Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA8A64AF44F11EFA24D8AB4762E951A.roa
File: CCA8A64AF44F11EFA24D8AB4762E951A.roa (raw, json)
Hash identifier: 0e/8nMCkKNX9ClGIz8SvU+dOsAby4xJktw50HGxMbTk=
Subject key identifier: C0:EA:BD:C4:F3:3B:2A:5B:D7:C3:68:9B:0A:0E:25:5C:E4:54:90:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01646E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA8A64AF44F11EFA24D8AB4762E951A.roa
Signing time: Wed 26 Feb 2025 14:41:45 +0000
ROA not before: Wed 26 Feb 2025 14:41:41 +0000
ROA not after: Thu 19 Feb 2026 14:41:41 +0000
asID: 984
IP address blocks: 154.210.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91246 (0x1646e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:41:41 2025 GMT
Not After : Feb 19 14:41:41 2026 GMT
Subject: CN=67bf2828-83f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:c7:a8:75:9f:14:d9:6b:ae:7d:7c:9d:4a:
d9:69:29:e7:e9:dc:1c:64:f3:4b:e7:96:9c:78:c5:
e1:80:8f:77:84:51:48:bc:40:85:35:3f:f3:78:0b:
c9:4b:8a:8b:0d:a0:ba:73:39:9a:ef:0a:d0:1c:80:
fb:2a:2a:55:8e:4b:d2:a8:61:d8:2b:4a:c5:82:d3:
4d:7d:6f:28:3e:8a:ee:d3:c7:30:1b:15:0e:ff:84:
b2:30:ea:01:aa:9f:10:4d:b7:e1:04:10:9d:86:67:
8c:60:3a:c5:b2:dd:64:ce:c7:4c:0e:80:5f:84:6a:
9e:f9:08:bb:7b:f6:b4:08:7e:66:0d:05:3d:1f:ae:
11:34:51:dd:61:48:88:34:1c:0b:5c:e7:fb:7b:c0:
2e:dd:c3:cf:f6:dd:60:77:9e:3c:63:d4:c7:ff:09:
51:4e:cb:ba:bb:90:a4:ab:d5:cb:ae:57:62:5c:06:
e4:04:95:6e:f2:2d:89:9e:63:22:d4:8b:20:79:ef:
71:78:fc:fb:38:64:68:0b:e5:0d:20:95:5e:94:35:
29:49:dd:57:97:2d:01:70:a1:56:3f:4e:f0:df:91:
bc:08:95:e2:8b:36:11:e0:64:7a:83:4e:3f:1a:fd:
b6:14:30:58:cc:94:f3:2a:e0:54:85:c7:12:70:20:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EA:BD:C4:F3:3B:2A:5B:D7:C3:68:9B:0A:0E:25:5C:E4:54:90:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA8A64AF44F11EFA24D8AB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:bc:3e:f7:48:9c:8b:c6:36:cc:76:ee:16:bc:df:37:26:57:
b5:74:73:a2:56:09:21:70:d5:d2:c3:b6:fc:36:78:6e:d3:7c:
22:20:3b:1e:d1:c2:25:1c:9d:7c:5d:22:47:20:77:7f:86:5b:
c0:5e:20:20:28:b0:9f:0e:cb:08:0f:69:45:d0:4e:8a:20:ff:
f6:bf:e7:66:79:7a:54:d3:b6:30:1b:bd:69:29:d1:99:22:98:
e9:86:91:78:15:28:bf:c6:28:56:6a:70:21:a6:63:32:0a:88:
dd:4d:64:f6:aa:6d:1a:a4:d6:1d:9b:9f:6d:f3:9f:18:35:c7:
2b:03:a7:fd:15:18:63:da:70:50:ec:59:2d:3b:89:4f:55:a0:
b0:21:aa:5a:9b:ba:2d:65:7f:9c:a6:f2:bc:ec:04:d0:58:dd:
49:51:18:97:17:93:57:32:f7:68:ec:79:27:10:a1:8b:b8:f2:
9d:7f:f0:c0:3e:f9:32:1b:20:72:78:32:96:7f:9a:3b:d8:da:
6f:11:41:0f:86:97:08:8f:84:5a:f2:a3:e9:a6:47:31:06:bd:
2b:be:af:3b:ea:69:6b:ed:92:5b:89:20:07:26:c0:d2:08:65:
ee:8c:c8:99:fb:4e:fe:25:50:69:99:89:1f:49:58:34:b8:eb:
20:08:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:22 2025 by rpki-client