Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A985608F43D11EF8887A7B3762E951A.roa
File: 9A985608F43D11EF8887A7B3762E951A.roa (raw, json)
Hash identifier: Oc9IMx3KR4By55DK9oR1NNFXdztlvBgGKPj/6tJEah0=
Subject key identifier: B1:06:61:E7:CA:BC:3F:87:55:91:FA:8E:E3:24:12:92:5E:76:8E:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016326
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A985608F43D11EF8887A7B3762E951A.roa
Signing time: Wed 26 Feb 2025 12:31:30 +0000
ROA not before: Wed 26 Feb 2025 12:31:26 +0000
ROA not after: Fri 20 Feb 2026 12:31:26 +0000
asID: 984
IP address blocks: 154.199.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90918 (0x16326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:31:26 2025 GMT
Not After : Feb 20 12:31:26 2026 GMT
Subject: CN=67bf09a1-5ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:c6:a0:2e:77:80:4c:f2:7b:7c:50:28:3e:
ee:51:5b:bf:be:37:64:34:65:47:0d:c9:0a:24:e0:
90:0a:32:ee:88:f2:a2:8b:fe:29:09:21:f1:ee:be:
76:c7:16:ef:e4:76:4d:ec:95:c5:73:a1:6b:e0:d2:
b4:aa:51:59:cc:31:3d:60:45:a1:17:50:f2:25:34:
68:22:03:5e:2d:81:7a:69:2f:ea:43:4d:03:5d:09:
88:13:4d:b3:fc:5d:f4:b3:8d:42:73:f6:33:b7:a5:
8e:f3:a2:0f:e7:f1:0e:ad:b1:4d:53:65:66:7c:51:
d0:08:ba:24:4c:5c:f9:90:4b:09:87:19:46:3c:c6:
5a:ab:96:88:be:a9:3e:0b:14:14:e9:ce:86:99:c9:
f5:21:a8:72:74:1f:ef:6e:f1:a1:6e:1b:b7:44:63:
c3:a2:f7:37:c4:07:69:99:35:de:08:7e:50:67:e0:
23:44:f1:37:ea:ce:82:1f:58:9e:d9:6c:c1:cd:c8:
54:ea:1e:0f:1e:3a:6e:7d:84:10:5b:65:a6:af:06:
37:93:17:28:ee:6e:ad:fa:46:9e:a1:30:13:d9:87:
17:a1:b7:08:84:09:0d:f0:bc:bc:09:c3:91:78:e0:
2b:86:d7:41:34:6f:ee:12:b7:1c:74:03:06:52:c0:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:61:E7:CA:BC:3F:87:55:91:FA:8E:E3:24:12:92:5E:76:8E:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A985608F43D11EF8887A7B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.192.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:52:aa:12:2a:e5:80:ce:b6:2c:aa:f8:45:32:69:f4:5b:50:
7c:f2:cd:9f:6f:d9:a1:5c:bb:72:d4:15:ef:a3:0d:64:c4:f1:
db:bb:65:17:92:7b:43:ff:87:8b:d6:1f:c2:ba:ea:94:63:3f:
19:2d:ba:3a:4b:c7:0a:c5:dd:09:6c:78:8a:a0:0a:ec:72:c9:
1f:3e:69:21:cf:22:cc:7a:b2:93:0d:d8:a9:53:c8:bc:06:5c:
09:82:c2:de:f0:15:0c:68:ec:7b:fe:b5:79:c3:02:f6:ce:16:
d9:6e:80:1c:33:18:8d:b5:dc:de:3d:66:3c:d9:7c:77:44:89:
43:c0:ed:8e:90:f4:bc:90:ed:53:1a:b8:a4:81:ce:82:41:24:
5c:e8:36:ad:8a:70:ac:de:5d:ee:00:3c:df:d2:75:88:ce:69:
b5:bb:c7:cd:c9:be:2d:6f:db:20:a8:bc:65:d0:56:93:ff:e8:
7e:b6:54:20:88:52:26:4a:14:21:32:0c:a2:69:59:0c:06:b9:
25:3c:73:57:90:e7:b4:c8:71:c5:e0:d1:c3:98:c0:08:b1:58:
ee:e2:de:3b:8b:14:2d:11:45:86:d2:22:bb:cd:a7:69:a2:b2:
f7:55:e6:75:8a:2a:3b:6f:07:25:45:cc:40:12:90:07:e2:ba:
a4:13:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:54 2025 by rpki-client