Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED1A0E0F43711EFA675248B762E951A.roa
File: EED1A0E0F43711EFA675248B762E951A.roa (raw, json)
Hash identifier: Q1pmU4XRCC9i+o4gXVsQQFtIn/PlL8X11fMWTgZAvAo=
Subject key identifier: 90:D7:90:B8:14:98:FD:86:D7:6F:BF:73:71:BB:BB:7D:B2:2D:EE:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED1A0E0F43711EFA675248B762E951A.roa
Signing time: Wed 26 Feb 2025 11:50:54 +0000
ROA not before: Wed 26 Feb 2025 11:50:50 +0000
ROA not after: Thu 19 Feb 2026 11:50:50 +0000
asID: 984
IP address blocks: 154.208.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90824 (0x162c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:50:50 2025 GMT
Not After : Feb 19 11:50:50 2026 GMT
Subject: CN=67bf001e-a240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:4c:23:fb:33:b6:a6:39:1a:db:09:9d:8b:
d1:ba:71:96:db:d4:bd:48:82:86:13:a8:ee:5a:4b:
35:33:4a:b8:1b:6f:dd:c4:cb:af:01:5e:97:a2:21:
99:1b:a1:d8:87:08:99:62:e7:b8:0a:d6:85:ba:a2:
fa:be:82:7a:42:30:f0:50:73:4d:9d:cb:12:7b:2b:
33:57:3c:24:d5:79:d4:d8:e1:f1:9b:af:c7:32:19:
91:95:a7:f1:09:30:15:82:09:c9:26:e0:d1:e4:8a:
44:ff:5f:a0:82:a5:47:82:e3:af:fb:fd:e9:14:eb:
85:6f:d3:28:0c:31:0d:5a:5b:ea:39:7d:7a:d6:78:
14:87:a0:f6:7f:6d:a2:e1:a1:c7:67:b9:b6:42:46:
58:df:84:90:cc:1f:76:b5:a0:d8:b3:e8:0b:36:31:
17:08:2a:3d:d0:ab:a4:f7:b1:91:19:ae:7a:db:6b:
c1:1d:bd:67:5f:26:6a:f8:b5:de:6c:74:35:1e:ee:
3f:51:3a:56:28:8a:11:59:81:22:b6:4f:4a:42:e1:
53:ef:44:cb:e3:52:51:9b:39:08:ed:11:ed:ca:42:
7d:a8:ba:92:c3:5d:c3:16:5d:9f:12:67:63:5e:a5:
70:ab:39:6a:a1:e9:fa:c4:ad:2f:a3:54:2c:0b:db:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D7:90:B8:14:98:FD:86:D7:6F:BF:73:71:BB:BB:7D:B2:2D:EE:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EED1A0E0F43711EFA675248B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.104.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d6:96:27:0e:aa:a2:81:f6:f6:55:cf:8a:50:60:b9:4e:b8:
28:5f:1a:4c:28:2e:7a:19:8d:1c:a4:8d:6f:09:86:82:c1:a5:
02:d7:3a:a7:7f:0f:79:33:d2:e5:42:31:ad:dd:ac:e0:37:26:
aa:97:20:dd:34:6f:58:b1:f4:3c:91:1c:85:67:ff:34:ac:04:
0a:c9:79:8d:90:78:c7:3e:97:91:dd:ef:55:e3:94:54:d0:d5:
55:ed:af:ae:d1:c1:42:cc:21:90:6d:d8:8d:2b:23:62:01:cb:
9b:6b:9a:84:65:86:23:7d:7c:22:fa:a1:49:98:47:63:c9:74:
fe:e4:07:15:29:77:41:d7:74:9b:28:42:8b:2f:e8:fb:88:fb:
84:5f:4f:cd:37:65:45:76:f8:49:39:13:7e:f2:88:3d:fd:45:
52:06:76:48:4a:d4:95:a0:d4:87:99:d8:2f:76:d4:2b:c2:76:
0e:1c:a7:b2:15:ca:33:3d:ca:cf:60:bb:c1:27:41:71:47:07:
6e:5e:7b:9f:88:dc:d9:fb:7a:e4:1d:04:16:ef:41:35:7c:84:
39:a0:3a:41:fc:90:f6:f1:77:75:77:88:05:27:ef:35:a8:5f:
f3:c9:cc:17:77:90:94:e6:7d:61:5d:74:f6:bf:f1:9c:e5:bf:
62:25:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:24:02 2025 by rpki-client