Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E134AAC2F3D811EFACA0486C762E951A.roa
File: E134AAC2F3D811EFACA0486C762E951A.roa (raw, json)
Hash identifier: bncr//6AdrRue8xJ9NkYv1fl7I91rf+Nh9rIRtKQtII=
Subject key identifier: E2:27:B7:50:F6:74:0A:A2:41:05:2D:48:48:B9:68:65:74:1A:93:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01603D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E134AAC2F3D811EFACA0486C762E951A.roa
Signing time: Wed 26 Feb 2025 00:30:29 +0000
ROA not before: Wed 26 Feb 2025 00:00:25 +0000
ROA not after: Thu 19 Feb 2026 00:00:25 +0000
asID: 984
IP address blocks: 154.92.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90173 (0x1603d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:25 2025 GMT
Not After : Feb 19 00:00:25 2026 GMT
Subject: CN=67be60a5-b49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:26:8f:de:02:cd:68:fa:7c:34:91:27:31:
6e:4e:96:b5:a8:68:2c:fe:13:59:ce:31:3c:9e:05:
1a:ef:ed:3d:4a:20:af:27:91:20:a1:8e:61:e3:b5:
e2:df:94:3f:63:79:a9:39:ca:29:d2:11:06:a6:77:
98:b2:eb:06:72:b2:7f:e7:8c:75:52:10:75:fe:11:
4a:f1:e7:b2:2c:c7:db:8c:23:8a:5e:be:e9:89:2c:
4d:f2:b5:eb:09:36:50:f1:39:90:37:4f:5b:27:94:
4f:3c:2b:88:a3:c1:42:c8:f5:b5:24:95:d7:48:84:
25:68:d1:35:c5:81:2b:9e:8d:1c:a8:10:83:dc:1b:
f4:84:35:70:65:25:0e:ee:c1:59:a5:a1:97:a6:c0:
e2:01:e5:dc:1d:79:4c:a8:14:1d:9a:31:22:c2:2d:
27:af:99:e5:c6:be:6d:03:01:27:05:1c:14:d1:55:
10:c2:1a:b9:d5:b7:09:5c:fb:a8:f3:1f:60:1c:05:
b6:90:3d:9a:be:90:10:6a:39:78:e1:28:47:c5:e3:
ce:81:ef:a9:d9:20:a9:5e:a2:bc:8d:4f:e7:46:9b:
32:04:59:c8:88:d0:28:19:7b:d0:c8:77:91:2f:7a:
56:27:40:82:d5:f9:19:dc:31:c4:fe:95:6c:ee:1e:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:B7:50:F6:74:0A:A2:41:05:2D:48:48:B9:68:65:74:1A:93:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E134AAC2F3D811EFACA0486C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/24
Signature Algorithm: sha256WithRSAEncryption
14:23:68:c2:6e:74:57:b1:d1:b6:e1:86:0c:40:92:cb:67:c5:
7e:0a:53:01:99:c0:22:1f:92:14:18:1f:b5:55:89:ae:57:d4:
94:43:06:0c:45:9a:ca:b9:fb:0b:41:1f:54:ca:68:4f:86:09:
0e:68:c6:c6:f5:f3:89:4b:72:c4:4e:ac:df:bc:96:54:d1:d5:
3f:1a:ec:27:74:19:9e:c0:26:cb:a5:bd:53:a1:98:3f:9f:9c:
b2:c3:c7:29:27:99:59:d2:ed:25:73:05:6c:73:45:62:f9:b3:
71:b6:bb:4d:4e:23:c3:20:b5:1a:c9:d5:df:58:e3:4e:d6:2e:
8e:ec:f1:55:97:00:6b:a4:fa:ed:c1:3f:7b:fb:c1:98:d5:1b:
14:06:b8:30:f0:2e:95:a1:d2:7f:9f:a3:3b:69:fb:e5:95:6e:
0d:cc:6b:eb:69:b2:a1:9d:74:88:31:47:76:61:a2:d0:f2:ec:
6c:7f:e2:29:8f:4e:70:a9:05:ea:51:d9:32:8d:c4:b4:d5:8c:
ea:bd:bf:60:7d:be:57:b4:6f:c4:44:72:38:cc:47:b1:06:38:
87:ba:83:86:7f:25:77:a1:a0:3b:37:ea:3f:4c:1e:12:f0:c8:
07:d4:7c:2b:cb:05:d1:1e:f0:29:fa:7d:50:6c:b7:69:62:51:
de:52:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:25 2025 by rpki-client