Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0063F46DB1511EF9F3A8C8F762E951A.roa
File: B0063F46DB1511EF9F3A8C8F762E951A.roa (raw, json)
Hash identifier: 0rY0mA8BkLY0RkxrjkTOQI1rTqkkmtGOnceqoDmgZqI=
Subject key identifier: 97:3C:EE:A5:E1:14:9B:4E:11:6C:38:C5:AA:C0:EC:82:8B:A6:04:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014936
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0063F46DB1511EF9F3A8C8F762E951A.roa
Signing time: Sat 25 Jan 2025 12:12:47 +0000
ROA not before: Sat 25 Jan 2025 12:12:43 +0000
ROA not after: Mon 02 Feb 2026 12:12:43 +0000
asID: 132839
IP address blocks: 154.216.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84278 (0x14936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:12:43 2025 GMT
Not After : Feb 2 12:12:43 2026 GMT
Subject: CN=6794d53e-e8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:60:86:83:44:c2:25:1c:f0:44:10:20:fa:
55:db:9c:81:64:12:d6:a2:96:3e:27:c3:7a:a5:49:
30:73:0d:97:9b:99:db:c9:de:25:d8:bf:61:f9:9c:
7e:a4:28:d3:bb:a3:b1:0b:25:f7:dc:13:2e:0e:ba:
f9:8d:87:de:08:4c:3a:a3:9f:ae:a9:d1:da:40:e0:
e9:5f:49:f3:a4:76:60:7d:09:2e:5b:1c:a5:53:2d:
d7:8b:43:b8:26:af:2e:d8:21:f9:b6:35:dd:16:9c:
02:c3:38:ec:fa:cf:f5:4f:28:c7:df:83:a9:cb:ed:
7f:f4:3c:5d:04:32:4f:79:13:8c:24:e2:b3:ab:46:
80:48:33:d7:b5:b0:3f:d2:47:15:7f:86:29:f4:17:
98:bc:91:c2:85:ac:63:40:5d:8f:46:64:48:15:51:
a1:1b:66:b3:c7:48:3d:b1:dd:25:18:4b:8d:51:b0:
ce:e0:ca:ff:3f:8e:73:bf:21:3a:23:c7:bc:e0:0a:
e0:dc:71:45:68:94:da:3d:d7:bf:16:d5:dc:49:c9:
14:39:df:91:4a:2f:96:8e:3d:40:3b:92:51:74:fb:
68:76:b7:fd:28:62:fc:47:34:1a:63:8b:0b:d4:f7:
4e:47:74:97:1f:1d:18:4c:6d:f9:61:04:f2:00:0f:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3C:EE:A5:E1:14:9B:4E:11:6C:38:C5:AA:C0:EC:82:8B:A6:04:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0063F46DB1511EF9F3A8C8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.32.0/19
Signature Algorithm: sha256WithRSAEncryption
05:19:04:31:e4:70:5a:31:b4:88:c2:ea:8e:bb:e5:18:be:c9:
69:80:bc:99:4b:4a:61:84:f6:81:7b:fa:29:18:d0:f9:fc:aa:
85:03:2c:4f:2a:0f:fc:f0:db:83:2a:cb:cf:0d:f2:d1:34:e1:
a9:c0:6b:ae:5b:24:96:54:5b:55:56:cc:e7:ff:ca:33:8f:cf:
93:2e:e0:eb:c9:8d:50:9e:a8:4e:20:61:30:99:3a:73:3e:ce:
83:00:af:c2:4d:c9:8f:3b:12:ae:9a:a6:4c:d4:37:47:1d:ce:
01:af:21:27:31:49:5d:c1:25:bd:fa:21:50:b4:79:e6:d0:e2:
6e:12:59:36:62:e2:60:d3:eb:65:b7:16:54:d2:46:17:23:e4:
43:db:03:37:09:b4:38:0e:c1:08:94:88:15:39:78:12:c9:bf:
b7:be:01:e5:44:82:f8:16:18:ba:9b:d3:28:1e:e3:ef:ce:f0:
bd:46:47:92:72:9b:31:33:54:89:21:ab:ed:75:fd:9c:9a:4d:
a7:f2:16:7b:2f:c0:92:1f:9b:9f:00:bb:64:2b:60:2a:b2:36:
3e:e0:76:0a:f1:ac:fc:26:90:32:66:64:00:2b:79:83:c6:f5:
61:c9:6a:3e:aa:be:3e:0a:df:6f:0f:00:8a:be:e6:8b:5e:b9:
5c:2a:2c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:43 2025 by rpki-client