Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FCDB6BAE23E11EFA4747851762E951A.roa
File: 9FCDB6BAE23E11EFA4747851762E951A.roa (raw, json)
Hash identifier: xymVEn6XhdMWNYvT6DTm2OfFtDibr6/W3uy5TaNGNX8=
Subject key identifier: 48:71:27:D4:E6:62:80:08:26:41:0E:E0:29:B9:23:DD:30:60:11:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015021
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FCDB6BAE23E11EFA4747851762E951A.roa
Signing time: Mon 03 Feb 2025 14:53:27 +0000
ROA not before: Mon 03 Feb 2025 14:53:23 +0000
ROA not after: Wed 30 Apr 2025 14:53:23 +0000
asID: 150008
IP address blocks: 154.209.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86049 (0x15021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:53:23 2025 GMT
Not After : Apr 30 14:53:23 2025 GMT
Subject: CN=67a0d867-7eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:d7:68:a9:33:a2:8f:a8:40:4a:d0:7f:ee:
51:b1:cd:a1:41:b5:15:77:08:b3:c2:8e:52:51:b8:
21:85:05:0f:f6:cb:07:f6:58:00:16:dc:af:60:ee:
0f:15:9a:52:dc:49:98:0a:d9:ea:af:16:02:50:5e:
c5:3a:b7:0a:d0:d4:35:ba:c2:7e:d2:d4:f7:5e:79:
3c:8c:18:97:84:67:07:8e:97:80:2c:42:ce:63:cc:
49:40:55:d1:08:58:74:91:e7:0c:c0:4e:7c:28:45:
82:04:f7:57:bb:c6:a7:7e:47:b8:4a:5f:82:c1:2c:
9a:96:87:c5:a8:9a:4c:3e:ae:99:2b:b1:fb:c2:d8:
02:3f:fb:7a:a0:9f:4c:0a:4a:30:a7:bd:2e:51:ea:
d4:3d:3a:29:21:d4:4a:f7:9f:57:29:7d:94:3a:d0:
e7:b7:e2:5d:24:63:3a:6c:c5:04:0d:ca:91:76:d3:
2d:21:77:b7:f7:e3:36:08:9b:62:ac:ea:b5:f5:db:
8c:c9:54:22:0d:d3:7e:7d:ac:f7:89:b1:f2:2d:40:
ac:45:90:96:ea:5d:b3:6d:28:ec:05:ff:cd:58:8b:
a5:a5:7e:0d:12:8a:16:82:08:07:97:f9:a6:8c:11:
9b:26:c7:a7:8d:28:24:c5:72:2d:f5:03:f7:53:b3:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:71:27:D4:E6:62:80:08:26:41:0E:E0:29:B9:23:DD:30:60:11:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FCDB6BAE23E11EFA4747851762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
53:57:aa:b8:61:c7:09:d4:32:ca:ec:49:4b:64:bb:1d:ec:69:
d1:17:12:9e:af:59:02:05:c7:09:cd:02:b8:0b:26:ce:2d:3e:
fe:6c:9f:9b:e5:6c:2e:ae:a2:0f:e3:df:e7:cc:9d:c1:1d:46:
e1:79:20:4d:ae:82:c8:f8:08:19:11:e1:6c:4d:42:d4:86:0d:
a8:66:2f:24:8e:d8:a1:7f:93:b8:4f:49:cc:3c:84:a1:9f:9e:
93:d1:a7:b0:87:b2:1c:70:fb:15:63:bf:1a:f1:7f:95:96:59:
2d:de:39:1d:02:08:d0:a4:ad:27:ab:0d:5d:39:e2:bf:23:a5:
37:47:c3:a2:46:a4:c6:cf:72:55:1d:40:af:78:50:11:b3:3f:
27:49:fa:85:c1:0d:b9:6e:82:d2:b7:62:85:92:d8:cb:5b:9a:
e1:0b:46:ff:7d:7c:3c:05:55:bf:64:67:21:19:b7:08:f0:0a:
fb:ad:ae:75:93:25:ba:21:9e:de:95:69:bc:64:31:13:69:82:
44:3b:a4:d8:6b:b1:78:84:5e:8b:7d:c0:38:ba:a2:42:16:43:
12:9b:3d:8a:5f:07:d2:d4:9d:e9:95:ca:c3:43:36:0a:67:8e:
b7:8c:a6:5a:fa:b1:97:74:4a:34:bc:ba:a1:6a:63:58:5a:c2:
12:f9:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:45 2025 by rpki-client