Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB4BA30F41B11EF9E04AC47762E951A.roa
File: AAB4BA30F41B11EF9E04AC47762E951A.roa (raw, json)
Hash identifier: GHtP4mp15D1qZSiCVW6Zl0R0OMzjS3s0qXg+1Ml67i0=
Subject key identifier: 8E:84:3D:73:8B:9E:24:E7:62:2D:92:B7:47:B3:2E:BC:D8:F8:C2:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016159
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB4BA30F41B11EF9E04AC47762E951A.roa
Signing time: Wed 26 Feb 2025 08:28:34 +0000
ROA not before: Wed 26 Feb 2025 08:28:30 +0000
ROA not after: Thu 19 Feb 2026 08:28:30 +0000
asID: 328608
IP address blocks: 154.200.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90457 (0x16159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:28:30 2025 GMT
Not After : Feb 19 08:28:30 2026 GMT
Subject: CN=67bed0b2-8bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:39:c3:58:03:b2:8e:f0:de:bb:2a:d4:1e:
4a:88:a3:f9:36:76:42:4b:b4:4e:3d:ca:8d:96:07:
40:0d:7c:f0:bb:f0:d3:4e:6f:b7:85:b6:66:c5:45:
f0:34:2e:9c:b6:17:d7:38:34:ec:3f:a1:b5:81:f3:
1a:e5:0a:7c:cc:88:40:94:38:7d:8b:d4:2a:15:c4:
12:c9:7e:ce:89:23:a4:1a:bf:e2:9e:47:42:00:96:
63:41:a7:20:89:e9:55:a0:dc:32:03:53:d5:35:f1:
c2:7b:71:e8:75:77:e9:7e:dc:31:03:6e:ee:f0:4c:
ed:69:cd:0d:e5:b2:98:75:39:ae:0b:94:68:1d:f3:
8f:e5:95:3d:9a:36:12:db:19:95:d3:c1:b2:33:8d:
e4:e1:ea:94:74:f3:12:11:79:07:7c:1f:5d:47:9d:
d0:eb:97:8e:e2:8b:11:89:5e:a1:df:82:d7:da:de:
42:54:b5:fb:25:9e:58:0a:7a:33:32:08:91:3e:a4:
6f:0a:92:6c:53:cd:1d:01:d5:6b:53:1a:53:4d:89:
e2:ef:68:d3:bb:46:30:f5:11:f2:a9:57:48:3f:11:
25:ee:a5:a2:52:0f:33:f1:69:67:05:86:cc:40:76:
a9:34:de:75:ea:cb:36:b2:37:ef:73:44:da:b5:41:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:84:3D:73:8B:9E:24:E7:62:2D:92:B7:47:B3:2E:BC:D8:F8:C2:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAB4BA30F41B11EF9E04AC47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.186.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:3d:e1:43:c4:f9:d0:06:50:8e:72:9c:92:c0:ea:e9:b4:39:
f8:ce:b4:91:37:e1:80:a5:87:73:48:72:fd:47:05:bf:c7:d6:
8f:d5:b2:50:97:07:a9:c1:18:3c:af:ba:0f:be:11:35:24:4c:
d6:82:f7:1f:62:ea:d3:f1:35:74:55:3b:c4:f8:a4:7f:c8:5e:
ed:f2:0c:f0:c0:4f:e1:74:84:8a:60:95:9f:8c:fd:9a:3b:2a:
5e:96:13:49:05:f9:28:44:4d:fa:8c:1a:35:37:a0:62:b3:b6:
cc:2b:eb:e0:b9:28:5c:8c:57:b5:17:18:73:ef:77:71:0a:d9:
13:5e:0a:58:5e:2b:64:43:03:c0:6d:54:a6:dd:10:c2:d3:4b:
8d:9e:98:f5:13:7a:d3:f0:22:65:61:3b:bb:0e:e0:e9:73:11:
35:3d:a9:df:27:c5:b2:09:b0:7c:d2:02:47:60:b6:36:8a:f6:
7f:02:0c:e2:ef:32:b1:4a:5f:b2:77:16:82:3e:ee:19:5a:d1:
02:1f:01:95:ac:b5:d2:57:5e:22:1c:f0:32:3d:da:9a:cd:f2:
78:97:c5:c9:d8:22:b0:f2:eb:f6:65:22:d3:10:a4:6c:4b:90:
b5:2a:34:fd:ae:bf:e4:2e:82:6b:b0:72:71:e4:bc:72:b3:9d:
a9:dd:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:37 2025 by rpki-client