Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC478EE4F43F11EFAE35DB41762E951A.roa
File: AC478EE4F43F11EFAE35DB41762E951A.roa (raw, json)
Hash identifier: 3xd1Q+4LSo1vrU1C2TvZQggv8kK50PFLSHSxlfuOXkg=
Subject key identifier: CB:3B:E0:1D:A3:31:8F:8C:DF:E6:95:69:34:92:88:F4:05:29:49:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016346
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC478EE4F43F11EFAE35DB41762E951A.roa
Signing time: Wed 26 Feb 2025 12:46:18 +0000
ROA not before: Wed 26 Feb 2025 12:46:13 +0000
ROA not after: Thu 19 Feb 2026 12:46:13 +0000
asID: 984
IP address blocks: 154.208.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90950 (0x16346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:46:13 2025 GMT
Not After : Feb 19 12:46:13 2026 GMT
Subject: CN=67bf0d1a-4997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:d5:7e:1d:47:f8:86:ed:3f:92:f7:72:8a:
e8:2f:3d:c6:17:4b:ca:8b:d9:ed:f5:a0:2f:12:77:
a9:5e:e2:2e:23:4b:87:e9:85:f8:34:7e:31:53:02:
3c:89:bf:5e:0c:3b:24:76:3a:5e:02:38:0f:6d:ea:
c5:1e:dd:12:ba:e1:0d:1f:ae:33:cd:ca:b8:f3:07:
61:24:42:7a:37:f4:4f:3e:fc:17:3a:3d:48:32:34:
08:18:e3:33:ab:f6:d7:86:be:5a:9a:96:28:df:18:
ee:38:24:a4:b9:3d:a1:90:57:bf:b0:96:96:bb:83:
99:b5:69:76:49:6a:ad:b4:50:22:51:5c:a6:e6:5c:
4b:72:61:d7:88:e3:a6:59:7a:2f:82:fb:bf:05:ce:
28:f9:8d:15:2f:88:09:9f:8f:10:e5:ab:dd:93:4a:
ac:7e:18:29:0e:3d:e1:69:88:07:64:7d:83:cd:4e:
fc:61:27:28:59:b5:e8:62:e1:d9:4e:f1:c4:f6:2c:
64:1e:d3:3d:70:dc:2b:55:ec:8d:5a:20:b5:33:97:
03:82:7e:69:3f:82:61:13:0f:b8:a7:0c:b0:22:d6:
ad:c9:d4:4a:ff:38:01:d7:84:ba:7b:b7:9e:f8:d2:
b2:ac:e8:ed:18:c0:58:4e:65:0f:56:9f:cf:9c:3c:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:E0:1D:A3:31:8F:8C:DF:E6:95:69:34:92:88:F4:05:29:49:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC478EE4F43F11EFAE35DB41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d2:99:ac:10:04:0d:24:73:a6:0c:88:b5:5f:4d:db:f1:96:
a9:90:57:ac:61:aa:f6:4a:3a:50:4e:67:b3:99:2d:58:cb:68:
be:e6:40:2e:13:e7:c2:e1:e2:2c:da:e6:6d:cb:10:e9:bd:c8:
71:e8:8b:24:38:20:ce:c9:b5:5f:e9:44:af:59:38:71:f4:e3:
f0:de:3c:19:84:4a:65:cd:27:d7:ee:4f:b5:08:d8:23:ff:6b:
1d:62:85:c8:45:3d:3f:74:c1:17:26:bc:07:da:bd:73:e9:7d:
57:23:c1:b6:cb:5e:b4:ce:60:e4:97:74:63:f6:64:c0:a5:db:
23:55:9b:c9:19:81:73:10:e0:9f:80:40:ad:d1:57:be:17:83:
19:db:bc:98:f5:c0:8e:fa:37:e7:1b:2b:16:8b:76:06:9c:2b:
d1:aa:28:5a:7c:cf:f6:26:4f:c5:25:20:2e:e8:71:02:0a:7f:
18:17:6f:23:59:4f:4c:77:57:bb:5f:f5:92:ba:90:73:04:13:
44:0f:7e:71:2d:4f:8e:83:49:b9:2d:a2:de:df:63:73:12:af:
5e:e0:bf:62:59:25:5f:cf:5e:04:f6:32:a5:d7:2c:b3:8d:f7:
97:e5:51:75:99:63:30:91:7d:2a:26:55:62:df:9c:b0:c8:f1:
6b:9a:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:05 2025 by rpki-client