Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A02888F43511EFABA3267C762E951A.roa
File: B1A02888F43511EFABA3267C762E951A.roa (raw, json)
Hash identifier: GdgxqgOPKfWpqevdduSp61ji5yZJKxfzIQBVeDmf0Fg=
Subject key identifier: 26:27:B1:83:73:E7:32:7F:7A:DA:39:55:52:A5:A4:6E:7D:E3:F8:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A02888F43511EFABA3267C762E951A.roa
Signing time: Wed 26 Feb 2025 11:34:52 +0000
ROA not before: Wed 26 Feb 2025 11:34:47 +0000
ROA not after: Thu 19 Feb 2026 11:34:47 +0000
asID: 984
IP address blocks: 154.207.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90788 (0x162a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:34:47 2025 GMT
Not After : Feb 19 11:34:47 2026 GMT
Subject: CN=67befc5c-5c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:15:60:1f:b4:30:b9:84:94:9b:a0:19:b3:
89:5f:29:70:2e:49:b9:ab:d9:c5:82:a4:0a:bc:8e:
78:4a:22:9b:1a:5a:5a:c7:54:c1:1f:57:50:52:bd:
a5:79:64:8e:56:e0:f2:85:fa:6c:a0:ba:c3:25:7e:
83:73:7e:21:b2:1d:61:f4:bb:f5:00:1b:68:7a:b4:
c4:39:36:65:63:82:73:0e:da:27:69:93:35:70:12:
b8:52:63:f9:93:f0:80:50:80:72:fa:da:73:95:1f:
78:8d:6b:c5:fe:00:7b:0c:6c:fe:be:30:c0:22:83:
20:65:f1:4f:bc:63:71:dd:00:26:b4:54:d7:2f:3d:
10:f2:3b:bb:29:32:2c:fa:40:dc:3e:6c:c4:6b:af:
f4:a9:2a:f8:14:a7:b0:8e:f3:56:cf:b9:54:9f:92:
94:1f:06:cb:14:67:f2:86:8e:ec:ed:4f:3d:6d:9e:
d5:9b:aa:e4:1c:bf:f9:ae:9b:c9:5f:b8:73:2d:2c:
b4:61:a5:83:8d:de:88:e8:41:9a:d6:e0:6d:c8:b0:
41:43:8c:ec:08:31:42:41:98:e0:09:fd:95:a1:b2:
33:e5:4a:a9:f5:cf:88:50:cc:9c:3a:29:4f:03:b2:
4b:5f:55:f4:91:7d:df:c9:85:e4:4b:df:79:62:74:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:27:B1:83:73:E7:32:7F:7A:DA:39:55:52:A5:A4:6E:7D:E3:F8:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A02888F43511EFABA3267C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.96.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6c:ea:dc:0c:0d:d1:07:e2:7b:0c:33:d4:44:3c:21:f6:19:
27:51:70:5d:da:9a:56:fb:dd:02:10:cf:66:47:b2:05:ad:b5:
f1:1e:39:74:73:48:f6:d8:77:c1:42:96:37:a2:82:6d:82:32:
57:94:01:b4:fa:f3:dc:f9:a6:44:17:dd:87:22:7c:7c:8c:c5:
c9:3f:18:e3:d5:28:06:2b:76:79:52:5a:93:82:14:14:8f:4c:
f3:a3:35:3d:b4:3f:a9:e6:00:46:a5:5c:31:56:6c:d7:56:b6:
62:ec:68:80:7c:fd:6e:da:b8:a1:4c:a5:ae:ce:98:cd:82:db:
eb:94:f0:75:3c:1a:c2:7e:63:f5:9b:b9:fa:7a:94:17:d9:91:
7f:09:c9:ad:ee:53:6a:d6:6d:0e:21:f5:6f:8a:cb:3b:c2:c4:
f1:e3:20:f8:ea:a3:1d:91:0c:6d:b1:f1:c9:3f:34:b4:60:b9:
d6:99:b5:63:e8:c3:18:01:15:48:5b:61:65:8a:b7:fa:af:15:
ec:c1:b3:32:a4:b1:67:e5:f5:7c:dc:80:de:4b:37:51:08:17:
cb:ad:61:95:52:b9:72:74:06:a2:43:bb:3d:35:f5:90:79:94:
26:18:f5:5c:bd:25:97:a0:ad:03:84:15:65:7b:e7:43:e6:f3:
38:b8:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:29 2025 by rpki-client