Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EC4812F43A11EF8ED7769E762E951A.roa
File: A2EC4812F43A11EF8ED7769E762E951A.roa (raw, json)
Hash identifier: i8Y8aHHpxmIyNFFeIOPJvAt+F5yTVfWv2HZVwkExOTY=
Subject key identifier: 9A:5A:26:D8:5F:B4:C3:86:AC:6D:C6:AF:41:3C:D4:48:91:84:B4:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EC4812F43A11EF8ED7769E762E951A.roa
Signing time: Wed 26 Feb 2025 12:10:15 +0000
ROA not before: Wed 26 Feb 2025 12:10:11 +0000
ROA not after: Thu 19 Feb 2026 12:10:11 +0000
asID: 984
IP address blocks: 154.208.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90871 (0x162f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:10:11 2025 GMT
Not After : Feb 19 12:10:11 2026 GMT
Subject: CN=67bf04a7-3b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c0:30:b7:45:a0:d0:a3:c4:0d:be:74:29:7a:
15:03:70:c9:77:e9:21:cd:92:e4:e7:96:b3:99:5a:
24:46:12:84:aa:f6:5a:7e:93:c2:f9:77:7b:94:7e:
a6:ed:ba:1d:e8:fa:cd:f9:f4:5c:60:7c:52:6a:a1:
82:ed:85:81:65:ff:e5:ba:c3:54:f2:c4:95:2b:8b:
3f:6b:be:15:9d:20:56:5a:74:3c:c9:19:0e:7b:ff:
27:10:ed:02:0a:5c:28:24:ca:b8:fd:97:24:8f:f0:
5e:b7:45:f0:de:db:a5:2c:2a:40:f8:f2:28:1d:00:
32:e9:ba:c2:69:dd:a9:a4:e7:3b:89:1a:d7:7b:50:
38:a9:1f:32:f5:fd:20:78:42:4d:b0:c6:77:d3:eb:
f6:c4:d0:20:c2:59:f7:a7:b3:e8:a5:7a:93:f6:82:
25:31:63:8f:d5:8c:8a:32:9e:91:1a:74:1c:a7:a4:
34:34:a4:39:2a:fc:c5:0c:90:cd:e7:ab:53:fb:8b:
32:48:08:b3:a5:ee:0b:2b:8b:a1:54:ae:5d:af:74:
ed:fd:58:6d:cd:fe:ac:3b:fc:72:52:f7:80:b3:5b:
de:ef:d6:28:64:d2:3c:d4:66:f0:9a:03:14:8f:81:
78:87:02:78:d1:59:4a:42:9b:bd:16:cf:2c:29:ce:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:26:D8:5F:B4:C3:86:AC:6D:C6:AF:41:3C:D4:48:91:84:B4:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2EC4812F43A11EF8ED7769E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e8:43:4b:77:be:4f:99:d2:7c:04:be:8d:f6:d4:ae:28:e3:
6d:ba:10:72:45:22:f2:fd:43:49:87:12:97:0f:61:63:86:cc:
11:75:71:c2:b0:c6:4c:65:68:86:40:06:2e:56:32:e0:3f:cd:
7a:24:53:f5:96:00:d6:d3:32:09:57:45:db:2b:b3:22:d2:6d:
0b:19:b2:bf:8b:e0:24:66:4a:d4:bc:5f:96:a9:dd:97:a0:98:
af:3f:86:ff:c7:b0:9b:c8:45:0a:5d:b1:dc:32:2b:d9:88:29:
de:b4:cd:e8:88:3c:01:6e:87:d6:6a:0b:3d:4e:02:c3:17:5f:
2d:ce:86:de:8f:59:d0:ad:83:d8:c6:39:76:16:ee:4e:69:f5:
39:db:a9:5d:83:d7:a0:ea:3a:19:76:2e:91:cf:23:fc:f8:fb:
24:32:13:7e:2d:9e:7b:a2:33:88:bc:71:e2:a5:18:55:15:98:
18:5f:f8:14:ca:b7:10:a0:19:bf:89:0c:64:1d:61:32:bb:a6:
55:a5:fb:ac:0d:d9:85:3e:ff:f4:38:db:a0:82:1b:cf:2c:54:
fa:52:d4:b8:af:5d:68:65:fc:0d:37:12:88:a3:68:9d:35:6a:
19:ac:36:b9:69:d9:2e:c8:e9:25:16:89:46:5c:a8:3c:cd:a6:
11:79:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:14 2025 by rpki-client