Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0470F8CF3E811EFA7D97665762E951A.roa
File: E0470F8CF3E811EFA7D97665762E951A.roa (raw, json)
Hash identifier: xJimceWqNrt7ctnGjfkag1QyF9eZMK6UpXfX5cvGmkw=
Subject key identifier: 21:20:21:54:69:29:C4:8A:1A:22:94:EA:FA:13:6A:52:0E:F2:DA:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016086
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0470F8CF3E811EFA7D97665762E951A.roa
Signing time: Wed 26 Feb 2025 02:24:59 +0000
ROA not before: Wed 26 Feb 2025 02:24:55 +0000
ROA not after: Thu 19 Feb 2026 02:24:55 +0000
asID: 984
IP address blocks: 154.203.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90246 (0x16086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:24:55 2025 GMT
Not After : Feb 19 02:24:55 2026 GMT
Subject: CN=67be7b7b-429a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:d1:73:de:b7:06:65:31:f3:d4:ab:74:d6:
29:af:0b:33:ca:bc:0c:fc:1a:fe:15:43:6d:b6:9d:
ce:6c:b3:2b:67:00:a5:6e:1d:ac:e8:29:5e:3f:b7:
57:6c:b7:f4:c2:c7:78:cd:89:f2:31:b4:65:9c:51:
1a:a4:04:7f:be:c4:b3:82:ab:f9:c1:31:d7:8b:80:
dc:78:75:e3:9c:f3:bd:16:c5:c3:c4:56:73:83:9a:
fb:eb:f5:a2:49:3e:4a:a9:a0:b9:70:d1:fc:bc:49:
36:7e:62:eb:85:92:52:8e:ef:fd:25:1e:72:2e:a2:
d9:1c:25:7f:a6:e3:95:52:77:bc:1c:c7:50:ed:6d:
aa:d4:13:df:64:de:67:f8:93:d9:b9:d7:a9:ca:b1:
f2:9a:ea:06:35:00:27:6e:b5:25:e1:7e:84:e4:56:
e2:aa:5d:55:23:74:cd:ed:84:4e:d7:0c:0c:80:ed:
7f:e7:99:ab:f5:62:0a:26:45:a2:47:e6:27:d9:07:
7d:29:7a:b3:4c:f1:2e:09:d5:28:80:7f:6e:ec:91:
98:f9:cf:76:a0:01:c3:29:f5:42:d6:08:90:35:9c:
35:10:ee:9e:bc:31:10:11:75:ba:b2:f9:8d:06:35:
95:a9:74:66:eb:68:d4:01:75:af:7c:57:5d:ed:c7:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:21:54:69:29:C4:8A:1A:22:94:EA:FA:13:6A:52:0E:F2:DA:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0470F8CF3E811EFA7D97665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.14.0/24
Signature Algorithm: sha256WithRSAEncryption
95:fb:7e:d2:91:67:4d:1b:3d:08:a2:6b:d2:64:df:64:ae:09:
ec:bb:f0:bf:be:85:dc:b7:df:75:95:e7:74:0e:7b:cb:3a:0c:
7f:de:cd:cd:a5:5d:4b:00:de:ee:bb:8e:00:c0:d3:e8:a9:74:
56:68:fe:09:8c:5d:88:0a:96:99:99:42:3f:1d:65:b6:4e:89:
bc:b4:3e:6b:f3:c3:d7:0f:88:6d:67:22:a9:c7:0a:1a:68:91:
d9:2c:0c:6a:ef:ae:56:e1:72:7b:57:a1:2d:32:e0:ae:78:78:
93:02:f1:d7:2f:c9:01:cb:46:ca:ab:7f:6e:3a:0a:b8:26:e0:
30:a9:99:41:95:dd:06:8c:83:11:a7:53:cf:7f:eb:08:9c:3d:
50:4c:78:d5:48:a3:fe:13:49:7c:7e:37:ec:47:52:0a:23:f2:
76:69:3f:00:fe:22:8e:2c:06:1d:c2:0c:3a:23:48:76:24:9c:
7a:07:83:94:6d:4b:b2:69:6f:25:43:de:d9:5c:21:dd:9a:1d:
45:c8:c1:4b:b9:58:af:6b:1a:82:58:4c:46:cd:4e:8e:bd:2b:
87:8c:59:a1:56:98:b9:3f:86:95:9c:fa:1d:75:07:39:4b:10:
d6:6b:5c:76:8a:05:61:91:2c:d7:fa:8b:68:b4:1c:6b:c3:33:
72:77:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:40 2025 by rpki-client