Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A381756CF43111EF9DB8675F762E951A.roa
File: A381756CF43111EF9DB8675F762E951A.roa (raw, json)
Hash identifier: 6L2Vt2oob4M+BhxcfRNnisjXxP1CJUWS0LegUFrHlns=
Subject key identifier: 33:85:69:9C:8A:EC:10:A7:89:F4:86:7C:BC:1F:A6:7C:21:F5:38:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016273
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A381756CF43111EF9DB8675F762E951A.roa
Signing time: Wed 26 Feb 2025 11:05:51 +0000
ROA not before: Wed 26 Feb 2025 11:05:47 +0000
ROA not after: Thu 19 Feb 2026 11:05:47 +0000
asID: 984
IP address blocks: 154.208.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90739 (0x16273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:05:47 2025 GMT
Not After : Feb 19 11:05:47 2026 GMT
Subject: CN=67bef58e-a4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:10:09:2f:5b:bf:da:96:af:e0:df:b1:de:
08:15:61:29:8a:9f:63:94:2d:ed:39:f0:7c:fc:99:
86:c0:a0:8a:c0:4e:d2:21:ab:f0:ea:d2:df:03:96:
a6:59:0d:9e:73:7d:e9:a1:91:b6:b9:8d:c1:97:c9:
f9:d1:6c:bc:98:a0:ab:0c:b0:5f:16:5b:53:12:9e:
94:61:c8:80:3d:56:95:1f:8f:14:69:1a:06:9e:d2:
f6:16:29:1e:54:d3:34:98:89:5f:b2:41:dd:07:f5:
d8:db:e8:dd:28:9c:60:27:f3:b3:e3:00:ae:53:d8:
03:85:54:08:69:68:26:e6:ee:94:b4:87:86:7e:8d:
1c:fe:75:41:e2:f1:f2:48:ff:cd:28:20:cf:16:c8:
95:03:ec:dd:91:96:b5:76:96:71:e1:8e:c4:5d:4e:
32:51:52:10:92:3f:36:a9:00:6c:38:30:0b:2b:07:
9d:e9:57:bc:ea:04:37:0d:33:87:5b:72:cd:7e:12:
75:90:c2:d5:38:5f:c0:a4:5a:47:45:92:1e:58:e6:
a7:4f:c0:b9:10:02:63:26:31:9f:a9:36:c3:33:8a:
56:31:e1:bc:fa:39:c9:f3:74:43:5e:55:e5:0d:96:
4a:58:45:5e:10:a8:1e:70:ec:5d:1f:c2:28:ba:27:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:85:69:9C:8A:EC:10:A7:89:F4:86:7C:BC:1F:A6:7C:21:F5:38:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A381756CF43111EF9DB8675F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.89.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a2:ce:07:52:4b:d6:4f:d7:de:a7:4d:05:99:b2:ba:9b:f5:
40:b9:55:a4:15:4d:09:36:e4:a4:14:91:f8:0c:5f:71:e3:1c:
d2:15:f9:49:1a:60:81:c9:39:d5:f2:5a:de:6a:c7:03:b7:22:
be:f4:f0:aa:73:cc:3d:45:58:47:16:d8:bb:78:9f:fc:06:ca:
7d:65:18:e6:03:3c:e1:de:2e:9b:49:1b:4d:7c:1d:2b:c7:a7:
05:53:39:3d:7a:28:6e:7a:b5:18:8c:c0:90:0c:19:ff:b1:5e:
f5:4e:ad:c4:15:45:5a:a5:3c:6b:84:e6:1c:28:cf:0a:e0:7e:
70:fd:6e:a1:79:8b:73:c1:c8:3b:b6:47:34:7e:cd:b3:fd:1b:
8c:f1:00:f0:0b:2c:a7:77:ae:2e:98:f5:84:90:84:a5:46:4c:
9f:73:0f:60:10:e9:f7:99:ae:72:c5:b1:18:55:8c:ce:3a:57:
7c:af:4d:91:16:21:ee:a6:d8:60:1f:6d:f8:f3:c2:e5:d7:c1:
59:e9:9c:c3:cb:ab:47:22:6e:a8:df:87:eb:be:67:ef:3d:d9:
2b:b2:2e:88:11:b8:d2:e4:32:39:41:6c:4a:e1:0c:f8:c1:82:
cf:5c:d9:eb:a0:21:44:59:e1:0a:49:98:1d:66:7c:33:57:af:
35:bc:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:50:03 2025 by rpki-client