Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F5E304F45611EFB13D5864762E951A.roa
File: A9F5E304F45611EFB13D5864762E951A.roa (raw, json)
Hash identifier: Dy9jndTKq2JEoL4Pc9mODfs3Apj2PJOH2nFz8AfAqgM=
Subject key identifier: 98:2A:2F:DE:4F:E6:48:51:EF:64:D6:6B:8B:59:8A:06:60:BC:CB:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F5E304F45611EFB13D5864762E951A.roa
Signing time: Wed 26 Feb 2025 15:30:53 +0000
ROA not before: Wed 26 Feb 2025 15:30:49 +0000
ROA not after: Thu 19 Feb 2026 15:30:49 +0000
asID: 984
IP address blocks: 154.210.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91352 (0x164d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:30:49 2025 GMT
Not After : Feb 19 15:30:49 2026 GMT
Subject: CN=67bf33ad-b78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:c2:ee:de:86:a3:0d:38:80:af:15:30:0c:
f9:d5:20:5b:18:d7:66:f2:68:2e:3c:ab:38:ef:6c:
55:46:3d:0f:c3:48:3b:a9:c3:f6:2d:4e:6e:46:50:
14:f6:ed:8a:9a:ac:a6:60:51:aa:5f:96:f9:52:33:
fc:79:f0:86:39:b4:54:59:93:c5:d3:f6:b1:ba:a4:
43:fc:5d:37:4f:16:da:20:37:2a:c7:77:1f:e6:3b:
06:5c:2f:f8:f5:57:0d:df:6e:34:0a:2f:0f:93:eb:
b9:b3:54:06:51:06:1b:a5:a3:01:97:42:ea:d8:fb:
50:7a:24:59:63:07:3a:88:42:22:34:cd:94:07:4c:
b0:67:fc:ea:99:c1:b6:f4:75:e0:10:79:be:04:b2:
40:f2:b8:02:6f:f5:fc:57:8b:9a:e2:75:ee:0b:63:
91:45:ed:8d:35:61:a7:ff:b4:92:56:e1:59:53:e6:
e4:19:df:c0:0a:e8:f5:d0:77:3e:da:45:02:c9:83:
35:25:24:1b:58:da:3f:8e:17:46:f7:b2:54:21:69:
98:67:77:c9:ca:6d:68:03:5f:ba:35:5d:eb:43:80:
74:d0:d2:81:76:79:2d:e3:fa:27:78:d4:ba:d2:1b:
65:08:8a:65:77:0c:19:8c:3e:af:70:46:47:1a:cd:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:2F:DE:4F:E6:48:51:EF:64:D6:6B:8B:59:8A:06:60:BC:CB:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F5E304F45611EFB13D5864762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.94.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e1:f1:49:0d:75:98:23:01:5a:01:1c:23:e6:8a:cc:67:dc:
48:ad:33:b7:99:99:37:68:93:44:3d:9d:04:28:89:ff:79:3c:
a3:78:95:99:be:f4:c8:07:b5:0b:ce:bb:fd:0c:6c:41:20:77:
0a:d8:49:98:b5:8e:40:14:bf:c1:96:c8:48:d6:dd:41:92:21:
f9:3a:90:55:f7:4c:a1:64:41:f9:ac:e2:8f:f3:c5:5f:e2:ca:
2e:0d:b0:a4:32:43:54:20:79:21:a7:39:72:47:7a:6e:1d:bd:
49:55:ff:5e:b1:e5:04:01:e3:5a:7d:18:c5:80:3a:7d:8e:4e:
7e:15:1b:3d:9d:85:d5:99:0d:d0:14:19:29:53:8c:9b:df:39:
37:e7:95:ba:c9:b1:9d:83:77:e4:32:be:18:06:25:09:a9:e1:
92:b0:36:89:bd:3d:66:33:29:35:ea:8b:70:00:9d:a1:cd:b7:
7a:07:d6:54:a7:82:70:61:d1:81:bc:9f:3f:ad:a7:71:03:84:
90:a1:28:ee:18:86:e5:7b:d7:cc:7d:f0:95:98:45:b5:85:d7:
b5:37:75:12:3b:37:b3:0f:d0:e0:dd:00:cf:31:5c:e6:8d:3d:
2e:7e:18:ee:3a:10:79:d6:d9:82:81:51:4c:b3:6c:ba:c0:f8:
ef:24:99:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:58:13 2025 by rpki-client