Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F704D69EF43F11EFB73D3546762E951A.roa
File: F704D69EF43F11EFB73D3546762E951A.roa (raw, json)
Hash identifier: +ysrZOV9hBtuNg5telj12zFu9BTSjqZPsc08XmZJzS4=
Subject key identifier: F4:3A:1C:F2:81:42:D4:C5:71:21:00:1E:F5:2A:01:DF:C8:36:1C:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01634B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F704D69EF43F11EFB73D3546762E951A.roa
Signing time: Wed 26 Feb 2025 12:48:24 +0000
ROA not before: Wed 26 Feb 2025 12:48:20 +0000
ROA not after: Fri 20 Feb 2026 12:48:20 +0000
asID: 984
IP address blocks: 154.83.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90955 (0x1634b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:48:20 2025 GMT
Not After : Feb 20 12:48:20 2026 GMT
Subject: CN=67bf0d97-6604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:bd:37:ec:df:e5:4c:87:a9:35:a6:1d:60:
ad:2e:f4:61:0a:0f:e9:1e:37:18:9e:b9:e7:4f:02:
01:81:85:94:90:8f:cc:b0:26:95:eb:86:f3:47:b9:
ba:62:69:27:cc:f2:65:9d:b7:ce:27:40:ab:a6:5a:
79:78:82:e6:cd:f1:28:7c:e7:06:42:9e:3b:f9:ab:
64:a7:2e:c0:71:8d:08:2b:31:4d:af:71:f8:c5:d1:
1b:af:04:1b:05:0b:fa:7b:26:95:93:25:8b:cb:f0:
2e:e9:8b:16:59:23:83:d0:07:b0:15:f7:51:87:79:
16:87:b1:a4:91:83:18:3d:e9:b4:42:f6:eb:b0:87:
fa:4a:5e:0c:a8:1f:7f:50:2e:84:35:b5:51:a0:db:
41:7d:02:17:33:3e:63:12:74:4f:df:54:30:5b:6b:
fb:09:c9:c8:92:c6:40:5f:3a:95:45:35:34:ea:71:
67:4f:db:8b:c4:f3:3c:4e:e7:99:dc:b6:d5:61:50:
bd:04:1f:b9:83:4d:40:a6:c1:08:38:76:aa:83:42:
84:ed:f7:86:16:2e:3c:db:f2:b5:08:97:a2:f8:b5:
fd:c0:56:fa:60:d7:cd:bd:bd:80:c2:f3:d3:07:45:
c5:66:25:53:61:c1:8e:59:c4:bb:b2:77:32:61:d7:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:1C:F2:81:42:D4:C5:71:21:00:1E:F5:2A:01:DF:C8:36:1C:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F704D69EF43F11EFB73D3546762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.143.0/24
Signature Algorithm: sha256WithRSAEncryption
89:96:71:87:af:61:a1:75:fd:ae:98:32:15:80:68:a3:72:7c:
69:e5:f4:45:22:dd:f7:74:58:df:94:59:c0:dc:5f:93:dd:8e:
f6:e7:73:ea:d3:a4:51:c2:c4:58:11:75:fd:9d:4e:9f:e2:45:
6d:b4:bd:3b:11:ab:19:1c:70:f9:4e:67:f6:e5:b2:46:29:cd:
f4:10:0b:cb:9f:71:c7:a3:83:19:11:5e:5a:09:d5:64:54:4b:
53:98:cd:0b:bc:f9:a5:d0:d9:4e:4e:57:2c:e9:c1:1d:a6:f1:
d1:4a:5d:b0:d1:9b:9f:17:77:0b:b3:72:09:8b:e6:7e:24:53:
b8:cc:3f:b3:b1:37:9e:af:c2:03:fb:bd:57:9a:a1:f6:17:89:
5f:c6:b6:0d:3a:a5:b3:98:b0:17:da:b1:a7:63:f7:5d:e5:31:
97:49:50:9d:87:c3:e1:ab:07:43:a7:f1:47:b0:30:f4:3f:ba:
c7:04:c4:34:1a:8f:57:d8:a9:71:9f:35:5c:be:a1:58:bc:1d:
ee:9a:e1:c4:ce:03:ef:18:58:2e:c2:c7:39:41:16:b6:92:65:
d0:56:9a:27:6d:6c:f4:b9:6f:e0:8c:63:5e:91:45:a1:26:91:
d1:88:d9:6c:f6:f6:be:44:a8:2c:12:6b:ad:dc:f1:c9:26:85:
29:f1:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:30 2025 by rpki-client