Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6543FC8F43B11EF9E768DA7762E951A.roa
File: E6543FC8F43B11EF9E768DA7762E951A.roa (raw, json)
Hash identifier: +iSXbTbPgJjS1VsSNDkfhRUNpEDQVPa5GaLJUAQ3MeQ=
Subject key identifier: 4D:83:57:00:A6:53:78:51:BE:6B:8E:4D:52:D5:A3:BA:EC:21:25:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01630B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6543FC8F43B11EF9E768DA7762E951A.roa
Signing time: Wed 26 Feb 2025 12:19:18 +0000
ROA not before: Wed 26 Feb 2025 12:19:14 +0000
ROA not after: Thu 19 Feb 2026 12:19:14 +0000
asID: 984
IP address blocks: 154.208.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90891 (0x1630b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:19:14 2025 GMT
Not After : Feb 19 12:19:14 2026 GMT
Subject: CN=67bf06c5-0d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:05:db:6e:da:4d:21:ca:a3:1b:83:74:29:
f0:3a:bc:1b:ce:7e:3b:63:52:d0:92:c6:6e:d5:24:
2a:91:8b:42:a7:fa:9b:0d:93:3a:a9:8d:f0:a6:13:
35:b7:82:b1:de:57:32:32:d5:1f:0e:74:df:bf:26:
dd:f3:6e:ba:00:91:3d:25:ab:4e:3c:d6:cb:a3:50:
be:c8:63:a9:7b:87:f4:db:d6:95:cb:98:4c:5b:bd:
95:31:58:31:89:47:f5:95:83:40:82:3c:03:71:7a:
b9:a2:5d:ef:3a:50:73:7d:83:59:3d:2a:09:6b:8c:
c9:02:34:4a:32:20:14:9d:7f:d6:33:39:36:30:6d:
31:62:3b:e3:e6:ca:30:ac:39:43:c6:4a:ba:66:4a:
1c:b1:27:1e:79:4f:7d:0a:39:7a:49:26:61:b7:61:
82:f9:67:16:7b:d6:09:fe:a5:fd:a5:5b:fa:2f:63:
78:76:e4:a7:10:7e:c5:46:ef:82:53:79:6a:d2:f7:
3d:3a:11:a1:80:56:44:96:81:83:b9:f7:75:b2:28:
8b:8d:7b:16:63:7a:2e:ba:a7:20:b1:63:0c:7d:20:
77:cc:ac:19:50:74:97:57:cc:35:70:f7:dd:5b:6c:
21:9a:b8:65:01:b7:b3:04:49:6f:55:2d:d2:48:00:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:83:57:00:A6:53:78:51:BE:6B:8E:4D:52:D5:A3:BA:EC:21:25:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6543FC8F43B11EF9E768DA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.117.0/24
Signature Algorithm: sha256WithRSAEncryption
33:30:0f:40:eb:1e:9c:00:bd:dc:97:32:af:33:3d:32:74:41:
8b:f2:ce:e4:c9:1c:62:c7:a7:3d:3b:1f:df:70:85:f8:c5:2d:
56:ab:3a:b8:23:a4:5b:08:d1:99:41:f9:ef:df:10:2c:48:df:
f4:a8:1f:5e:48:26:85:23:b3:29:a1:62:d1:dc:e2:d4:49:c8:
16:dd:ca:d9:b4:00:ca:ac:8b:48:53:ed:80:a5:b7:9c:73:0a:
47:b5:22:d8:db:92:cb:f4:9c:6e:f3:e6:36:10:d9:c2:a6:25:
34:e5:0d:21:a4:01:59:e2:fe:e8:34:6c:c5:6a:45:04:b3:b7:
46:28:1b:dd:58:a3:96:8c:f2:6a:49:fa:eb:07:2a:49:c3:5b:
6d:fc:71:1d:7f:07:a4:11:57:f4:29:41:9a:fd:71:c5:8b:f0:
93:d7:28:1f:86:14:6f:2a:05:d9:b2:ac:4c:97:10:49:6e:00:
f2:20:88:0e:8e:81:d4:3f:04:56:52:6d:98:e7:17:6e:ce:e9:
17:9e:13:9c:35:58:61:61:60:2b:57:7e:9a:67:5c:da:7f:b0:
fa:5c:ad:9e:da:59:9b:41:d7:f4:d7:c4:1e:25:c5:d6:19:89:
61:ce:0d:78:8e:b8:df:48:07:9d:3f:b3:ee:6d:11:42:aa:78:
3f:f9:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:37 2025 by rpki-client