Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB15AB2F3D911EF962FD370762E951A.roa
File: 9BB15AB2F3D911EF962FD370762E951A.roa (raw, json)
Hash identifier: q7KpOOSGioNfZXIdA+ro09SXiloZMSrCHZKXtT2UVvk=
Subject key identifier: 2C:EB:03:92:67:2F:A0:7F:0E:F6:49:CB:D8:85:29:EE:20:40:76:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016041
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB15AB2F3D911EF962FD370762E951A.roa
Signing time: Wed 26 Feb 2025 00:35:42 +0000
ROA not before: Wed 26 Feb 2025 00:00:38 +0000
ROA not after: Thu 19 Feb 2026 00:00:38 +0000
asID: 984
IP address blocks: 154.92.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90177 (0x16041)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:38 2025 GMT
Not After : Feb 19 00:00:38 2026 GMT
Subject: CN=67be61de-9caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:9c:4c:6a:99:b7:6e:14:48:15:94:9f:90:
5f:37:5b:7b:17:22:e6:2d:de:06:39:13:f6:e6:e6:
48:16:17:16:94:f2:1a:95:48:73:ad:20:d4:e9:84:
dc:7c:11:b8:fa:ea:a6:65:02:81:b4:83:b8:38:c9:
37:9b:18:11:cf:cb:e8:04:8e:83:d7:2d:32:36:7e:
28:f8:86:03:4d:fd:16:83:43:79:71:e0:c1:ab:a7:
9d:01:34:eb:91:74:e6:b9:79:f5:45:e4:11:52:3c:
32:92:12:9a:73:60:e3:db:09:55:00:ae:69:0b:72:
de:d7:76:ee:fe:85:6e:79:3b:83:21:12:5c:76:06:
ea:a8:e9:24:67:9d:6a:b1:32:1a:a6:91:89:70:9f:
f8:db:c6:5b:ce:46:91:50:26:99:91:aa:6d:ea:09:
31:07:61:aa:54:e7:df:e7:30:ba:56:33:bf:e9:94:
de:4e:f0:5d:c5:95:9b:ae:e9:9f:df:4f:7a:c5:9c:
69:51:9b:e8:00:e5:0e:e5:cf:6d:8d:cf:11:89:96:
e0:9c:e4:0b:73:29:fc:13:40:bf:cf:de:83:ea:de:
91:13:49:bb:75:84:35:78:34:a1:33:7b:8a:51:7d:
89:49:f9:30:1c:58:1d:ec:cc:78:d4:b3:14:9b:1d:
d2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EB:03:92:67:2F:A0:7F:0E:F6:49:CB:D8:85:29:EE:20:40:76:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BB15AB2F3D911EF962FD370762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1b:6e:61:80:84:0c:f6:8f:51:1f:e0:b1:e8:02:4b:57:39:
f4:40:09:70:d2:05:e3:a9:e6:8c:d5:95:d1:be:84:e6:c8:66:
1c:cb:96:c3:26:af:33:75:a9:9a:71:ae:38:dc:c7:13:84:6c:
4c:2a:ff:bc:f8:64:a6:35:d4:e5:a6:89:18:66:44:8e:61:1c:
83:07:78:0c:4f:20:55:10:32:af:be:ca:97:83:43:69:2f:f7:
0d:6e:7e:5b:04:3b:57:6b:8f:59:06:a7:da:49:c1:e8:2a:b2:
7b:9b:3a:10:ef:6d:bc:ea:18:0b:70:5c:33:4a:f2:a9:34:60:
cd:2c:53:08:27:fb:37:d7:70:12:9d:ca:8b:3c:ce:85:3b:86:
05:70:1f:d6:3d:86:3c:9b:67:7d:03:d1:eb:2f:41:51:d9:e1:
40:79:07:f3:75:88:02:c2:1a:7a:85:c5:16:5f:52:35:97:c7:
21:5d:e5:a8:13:c9:14:b5:5b:33:23:34:98:1a:ef:a3:f5:1d:
4a:21:19:2e:9d:a5:c1:07:b3:cf:3b:bc:0c:cd:e9:7b:b6:f9:
8f:7d:11:18:8a:f5:94:ca:76:82:8e:0d:06:28:fe:34:dc:de:
16:57:6d:9a:20:e9:dd:db:d2:d5:8b:a0:b1:a8:e8:f7:3d:86:
45:ed:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:50 2025 by rpki-client