b8:
3a:ed:01:6d:ef:0f:a0:e7:34:85:2c:63:66:d6:e9:76:c7:ad:
a0:07:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:58 2025 by rpki-client