Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6ECB87AF43C11EF967301AD762E951A.roa
File: D6ECB87AF43C11EF967301AD762E951A.roa (raw, json)
Hash identifier: miKpwF6TA3fZsWZ+8OqT2PxWn5e8/9rrBDCYghTsUG8=
Subject key identifier: 9B:FB:99:4F:CC:CA:4B:F5:D3:25:2A:4B:C2:0E:58:3A:F3:35:52:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01631A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6ECB87AF43C11EF967301AD762E951A.roa
Signing time: Wed 26 Feb 2025 12:26:01 +0000
ROA not before: Wed 26 Feb 2025 12:25:58 +0000
ROA not after: Fri 20 Feb 2026 12:25:58 +0000
asID: 984
IP address blocks: 154.199.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90906 (0x1631a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:25:58 2025 GMT
Not After : Feb 20 12:25:58 2026 GMT
Subject: CN=67bf0859-0a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:40:8c:ba:db:20:cc:57:1f:4e:70:a7:50:
4d:0c:c0:8f:8d:a0:29:20:ba:32:d4:74:7b:4b:a1:
1b:0e:f5:d9:d4:c6:62:95:20:68:fb:62:40:d8:cc:
a3:55:8d:9b:71:ae:75:45:e3:fb:ae:de:ef:2c:eb:
fc:09:52:7d:f4:45:7b:6a:9f:02:92:8d:fa:3c:22:
7c:06:eb:02:7a:6a:2f:1a:c2:93:d3:1f:6a:5d:2a:
27:8e:8b:07:53:45:70:2c:09:21:11:da:14:f9:54:
57:c1:6a:49:a2:12:56:d1:d1:da:f3:bf:b0:ce:a0:
d4:f1:2f:9e:fe:ef:61:ea:8f:bb:a3:94:07:b3:51:
05:79:b4:f9:96:0c:6e:90:42:38:cf:8d:43:6b:a4:
44:5d:87:5d:25:92:22:86:f5:6b:e0:07:cc:4b:fe:
9e:2e:fb:3a:22:0a:da:d9:4b:fb:a0:e3:7d:70:e0:
84:91:4c:7b:0e:47:77:4b:52:1d:56:58:67:95:a9:
67:76:f5:4a:bb:63:d7:e3:12:00:7c:f6:7e:4a:5b:
a6:05:99:6b:03:5e:f3:03:e4:5c:04:9f:f4:e7:c9:
76:d7:bf:de:7a:c8:2c:52:03:d2:d5:c6:3f:6b:ec:
62:be:82:91:9c:15:2e:50:19:f3:1e:11:d3:15:99:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FB:99:4F:CC:CA:4B:F5:D3:25:2A:4B:C2:0E:58:3A:F3:35:52:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6ECB87AF43C11EF967301AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b1:9e:11:9b:1d:2b:00:6e:87:24:6f:85:c8:d3:a0:3e:d9:
cc:ea:7e:e7:1c:af:73:dd:69:d0:07:c1:fb:39:5c:5b:5e:5d:
0e:f2:5a:8d:7b:b5:8a:20:c0:db:94:16:be:54:5a:c3:8a:42:
2f:fc:9c:b9:af:d3:5d:1d:57:a7:12:b3:55:26:ca:fd:55:fc:
43:c4:64:2a:2b:c9:42:05:b1:e4:00:6a:99:4f:b9:7d:a4:75:
98:d9:74:ef:67:88:e2:31:7a:aa:9d:48:c1:d2:ba:99:a8:a6:
80:bc:f2:16:05:37:23:c6:70:01:f9:95:d7:ee:94:f9:55:d7:
d8:ed:ad:14:e4:37:a7:7a:6b:73:12:9b:96:7a:9a:83:10:17:
95:f5:0d:27:aa:8f:70:d9:71:7d:8d:1b:f8:5f:e2:ab:6d:6f:
4f:ce:fe:bd:b1:2c:26:40:49:01:64:9d:df:fb:07:cd:0d:5d:
a3:a9:6a:90:86:10:c6:8b:39:96:14:2e:f6:3a:74:b1:8e:59:
c7:25:22:22:7a:9e:d6:fb:29:e3:20:a9:c3:c7:b2:1b:02:0f:
66:c6:ce:86:49:8a:95:3a:85:3d:c0:bb:7d:8b:4d:f1:c9:3d:
84:63:7e:71:98:90:6d:b0:e7:69:f7:e6:e3:3e:af:e0:c0:de:
84:64:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:26 2025 by rpki-client