Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0AB2B94F44211EFB972D759762E951A.roa
File: D0AB2B94F44211EFB972D759762E951A.roa (raw, json)
Hash identifier: YbxJGO3KOOOhEdeYENYBKXCyCslQqKA4s3dvEHxK+IM=
Subject key identifier: 6F:15:94:AF:8A:11:6E:2B:82:33:DC:D4:8D:EA:26:02:31:0D:8D:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01638A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0AB2B94F44211EFB972D759762E951A.roa
Signing time: Wed 26 Feb 2025 13:08:48 +0000
ROA not before: Wed 26 Feb 2025 13:08:44 +0000
ROA not after: Fri 20 Feb 2026 13:08:44 +0000
asID: 984
IP address blocks: 154.83.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91018 (0x1638a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:08:44 2025 GMT
Not After : Feb 20 13:08:44 2026 GMT
Subject: CN=67bf1260-6b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:8f:23:a1:bb:a6:08:1b:b2:76:02:88:db:
65:84:7e:f1:ba:0a:7a:06:21:d0:a8:97:71:b4:10:
37:eb:30:57:40:13:71:68:98:14:aa:35:43:b5:3e:
2c:85:0f:95:6f:cb:eb:60:be:07:2a:cc:9f:fa:16:
db:82:c2:83:de:f2:ea:81:5f:2c:bb:9b:6c:0b:4b:
47:7a:94:e0:e8:68:dc:1b:fd:77:eb:cb:d1:8c:12:
91:a6:74:e6:fa:11:46:2f:18:6c:00:9e:9c:ee:cb:
04:af:f9:0c:61:2d:57:25:43:07:a2:a0:53:8e:5d:
2c:d6:78:a5:2a:33:b0:08:73:fc:91:7b:4f:80:05:
4e:de:28:b1:66:d3:9b:1d:0a:77:04:eb:18:af:6f:
7d:31:36:a1:0b:60:5f:40:e3:f0:02:16:81:a2:11:
65:bb:ac:1d:f8:98:bf:cd:cc:9b:a8:c7:b6:77:7b:
f3:67:14:6a:38:43:4e:9b:1e:45:49:b5:aa:d1:ba:
6e:67:09:43:71:af:20:77:c1:97:af:80:84:83:7f:
13:1a:13:e7:6c:ec:63:8f:bd:6e:1f:ac:a1:53:9e:
01:5e:f5:5f:64:e6:2e:c0:64:94:71:2f:b8:76:5c:
e6:37:7e:ea:02:ba:37:21:0d:1a:10:24:58:41:6f:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:15:94:AF:8A:11:6E:2B:82:33:DC:D4:8D:EA:26:02:31:0D:8D:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0AB2B94F44211EFB972D759762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.163.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b7:01:ef:24:01:20:f8:3a:1b:9b:31:83:00:f0:14:54:b6:
fb:d2:03:0b:ea:6b:ee:d1:07:6c:19:db:49:2c:c0:10:8e:00:
dd:09:43:52:b6:68:c4:fc:68:41:20:c7:0d:7d:b4:82:95:d6:
fb:e9:96:b9:dc:ed:36:0b:79:69:88:ff:a7:26:65:a8:af:6c:
1d:d5:c2:34:d1:9a:4f:44:cb:71:2b:2e:67:5d:ad:80:c6:08:
7e:85:44:6b:d5:d2:be:dc:8d:fa:64:67:f4:4a:4d:40:9d:83:
54:1a:4e:d6:f5:b9:27:ee:67:66:b6:e4:f6:54:83:99:26:85:
d4:5b:ec:de:af:1a:ed:25:13:2f:06:c9:d5:8b:f8:98:8b:7b:
39:a8:b5:93:fd:f9:37:c5:6e:7a:e1:24:c3:75:e1:74:df:7e:
ca:c4:38:fe:28:e7:9f:b6:72:16:de:73:29:84:73:54:0d:8e:
8d:09:44:39:b3:3e:f3:ae:7e:ee:f8:44:e9:a1:29:ed:32:6f:
b9:52:a9:f8:40:83:30:60:e3:f4:7d:87:81:b2:48:9e:8a:64:
c2:44:2f:d8:78:50:f6:d2:a4:16:8d:14:b3:ff:15:1c:d6:af:
99:6b:b9:c1:26:c9:ab:41:f1:17:4a:ca:ee:9b:d9:3b:5f:bd:
d6:6a:60:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:14 2025 by rpki-client