Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF1CBCB0E54A11EFADA6EA69762E951A.roa
File: AF1CBCB0E54A11EFADA6EA69762E951A.roa (raw, json)
Hash identifier: M1N4bg5a0pCCwAfJI2kpluPFItjvZTHEzFpUhB4XPIs=
Subject key identifier: CF:2C:CB:76:32:41:57:BF:27:B5:C7:7B:9A:EB:E7:1B:28:C1:17:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015369
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF1CBCB0E54A11EFADA6EA69762E951A.roa
Signing time: Fri 07 Feb 2025 11:57:20 +0000
ROA not before: Fri 07 Feb 2025 11:57:16 +0000
ROA not after: Sat 03 Jan 2026 11:57:16 +0000
asID: 984
IP address blocks: 154.223.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86889 (0x15369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 7 11:57:16 2025 GMT
Not After : Jan 3 11:57:16 2026 GMT
Subject: CN=67a5f520-30f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:57:d9:ca:e7:26:a8:84:7b:91:ec:0f:75:
17:36:d4:82:8a:de:c9:a1:c1:04:8f:93:e3:48:5b:
b4:7e:8b:a4:fc:68:83:f6:46:52:47:f8:36:61:f5:
b4:71:bf:b8:74:6d:73:22:07:c0:37:1d:b9:26:52:
45:16:8b:76:60:6f:d5:39:76:4e:df:98:75:73:3e:
80:7c:6c:28:2f:d2:e7:3e:8f:c4:c8:87:a0:6a:f0:
29:13:46:ef:14:5c:60:21:7b:78:5b:cf:72:8c:07:
1c:af:4a:0b:b3:86:da:27:e4:13:77:bb:e7:63:0e:
67:62:f0:01:25:7a:bb:99:e0:da:fa:b4:95:6a:b3:
41:3e:7f:e0:f3:29:9b:7f:bd:43:3b:4c:f3:20:32:
5a:fe:73:13:8d:59:80:96:39:bb:5f:9b:93:ac:ba:
b5:e6:87:77:f8:23:c3:d5:32:1d:54:72:55:7e:3f:
3b:9f:c7:1c:03:98:59:70:d0:6c:78:d8:44:e7:29:
f5:77:92:f4:9a:d4:4b:29:99:11:b5:1a:b8:aa:9f:
50:d7:2b:63:30:ad:e2:96:76:d6:09:53:0d:b2:ce:
18:9a:89:37:55:5b:59:11:3a:90:7f:51:1f:61:a7:
86:90:a6:ad:d4:e4:8d:bf:32:17:f2:3b:e6:c5:be:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:CB:76:32:41:57:BF:27:B5:C7:7B:9A:EB:E7:1B:28:C1:17:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF1CBCB0E54A11EFADA6EA69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.251.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d2:50:82:01:6f:62:0b:c4:d1:3e:6c:d3:05:6e:dc:ed:a5:
1a:90:46:6f:1f:d0:c6:fe:22:71:54:97:c0:70:38:ba:55:e9:
e7:1f:9a:a5:4f:d7:a5:dd:e7:bc:de:18:c1:20:d6:4a:b7:25:
64:78:4b:0f:88:5f:40:00:d9:e1:bd:1f:d2:35:85:f5:98:9d:
99:06:c3:5e:1e:05:ea:9e:67:90:2f:ea:5e:03:26:88:a7:ef:
02:b1:c7:e5:c5:96:f9:34:d7:c3:fc:37:f4:3c:d9:9c:d3:1e:
e4:3e:c3:06:ef:df:c4:1d:93:64:2a:b8:0b:b2:1f:e8:55:14:
ac:5f:bd:ef:2f:ed:1e:b1:5c:3a:ef:dc:23:ee:2f:86:72:c3:
a5:3b:76:2d:df:d2:35:b9:0b:96:2f:b5:22:88:ef:5f:bf:45:
a8:04:d8:86:d4:3f:c3:3b:18:06:be:be:7d:b5:7e:c2:20:f2:
89:33:4e:45:33:d0:a8:3b:16:62:7f:49:05:a7:84:73:9d:ce:
77:5a:cc:a4:99:6d:f1:e0:df:79:81:8d:a2:a7:e6:0e:07:00:
3a:12:69:88:ff:a7:6b:a4:71:03:46:2a:c0:69:fd:ef:89:a9:
b2:a5:84:15:0d:84:90:82:47:a3:74:02:60:36:76:d7:6d:83:
1d:98:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:30:07 2025 by rpki-client