Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6485D16C8A211EF99FA0A5F762E951A.roa
File: A6485D16C8A211EF99FA0A5F762E951A.roa (raw, json)
Hash identifier: pdXsGgPayZYTvbcO4Wys2V8t5ZFyzUBIiKdFUVyMlpo=
Subject key identifier: 16:68:37:90:81:21:CB:3E:B4:3C:65:AA:E6:26:BB:AD:D4:4D:AC:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01312C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6485D16C8A211EF99FA0A5F762E951A.roa
Signing time: Thu 02 Jan 2025 00:43:57 +0000
ROA not before: Thu 02 Jan 2025 00:00:53 +0000
ROA not after: Fri 12 Dec 2025 00:00:53 +0000
asID: 984
IP address blocks: 154.218.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78124 (0x1312c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 00:00:53 2025 GMT
Not After : Dec 12 00:00:53 2025 GMT
Subject: CN=6775e14d-733e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:80:95:db:7c:e6:95:29:9c:d0:13:ef:31:
97:ae:f1:11:08:5b:05:f5:24:41:43:5e:37:5f:39:
e7:e9:db:64:eb:64:79:48:2d:07:f2:0d:36:35:c1:
dc:5a:eb:dc:c0:4e:d4:2a:96:c2:97:bb:ff:d3:06:
66:8f:43:f7:8a:9a:2b:b0:8b:48:82:33:d3:8b:05:
2e:db:32:ed:a7:2c:9f:91:0f:0a:68:e5:5c:97:4e:
32:f5:99:06:e1:67:55:a1:3a:33:bc:de:d3:4f:3f:
0b:a8:f2:2d:99:d0:91:d1:55:ba:83:c4:49:81:9b:
28:7e:52:9b:ce:04:47:07:fd:01:96:d9:d0:a4:9f:
13:85:78:06:59:11:f9:60:cc:dd:ef:a6:0c:13:96:
fd:ee:b3:18:4d:d3:b8:23:bf:a8:0a:67:86:08:0a:
97:79:5d:28:4d:a9:ed:35:6b:c2:b4:8a:fc:6c:c7:
8a:63:61:80:3a:e9:3b:c6:55:9f:5b:7b:14:31:d1:
fd:a2:f9:83:a3:b2:6f:8b:60:d9:3c:89:ca:27:75:
f6:83:fb:32:d6:31:08:60:c5:4c:28:6d:aa:fb:5b:
02:58:4f:5e:22:1d:a0:a3:68:93:78:a7:ca:e1:93:
4c:b6:57:00:cd:41:fb:ef:ad:d4:46:90:63:07:00:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:68:37:90:81:21:CB:3E:B4:3C:65:AA:E6:26:BB:AD:D4:4D:AC:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6485D16C8A211EF99FA0A5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.50.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b9:d4:78:be:ec:18:89:89:01:38:3a:cf:e8:23:92:8e:28:
51:6e:e3:96:f0:10:67:4b:24:59:2b:0c:ff:d3:2b:1e:e5:37:
67:9b:e8:32:03:89:a7:f4:f2:0e:8a:27:da:0c:47:e2:d0:69:
24:dd:a3:46:49:22:f4:1e:00:88:33:af:30:25:6b:d2:02:5c:
2e:d7:18:b3:02:35:3e:cb:3c:91:b3:f0:a7:bd:e2:ec:4c:b5:
07:02:43:b1:11:a3:79:29:11:74:c9:3c:13:17:06:be:0e:78:
f0:45:9c:a0:b5:d5:c3:a8:45:e6:c9:54:c4:2c:82:51:48:ea:
71:c2:3d:05:9c:f4:02:8d:b6:b2:c1:e0:46:5b:eb:80:cf:f7:
e8:ef:d2:fb:15:92:4b:f4:55:78:bb:02:b8:8c:a3:7f:2a:02:
43:e3:eb:00:e4:19:55:32:8a:1b:e2:f2:b5:7d:b2:9e:0b:25:
f2:87:c1:d3:59:46:98:5b:bf:25:4b:bf:9c:06:87:b2:e9:bb:
af:3e:b1:76:4a:6a:39:cd:0b:b1:0f:d4:55:b4:b2:7c:b4:67:
5c:5e:c5:a5:5f:63:54:fe:dc:22:2b:91:1c:67:9a:47:b6:dd:
7a:ad:1c:51:11:16:91:6f:6c:cb:e1:2a:f1:45:d4:9c:5d:76:
cd:01:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:13 2025 by rpki-client