Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09EC1AEF43911EFB7E62299762E951A.roa
File: E09EC1AEF43911EFB7E62299762E951A.roa (raw, json)
Hash identifier: nCxp5YHZ/TcaAiwu8JEbo7RlMq0YYbct9oyB6fKZaug=
Subject key identifier: 2C:31:6C:D9:3E:24:C6:A2:BF:2F:61:E5:C4:40:0A:19:C4:92:AF:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09EC1AEF43911EFB7E62299762E951A.roa
Signing time: Wed 26 Feb 2025 12:04:49 +0000
ROA not before: Wed 26 Feb 2025 12:04:45 +0000
ROA not after: Thu 19 Feb 2026 12:04:45 +0000
asID: 984
IP address blocks: 154.208.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90859 (0x162eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:04:45 2025 GMT
Not After : Feb 19 12:04:45 2026 GMT
Subject: CN=67bf0361-151e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:fd:c5:d6:26:cc:ca:0d:14:a4:a9:b7:53:
f7:1b:1f:85:c4:3b:79:f0:c6:cc:57:46:5c:78:32:
fc:14:e1:2d:71:72:50:fd:8f:f2:bb:d0:62:45:9c:
77:2a:80:5a:48:cc:d5:19:47:a0:0a:40:57:7c:a7:
94:c4:ce:9b:5c:67:d0:03:88:ba:1e:15:57:9d:ce:
86:01:85:cc:17:65:79:96:f1:96:03:c3:7e:05:84:
ae:f4:fb:ec:21:92:62:40:df:8c:52:7c:d3:22:29:
22:f8:cc:85:dc:ef:41:62:9c:05:10:cf:ea:b8:1b:
87:03:78:a4:41:77:78:78:c2:7c:2a:0b:06:c3:e0:
fd:76:91:06:e5:fd:22:02:35:e2:4c:df:49:a9:05:
99:be:2c:83:ee:82:75:db:92:85:23:3c:fe:24:9c:
42:c9:2a:18:b8:6a:6c:6a:63:4e:65:aa:20:7e:4b:
8a:3d:c4:08:f0:fe:e8:a4:97:bc:9c:14:57:7f:15:
6f:b0:6d:fd:e5:6c:15:f2:54:62:07:be:c6:4f:79:
c3:2e:eb:a3:5d:bb:28:14:31:8f:61:b7:e0:80:4e:
d7:0d:76:95:41:d5:68:79:1a:eb:89:a9:92:d2:1d:
e9:74:50:ab:38:98:b1:1a:aa:9c:41:fd:17:e4:92:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:31:6C:D9:3E:24:C6:A2:BF:2F:61:E5:C4:40:0A:19:C4:92:AF:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E09EC1AEF43911EFB7E62299762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.112.0/24
Signature Algorithm: sha256WithRSAEncryption
03:20:8f:82:cb:75:1c:62:61:40:9a:88:05:a6:fa:f1:9d:9f:
e9:ba:1c:09:2c:69:87:f7:3b:ad:71:b5:2d:39:d1:2b:ec:89:
93:fc:e6:5f:4b:6d:c0:44:31:f8:0a:b0:9d:bc:e2:f0:4c:7a:
62:63:9a:a8:5b:8e:76:72:68:dd:df:a1:18:4c:43:0d:27:61:
42:15:c3:a5:c8:98:54:2e:7f:44:bc:37:c1:76:47:59:68:34:
61:71:06:2e:67:ce:db:87:7f:cf:e5:18:ca:d2:d6:3c:b3:b5:
d4:30:a7:5b:24:8a:6e:cb:95:a8:0b:7b:93:c2:fc:72:bd:c8:
f3:2e:70:0b:78:61:b2:44:ae:0e:61:a7:0e:94:28:82:bb:2b:
81:e1:67:ce:11:c5:ec:1f:b3:c6:75:37:20:64:7b:6f:6d:86:
ae:eb:d6:9a:d9:5c:e9:4c:79:b0:bc:3f:f6:6b:c6:27:37:53:
4d:9b:65:16:34:51:e6:c8:15:ad:65:ae:09:0d:47:a2:9d:7f:
73:5d:5c:1b:7c:9c:fc:74:f3:5d:03:3d:ab:2c:2b:ef:12:c7:
2d:a1:83:0e:ed:3e:97:af:4c:e7:ad:14:27:0f:a1:3d:67:61:
64:9d:ec:6f:b1:1d:0c:c5:89:21:c0:a5:c1:99:bc:0f:66:18:
77:6c:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:11 2025 by rpki-client