Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7125498F3F511EF9B939847762E951A.roa
File: B7125498F3F511EF9B939847762E951A.roa (raw, json)
Hash identifier: ci+GJDmHDE5UIViWxCS/rBAYPjL5xC5e6SAevg0Witc=
Subject key identifier: DE:3F:AD:59:0B:C6:B6:EF:81:BF:18:42:EE:59:AA:E2:87:1A:DD:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7125498F3F511EF9B939847762E951A.roa
Signing time: Wed 26 Feb 2025 03:56:54 +0000
ROA not before: Wed 26 Feb 2025 03:56:50 +0000
ROA not after: Thu 19 Feb 2026 03:56:50 +0000
asID: 984
IP address blocks: 154.203.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90301 (0x160bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:56:50 2025 GMT
Not After : Feb 19 03:56:50 2026 GMT
Subject: CN=67be9105-c573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:42:26:54:7c:8f:0a:d2:f2:77:55:81:2b:
15:81:f1:42:0e:cf:1b:f6:b9:67:70:89:df:5d:21:
10:f1:86:88:48:c1:3f:71:7e:37:55:ce:c7:69:b1:
c7:8d:be:76:6f:64:5c:81:0a:9a:f2:f5:92:78:fa:
2d:3b:10:d2:bf:59:89:1d:88:cc:a8:c2:a5:6b:ab:
ba:15:6e:66:9e:59:6b:ce:0a:00:24:bd:0b:9e:9c:
fc:13:3d:d7:2b:e0:ce:69:6d:07:5f:78:ed:49:23:
1c:f2:05:bb:da:12:66:27:99:92:86:89:77:b0:16:
ca:56:69:04:a6:b8:b5:73:76:48:fd:db:7f:80:0d:
2c:00:78:7b:24:be:ad:7b:28:f5:fb:7a:37:7d:20:
0e:55:13:0f:0b:04:a5:ab:55:22:0e:c1:80:53:56:
7d:81:46:ee:c6:f8:b8:49:2c:3c:fe:b9:63:c5:7e:
d6:ea:85:56:1f:93:21:8f:4e:cb:64:a9:66:df:43:
9f:a7:14:ed:13:ef:d7:a4:ba:21:fe:c3:3f:21:02:
e9:68:aa:fd:72:ef:92:8d:de:43:9d:7d:8e:b0:47:
36:1e:2a:80:15:68:44:ec:ad:c1:d3:5a:6b:c5:3b:
b0:ce:0b:1c:0a:ab:9a:de:e5:fa:85:d1:0b:15:1d:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3F:AD:59:0B:C6:B6:EF:81:BF:18:42:EE:59:AA:E2:87:1A:DD:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7125498F3F511EF9B939847762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.118.0/24
Signature Algorithm: sha256WithRSAEncryption
33:95:3f:b9:1f:c6:46:88:28:15:a6:17:a9:5f:95:8c:4c:5f:
36:a4:be:b6:1d:17:8e:0f:0f:c8:3f:11:78:17:c6:80:2a:36:
7e:5d:29:5f:89:25:f8:93:54:85:49:06:c6:b8:cd:6c:70:f5:
9f:aa:88:99:ec:a2:a0:60:ae:b3:01:10:c7:9b:1d:09:dc:0c:
9b:a2:e1:de:c9:21:6a:3d:7a:8c:23:bf:a7:ac:32:46:00:9d:
df:e6:ea:b8:8b:17:44:2b:36:45:7c:33:83:4c:2b:43:44:59:
ab:eb:59:a9:6c:31:6c:6a:5d:5b:82:53:96:76:77:03:87:3b:
2b:24:2c:9f:e1:1d:d1:ed:fa:c0:b7:e4:73:ea:eb:d0:a7:b1:
e6:09:e8:30:24:b0:08:83:2c:7a:f2:eb:0d:20:c3:91:4f:92:
04:fa:a1:5a:a3:3f:9e:f2:ef:6f:df:25:f2:82:18:78:e6:75:
5d:38:f5:32:8b:0c:76:a3:68:8a:e4:9f:c9:a7:bf:21:30:97:
f5:c4:d9:21:c8:61:e2:d6:23:35:51:a7:5f:c2:c3:5a:65:98:
3d:3c:1b:66:09:c1:91:e8:3e:7a:b5:60:ae:9b:82:44:9a:04:
e5:d5:aa:07:f1:f6:29:e6:b2:cd:f2:0f:ec:70:32:66:b8:bd:
f2:cc:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:43 2025 by rpki-client