Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADD753AEF43811EF86D4FB8F762E951A.roa
File: ADD753AEF43811EF86D4FB8F762E951A.roa (raw, json)
Hash identifier: O96BknrFOFl5m446DZcEKe7yl51Y0t1r65ijIntm6jE=
Subject key identifier: 35:C0:BA:FE:24:D2:CE:51:E8:45:EE:CD:7B:FA:F0:26:5C:77:74:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADD753AEF43811EF86D4FB8F762E951A.roa
Signing time: Wed 26 Feb 2025 11:56:14 +0000
ROA not before: Wed 26 Feb 2025 11:56:11 +0000
ROA not after: Thu 19 Feb 2026 11:56:11 +0000
asID: 984
IP address blocks: 154.207.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90836 (0x162d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:56:11 2025 GMT
Not After : Feb 19 11:56:11 2026 GMT
Subject: CN=67bf015e-4caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:81:9b:36:92:7d:42:d8:0e:43:c3:4c:e4:
8c:09:a4:bf:8f:29:3a:e5:21:15:82:96:e4:d3:43:
80:19:da:f3:4a:e8:06:2f:c3:a2:17:f8:86:e2:db:
20:fc:60:2c:c0:d6:00:cb:c2:ba:29:df:dc:fc:5f:
8f:df:08:36:06:e5:92:3b:63:eb:33:f9:44:16:68:
ad:d5:a0:03:10:06:20:aa:ba:25:19:2e:58:c2:dc:
78:9a:f0:4c:e4:9e:25:97:1c:45:8a:8c:93:99:21:
ad:a2:f5:3b:31:f8:3a:60:cb:98:2a:be:bc:e3:f0:
1e:b1:9f:ad:6c:73:f2:c3:09:3c:1e:8e:d4:68:83:
b5:b4:e5:e8:e9:48:14:76:80:d0:2a:59:3d:ae:f2:
9b:02:09:4d:4d:98:6b:41:28:6f:49:06:41:57:a3:
ed:d3:52:c2:28:f4:c7:f7:4f:b3:98:b5:8a:80:7e:
33:bd:e5:74:bb:a6:c6:7c:53:d1:a1:02:69:16:cd:
73:fc:19:5b:dd:df:f3:b8:98:c3:70:4e:4c:9a:97:
d5:cf:29:1a:d0:32:83:71:18:05:ff:b2:9a:e3:12:
c5:23:f1:f4:f0:c4:33:4c:3f:03:3e:c2:a7:06:6b:
ba:ec:60:83:a6:e3:b0:ae:46:69:ae:e3:ab:22:0a:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C0:BA:FE:24:D2:CE:51:E8:45:EE:CD:7B:FA:F0:26:5C:77:74:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADD753AEF43811EF86D4FB8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ff:bf:70:74:3b:fd:c3:70:b3:d4:e3:25:8c:4d:b9:d6:f7:
91:af:47:89:91:cb:22:fd:29:ee:d4:80:61:22:02:e7:b5:ae:
47:1b:ea:83:46:56:38:9d:29:1b:f8:fe:ad:a3:f9:4d:1c:87:
38:c1:89:4a:3c:cd:6d:05:07:d3:5f:72:44:d0:0b:47:8d:cf:
84:8a:43:e9:c1:b0:01:d7:3e:0d:1b:62:6a:a1:d7:a8:13:2e:
7c:6e:fc:6b:38:87:2f:28:5c:46:a9:06:74:1e:db:10:67:10:
ee:22:66:2c:26:0d:53:ed:ff:67:f6:8e:24:b4:d8:82:88:d5:
89:3e:09:d5:14:df:ea:f1:0a:a6:1c:45:ca:51:fc:11:be:9c:
74:e3:aa:72:4b:57:a5:7e:a6:b5:79:2c:b3:4c:ce:9f:6a:1a:
e8:76:3a:98:59:67:b8:82:5c:55:73:02:ad:5b:81:60:f8:49:
9b:38:2e:5b:ba:8d:06:46:08:c8:91:67:81:e1:1b:c2:35:e1:
8d:2c:7f:55:3a:83:de:99:a8:61:bf:12:8c:2a:8b:70:67:db:
5e:24:d1:66:74:5c:cc:e4:37:10:c1:ef:75:4b:53:34:d9:17:
2b:12:98:6b:c5:24:8b:31:2f:6d:4a:57:2b:91:2c:28:6a:8c:
00:c2:b4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client