Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD1B2FEAF3EB11EF9915717C762E951A.roa
File: BD1B2FEAF3EB11EF9915717C762E951A.roa (raw, json)
Hash identifier: ihthN9ptfIm9AT6uA9alq2rPZjLLeJH0zyJxtkPBTQk=
Subject key identifier: 55:A4:21:2A:37:A7:B8:80:A9:8F:A8:92:8E:3E:33:0F:70:75:28:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016095
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD1B2FEAF3EB11EF9915717C762E951A.roa
Signing time: Wed 26 Feb 2025 02:45:29 +0000
ROA not before: Wed 26 Feb 2025 02:45:25 +0000
ROA not after: Thu 19 Feb 2026 02:45:25 +0000
asID: 984
IP address blocks: 154.203.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90261 (0x16095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:45:25 2025 GMT
Not After : Feb 19 02:45:25 2026 GMT
Subject: CN=67be8049-66bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:f0:f2:89:c4:b9:6d:56:2a:b0:ae:42:a9:
34:e4:bf:34:2c:41:5d:3b:94:c2:9a:6e:87:e8:52:
12:42:5d:0e:e0:5a:14:16:5c:18:71:40:a6:84:01:
b7:ce:67:d2:19:93:fb:54:b0:14:b6:63:c8:03:b8:
90:ff:46:54:8e:2b:cb:52:ef:be:f9:cc:f5:69:69:
a9:2a:3f:ae:0a:f7:fc:32:92:6a:0d:a2:d0:c9:0b:
32:43:48:bf:7f:9a:46:38:61:25:67:75:e8:0b:d9:
b4:64:9d:be:1a:b4:41:8a:ba:55:8f:4b:b0:f2:08:
1e:25:d8:f6:e8:da:eb:b5:7a:27:26:94:48:80:bc:
a7:e3:87:24:ee:ef:41:12:01:fa:b2:93:28:06:b3:
e1:18:c1:7b:e0:ad:98:ce:50:a8:7b:0e:75:8a:d8:
f0:6f:8a:1e:37:f3:bf:8a:97:01:36:97:f6:1b:84:
f4:57:39:f7:fa:ee:e0:25:8e:5e:2f:ec:60:6c:29:
e4:14:cd:8f:ab:51:d8:63:87:e2:d9:bc:3e:37:04:
82:1c:f6:db:2d:09:83:f5:5c:2d:30:8d:e9:2b:fe:
ad:49:48:99:9c:9c:4a:5a:6b:72:d5:71:d8:3b:ba:
6a:42:70:51:b3:86:00:d8:cf:23:f9:fd:55:4c:58:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:21:2A:37:A7:B8:80:A9:8F:A8:92:8E:3E:33:0F:70:75:28:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD1B2FEAF3EB11EF9915717C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9a:fc:63:63:60:7f:d7:13:7c:ee:04:2b:31:e7:02:f6:8c:
b6:43:0f:4b:e4:3d:9f:c4:d6:35:bf:19:41:33:f9:e5:26:f7:
23:d3:01:c3:2b:67:53:df:38:ff:d4:ea:05:39:c5:0c:c1:4f:
22:47:e1:9d:da:6f:f7:d4:50:79:e5:6f:4e:3c:ad:a0:c7:aa:
cf:b8:07:11:88:d1:84:61:f1:de:eb:12:2e:1a:1a:8c:3f:93:
c2:ca:1a:9b:b1:00:5d:83:6e:be:2c:02:9c:93:1f:75:76:d7:
80:8e:2d:e5:c2:a2:25:31:28:55:2b:29:27:20:b8:e4:d7:e3:
dc:f1:cc:71:99:25:e2:26:79:5d:65:3b:6d:d8:27:19:81:53:
fe:14:a8:1c:d1:8c:75:44:dc:51:7a:39:12:c9:f5:59:cd:2d:
75:40:80:73:08:3a:d6:55:e1:8e:30:eb:14:39:54:cc:cb:d0:
f1:d4:b2:c3:47:09:5e:f3:f9:30:a1:9f:20:cd:29:f5:6b:3e:
df:b2:91:fe:60:28:24:87:83:88:88:92:d3:9d:63:89:ba:7f:
e6:1f:52:2b:3e:5a:9c:34:05:d1:3f:e8:cd:fb:d2:dd:3c:58:
9a:3f:45:00:3e:45:ef:ed:f0:94:20:93:a6:0f:4a:5a:9d:3f:
71:f2:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:44 2025 by rpki-client