Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E15315E8F42311EF92334C81762E951A.roa
File: E15315E8F42311EF92334C81762E951A.roa (raw, json)
Hash identifier: Sn0OA9QVZYIrzFJY3qyHYmPcnRucFNKj31MDx6Cv1nk=
Subject key identifier: 67:A7:73:8E:44:5C:C8:A5:7A:DA:0F:A5:AC:A0:D2:D3:DC:B4:22:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E15315E8F42311EF92334C81762E951A.roa
Signing time: Wed 26 Feb 2025 09:27:21 +0000
ROA not before: Wed 26 Feb 2025 09:27:18 +0000
ROA not after: Thu 19 Feb 2026 09:27:18 +0000
asID: 328608
IP address blocks: 154.200.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90572 (0x161cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:27:18 2025 GMT
Not After : Feb 19 09:27:18 2026 GMT
Subject: CN=67bede79-2452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:44:bf:72:7c:bc:7e:df:03:42:a6:58:dc:
3a:ca:7d:46:0f:c9:1d:cd:95:93:02:9d:53:08:f2:
ee:7f:3c:d1:a2:ea:07:8a:ab:cf:1e:1a:f7:c9:02:
5d:c6:4c:92:c6:3d:94:08:7c:88:6c:ad:d8:f2:1e:
66:18:36:a8:90:8e:28:b7:1d:e5:ec:52:5a:1d:b7:
c1:91:f2:6e:0c:2f:cc:23:3e:9c:cf:e8:84:25:47:
90:bc:3c:29:de:1d:a6:78:46:0c:bd:0c:49:96:7d:
2f:a1:bc:b4:04:05:6b:be:39:35:45:72:f8:d2:52:
50:5a:5f:71:0b:6c:da:33:4b:96:7b:9d:4a:15:5c:
8f:d2:94:0b:c5:f8:9e:48:ef:4c:89:86:57:cc:18:
37:9a:d9:63:97:7e:16:af:a3:7e:0b:19:de:f5:f8:
55:44:80:cc:94:eb:ae:2b:98:60:f5:7a:c2:0d:71:
0e:f7:c0:32:bb:7b:ec:cc:5a:9f:0a:32:b1:14:bd:
68:65:a1:12:48:10:bf:05:ce:6f:d5:0a:d2:c9:19:
d6:ae:0a:f8:40:74:97:5b:8c:70:9b:69:20:9b:d8:
11:5e:ab:2a:e6:de:e7:27:58:39:00:60:d0:2c:6e:
6b:81:de:03:8a:fe:36:a5:1d:d8:06:8e:8c:c6:27:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A7:73:8E:44:5C:C8:A5:7A:DA:0F:A5:AC:A0:D2:D3:DC:B4:22:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E15315E8F42311EF92334C81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.229.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b9:19:ee:66:4e:1a:c1:c5:8c:24:eb:a5:d4:43:20:8e:4c:
70:c1:ac:24:fb:db:23:9e:5c:60:55:26:28:90:e7:87:13:bf:
cd:e9:27:9b:69:74:77:06:34:8b:0f:92:d4:10:7f:c7:d7:f3:
22:2d:2d:74:eb:db:44:82:5d:20:c9:0a:74:55:8f:8e:67:54:
3a:77:66:f2:0a:cf:a9:56:ef:80:ee:7e:2b:de:a0:5d:bf:e2:
ac:30:bb:14:7c:e0:33:69:db:58:33:1c:65:f1:44:18:85:d4:
9b:b0:23:dc:36:95:b9:f1:40:d3:60:80:b0:8a:ad:5e:78:be:
35:1e:dd:e3:14:b9:e1:f4:fd:af:12:ac:a1:dc:8c:5f:2e:9e:
e9:4e:99:6f:4c:78:5f:57:3f:a3:55:75:f6:b5:ac:b5:b9:a8:
15:6d:03:a3:f5:49:12:cf:a3:e0:43:2a:dd:61:dd:13:9d:9e:
87:b5:64:91:69:bd:84:0b:3b:d1:92:03:1e:3a:34:7f:1a:ce:
b0:84:59:37:71:a0:c6:df:70:7f:7b:a8:3c:d5:2a:d0:d8:30:
eb:64:1d:ca:66:b4:7c:a7:11:6b:84:60:6d:1c:78:c0:61:5f:
63:c1:84:26:75:03:f0:33:ca:19:b1:06:6b:45:fd:1c:d4:66:
8b:dc:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:09 2025 by rpki-client