Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD4A3E2F43E11EF9B337DBB762E951A.roa
File: DFD4A3E2F43E11EF9B337DBB762E951A.roa (raw, json)
Hash identifier: qrA4eVBthnFf+/OHr2WVF5n9wClmkdaEwht4C748xrU=
Subject key identifier: 02:0C:43:1B:0D:22:F4:83:6E:15:BB:C4:33:4B:B7:EB:EC:F1:B3:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01633A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD4A3E2F43E11EF9B337DBB762E951A.roa
Signing time: Wed 26 Feb 2025 12:40:35 +0000
ROA not before: Wed 26 Feb 2025 12:40:31 +0000
ROA not after: Thu 19 Feb 2026 12:40:31 +0000
asID: 984
IP address blocks: 154.208.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90938 (0x1633a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:40:31 2025 GMT
Not After : Feb 19 12:40:31 2026 GMT
Subject: CN=67bf0bc3-7eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:af:44:87:9a:f0:b7:e9:04:45:33:97:fe:
21:ea:50:2a:ad:79:55:f8:69:0b:be:9d:c6:0f:3a:
da:34:e0:1c:38:77:ef:0a:74:8a:34:c8:52:ff:72:
32:57:57:f3:f3:8f:ac:ec:e7:9e:33:b1:88:0d:c1:
1e:46:32:e2:6d:40:1b:74:4f:2b:b5:96:3a:dc:ad:
35:68:ac:46:3e:31:49:a6:d2:ae:15:f4:88:f9:a1:
4f:2a:65:90:c9:97:4e:47:13:52:b4:26:04:f4:28:
1b:8f:2a:d9:4c:31:8d:9f:2a:c9:ed:6f:89:c5:4e:
ac:af:72:32:00:4e:e8:7a:da:a8:1c:7b:c2:fe:d1:
7b:71:a2:dc:7c:04:90:5d:33:9c:3c:56:5c:84:b6:
68:d6:79:e0:a3:81:71:68:d1:70:c6:2c:2c:ff:95:
01:60:ab:d4:bd:d3:ba:8f:46:d7:c6:9f:b3:e1:f3:
3c:e8:12:64:68:f2:36:82:67:cb:e3:e1:c8:13:d7:
0a:af:b5:f4:9f:09:25:f8:2c:bd:e9:88:5e:52:a1:
f4:a9:d2:99:8d:61:1f:40:93:1b:1a:83:cc:28:13:
44:d6:a5:19:94:90:b3:dd:2a:70:12:38:a2:3a:f7:
07:02:fd:13:53:97:2e:e2:32:05:06:d3:51:f6:21:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:43:1B:0D:22:F4:83:6E:15:BB:C4:33:4B:B7:EB:EC:F1:B3:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD4A3E2F43E11EF9B337DBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e5:8a:5b:ab:b4:7d:9f:46:ac:0e:99:c4:fb:4f:e3:4f:b1:
f9:4a:f3:3b:31:86:11:9e:c4:8b:b4:e8:2a:f1:36:30:54:6d:
68:28:f7:00:b2:3a:05:10:83:1f:ec:ba:c4:6b:59:0d:af:e6:
14:8d:1c:3d:53:16:7f:c0:88:59:e6:be:fb:fd:48:e6:14:b2:
65:ba:7c:cd:49:66:92:a9:85:5a:52:ff:50:ce:2f:c3:4f:cd:
50:9f:4b:11:d5:d9:ea:00:8e:0b:b4:a1:53:aa:59:8b:5c:77:
1e:d1:79:f4:28:ba:6c:c6:8e:61:e0:a8:15:5c:57:7a:d0:cb:
14:81:6f:b7:7f:51:2e:10:05:f8:70:53:cb:d6:ab:d0:52:54:
c2:5f:50:ff:6c:9d:64:8b:ce:74:74:55:90:f6:73:bd:ce:af:
66:f4:79:ad:bf:16:53:39:87:c2:4f:24:19:83:ac:b5:43:99:
59:13:1a:c0:61:69:32:bd:b9:84:d8:85:46:f9:ea:80:a5:e0:
ea:ac:55:a9:4a:45:70:4e:55:a8:63:6d:ee:7f:1e:b2:23:bb:
a4:78:ae:ac:b8:52:0f:49:b1:70:5b:ea:d1:b9:b8:5f:39:3e:
58:e1:f2:d2:d6:12:94:6e:1e:21:0c:06:32:eb:fc:df:c0:e8:
c7:0d:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:07 2025 by rpki-client