Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D066B344E53611EF8479AE66762E951A.roa
File: D066B344E53611EF8479AE66762E951A.roa (raw, json)
Hash identifier: UJzwLaXW92E8RE9sNJxDQv1FXK9n5GdaXA0hAY00KU8=
Subject key identifier: 31:52:90:20:61:6F:BB:A3:09:A1:2A:0D:18:B9:6F:11:93:0D:3E:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01534F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D066B344E53611EF8479AE66762E951A.roa
Signing time: Fri 07 Feb 2025 09:35:06 +0000
ROA not before: Fri 07 Feb 2025 09:35:02 +0000
ROA not after: Wed 14 Jan 2026 09:35:02 +0000
asID: 138456
IP address blocks: 154.213.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86863 (0x1534f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 7 09:35:02 2025 GMT
Not After : Jan 14 09:35:02 2026 GMT
Subject: CN=67a5d3ca-7347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:23:7c:09:3d:11:bf:35:44:fb:f0:c0:89:
41:12:a1:05:9c:ca:a6:0d:56:b5:81:b5:11:f7:26:
9a:2a:5c:f1:f1:57:2d:f1:26:37:db:a7:47:fc:52:
77:b1:0a:ec:07:e7:33:87:ee:35:98:74:0d:81:ee:
f6:df:ed:3b:bb:a2:f0:33:23:1e:d9:83:f1:dd:ef:
55:59:fb:1a:64:7a:06:f8:3d:c2:5e:33:6d:ab:ad:
4e:c4:91:eb:08:2d:38:8b:a2:81:22:58:46:bb:f7:
e0:e7:ee:7b:c3:13:e5:e7:5a:3e:48:e5:ae:f8:73:
c5:76:72:e8:e7:5b:ea:34:b1:9a:e0:f9:62:e6:ce:
9b:6a:03:b7:e4:94:fd:76:e6:6b:05:db:e3:36:4a:
96:51:7a:f3:dd:cf:7b:d9:b7:dd:13:e5:84:f1:8e:
bd:5b:93:bb:9c:18:1b:5d:c2:3a:f5:30:1b:0e:05:
1e:ea:7d:f0:da:b8:54:46:0c:a4:bf:9f:0c:95:9c:
52:3e:83:9a:28:30:10:05:33:2b:23:c5:aa:23:47:
ce:c4:e0:db:6d:f7:3e:1f:e7:39:62:cc:78:8b:9a:
66:0f:a3:87:50:1e:63:20:bc:a9:ed:e9:22:ea:d2:
6d:e5:ca:4c:a4:52:96:9d:4f:4f:c2:79:1d:81:ed:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:90:20:61:6F:BB:A3:09:A1:2A:0D:18:B9:6F:11:93:0D:3E:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D066B344E53611EF8479AE66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:96:ad:43:39:57:df:a6:e1:9b:79:02:79:4e:12:ce:60:07:
6d:bd:d3:8e:3d:d7:4c:d8:e2:72:c3:0e:1a:26:70:20:41:a3:
f2:78:f3:17:bf:3f:c5:e0:1b:da:da:4f:2d:e9:95:e6:7f:8b:
f2:ab:95:d4:8f:05:31:ff:db:e0:9e:ba:37:25:fc:e5:66:64:
c1:5d:f5:d2:56:fa:d8:b3:68:d6:08:37:7a:3c:b9:85:eb:d1:
86:18:a7:c2:da:52:0a:6d:fd:76:e2:52:a4:70:92:e6:52:ae:
d9:3c:94:7f:d7:a0:1d:43:7c:0f:76:52:fc:e7:38:b5:47:da:
fb:df:42:29:fc:1e:47:0b:01:17:e1:6c:80:ba:27:78:3a:a6:
1c:8a:23:7a:9a:d3:5f:8e:89:03:2c:8b:f1:65:21:5b:4e:8f:
14:b3:04:34:ef:a6:4b:d5:62:ab:31:92:5c:73:db:13:3d:e3:
d9:0f:cf:8f:87:28:74:8d:a8:59:f7:d9:11:61:4f:81:10:96:
f1:cf:e6:70:c4:e2:fc:2e:1f:c3:58:80:55:db:6e:1c:54:3c:
94:f4:bf:7d:66:f3:b8:a4:df:24:ce:21:a8:98:cc:74:c3:8d:
11:ac:b0:66:0f:06:f6:4e:de:56:e9:87:60:c6:29:c9:e0:e7:
8e:88:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:37 2025 by rpki-client