Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A65577DAF3E011EF843A25A4762E951A.roa
File: A65577DAF3E011EF843A25A4762E951A.roa (raw, json)
Hash identifier: fYb7eRCHNvxb4j51G9se3I7mLm/o3Iqh4Ta0ShTHcr0=
Subject key identifier: A9:07:56:67:94:36:C6:AF:2C:82:92:32:46:05:8A:AD:87:C7:21:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01605A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A65577DAF3E011EF843A25A4762E951A.roa
Signing time: Wed 26 Feb 2025 01:26:06 +0000
ROA not before: Wed 26 Feb 2025 01:26:02 +0000
ROA not after: Thu 19 Feb 2026 01:26:02 +0000
asID: 984
IP address blocks: 154.92.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90202 (0x1605a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:26:02 2025 GMT
Not After : Feb 19 01:26:02 2026 GMT
Subject: CN=67be6dae-4ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:12:a2:9c:fe:5a:9d:bd:f5:d3:91:fd:b3:75:
d8:9b:68:15:e3:aa:80:75:8f:96:bc:ed:c0:9e:98:
67:5f:de:26:0d:8c:9a:a8:5b:87:8b:e2:66:48:e2:
91:5d:83:a8:49:6f:63:f8:0f:63:e6:00:8d:b1:ab:
ca:77:ba:5b:d1:7a:15:a1:9d:76:d7:a9:b5:a4:ec:
06:91:f3:f4:2f:d1:8f:a8:f2:08:07:05:9b:ce:46:
66:ef:03:ae:1a:10:2a:2a:cd:20:28:b0:ae:be:e7:
4d:4f:a0:1d:0c:8c:ce:22:e6:0f:52:71:4e:4e:07:
21:0c:63:2d:c0:56:ca:85:3b:16:3f:2b:49:78:22:
62:63:76:f7:06:bd:5f:91:40:93:f2:3d:a1:70:df:
f1:14:6e:1d:cb:4f:c6:28:8f:08:23:ad:25:99:70:
5c:32:22:a7:db:c9:1b:70:15:09:f5:b2:68:7c:0a:
bb:6e:f0:a0:37:a6:95:74:b7:20:cc:0a:ea:b5:26:
2b:cd:37:24:39:15:20:8b:66:7f:98:23:06:23:61:
93:3e:06:29:cb:e1:0a:04:f8:f9:6a:95:3f:33:e5:
8c:dd:a9:50:f5:da:3b:82:f5:b8:11:21:76:34:3f:
01:47:41:88:6d:29:e2:55:64:44:2c:c1:aa:bf:84:
98:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:56:67:94:36:C6:AF:2C:82:92:32:46:05:8A:AD:87:C7:21:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A65577DAF3E011EF843A25A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:94:97:e8:34:53:7d:4e:65:b0:ff:14:f2:eb:fb:98:66:a2:
a1:f1:c4:ab:2d:7d:24:f6:a9:d5:a6:4b:50:2b:17:17:4e:8d:
11:15:e7:bd:66:0a:3e:7d:63:64:4b:13:53:da:8d:d7:31:89:
e7:4e:6b:2e:ef:3f:4b:cc:d0:ab:fe:4a:46:a2:24:42:22:85:
6d:f1:aa:af:37:b0:06:d2:9d:b3:66:10:2a:ff:f8:4c:3a:0c:
de:ff:01:76:32:8a:43:dc:b9:de:b9:72:55:ab:bd:26:59:12:
77:87:c0:34:e3:68:1c:6f:2c:99:1a:b4:90:a6:55:cb:b4:ab:
12:41:62:20:0d:74:29:dd:47:80:94:d9:4b:4e:22:1b:84:6e:
c7:2b:f3:92:78:76:11:b3:54:93:98:39:71:d5:4a:a0:8c:c6:
c3:4d:e9:81:50:14:aa:06:6f:be:fb:2f:45:19:b9:02:82:6c:
a7:ec:f3:b8:c3:70:60:fc:e4:28:a3:30:89:5d:9f:40:7a:47:
37:3d:c6:86:32:21:57:88:31:8e:34:71:bb:fb:60:44:b3:30:
d1:cb:28:c8:19:b1:e2:4d:9f:01:b6:ca:ff:ba:be:89:f0:a9:
8c:d0:ec:89:7e:b4:93:79:b9:97:2f:39:ae:ad:9a:01:7c:8c:
5f:85:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:30 2025 by rpki-client