Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6B2A3C2F45011EF950FC6BB762E951A.roa
File: F6B2A3C2F45011EF950FC6BB762E951A.roa (raw, json)
Hash identifier: +I6+Z/AaPnm8NN4pqqI3FVpEKMsf+rzrcMKSJfUBFD8=
Subject key identifier: 61:25:A3:86:46:1F:A3:A4:28:E1:AE:37:D8:98:B9:90:A4:3C:AD:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016481
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6B2A3C2F45011EF950FC6BB762E951A.roa
Signing time: Wed 26 Feb 2025 14:50:04 +0000
ROA not before: Wed 26 Feb 2025 14:50:01 +0000
ROA not after: Thu 19 Feb 2026 14:50:01 +0000
asID: 984
IP address blocks: 154.210.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91265 (0x16481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:50:01 2025 GMT
Not After : Feb 19 14:50:01 2026 GMT
Subject: CN=67bf2a1c-53ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:ff:b1:53:a8:2e:d5:54:df:f1:33:4e:de:
2f:88:21:41:9a:88:5d:20:88:4e:e2:3a:29:cc:9d:
65:3c:3e:2c:c0:94:fc:0f:d8:25:36:09:59:45:00:
8d:ec:26:8e:e9:7d:91:72:6e:3d:2b:98:ba:8c:d4:
39:3b:15:47:fb:06:50:77:90:c3:f5:24:e5:92:02:
7b:98:74:8f:91:18:e4:df:d5:f4:f1:88:89:3e:81:
82:13:c8:13:82:ac:fa:b9:9e:21:fe:46:cb:d7:5e:
c3:b1:2e:79:8e:6f:ce:9e:f1:af:13:4a:76:79:d5:
b7:72:ed:93:e0:7a:ae:a3:fe:63:38:27:3f:5e:14:
ea:9b:4e:2e:6e:a3:23:d4:bc:b8:1b:f7:8e:a0:59:
8d:dc:21:d6:cd:fc:5f:a6:42:18:f0:96:70:2c:60:
8b:ee:b2:d4:07:ed:c2:e7:b5:6d:18:f3:4e:e9:56:
08:86:2c:09:f9:15:d6:c7:62:43:e0:47:fd:aa:ec:
80:d2:91:23:3f:1d:bc:b0:c9:ba:17:7a:a0:27:a6:
86:70:2c:15:c3:21:13:c4:f3:16:27:4e:17:77:66:
e4:5f:d0:bf:7f:8b:08:fe:cf:34:ef:a2:e6:4c:a4:
08:5d:0c:de:6b:88:29:31:75:79:b6:eb:cb:38:f3:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:A3:86:46:1F:A3:A4:28:E1:AE:37:D8:98:B9:90:A4:3C:AD:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6B2A3C2F45011EF950FC6BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.61.0/24
Signature Algorithm: sha256WithRSAEncryption
70:db:ba:b0:a0:ef:d5:0b:47:05:97:09:1b:f1:c0:c4:04:97:
7d:b6:99:b4:a0:5d:cc:27:99:c7:f8:b9:77:53:fc:8e:24:90:
e1:28:f4:ca:35:95:ff:e7:1d:4d:00:52:ab:c5:eb:25:c6:f1:
13:f5:c7:bd:82:8e:18:34:91:e9:7d:32:4a:30:f1:aa:91:ad:
d2:45:fa:32:4c:7f:78:e8:85:81:3a:3a:f9:29:a9:e0:e8:96:
e8:e0:63:40:b5:a1:93:b7:4d:4a:81:94:43:4a:1f:37:2d:4b:
60:32:94:1f:b4:3c:81:99:0d:a1:4d:8a:eb:a1:64:52:75:3c:
76:61:99:fd:5e:4d:33:e9:7d:18:b3:17:98:04:bc:63:6f:f7:
1a:54:2b:5a:fd:a8:ed:3b:4c:f9:c6:40:9a:31:89:a6:89:5e:
bd:53:d2:0c:5b:1d:36:b3:89:b8:c8:a4:42:f1:cf:50:a9:c0:
db:d7:1a:3a:1f:ff:59:b0:78:34:1a:d4:11:da:a0:b5:e6:b9:
cc:a8:a8:a6:bb:28:3e:b4:5b:a9:b7:40:34:4b:cb:cf:3d:0b:
0f:88:66:f0:eb:a4:f9:f6:e3:f2:db:a7:3e:dc:1b:ee:4d:74:
cc:08:fc:3e:e8:d8:94:33:34:a0:39:f4:63:55:fc:20:49:fc:
37:fc:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:07 2025 by rpki-client