Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8D07170CDBD11EFA3E2BD6B762E951A.roa
File: F8D07170CDBD11EFA3E2BD6B762E951A.roa (raw, json)
Hash identifier: Cl5lKV/OGJbO2UFR8YGpOxlsGNs/tgnMc5OZJkehcTc=
Subject key identifier: 3B:41:9B:CD:76:54:44:A9:E5:5C:ED:92:BD:C5:28:3E:7E:36:29:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8D07170CDBD11EFA3E2BD6B762E951A.roa
Signing time: Wed 08 Jan 2025 12:42:08 +0000
ROA not before: Wed 08 Jan 2025 12:42:04 +0000
ROA not after: Tue 16 Dec 2025 12:42:04 +0000
asID: 984
IP address blocks: 154.200.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79608 (0x136f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:42:04 2025 GMT
Not After : Dec 16 12:42:04 2025 GMT
Subject: CN=677e72a0-b7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:e8:bd:09:3e:52:c0:fa:1d:b6:08:5c:64:
64:43:70:a4:cd:25:b0:bd:b6:0b:5f:4b:c5:96:11:
cd:4d:78:61:c8:6c:d7:db:a3:89:a8:4c:9f:21:f6:
f9:ef:ab:9f:c3:cb:ef:33:82:a6:93:74:5f:3a:c5:
6b:5f:bf:b4:a0:28:c1:fe:0d:7a:99:98:55:2a:9a:
7b:86:35:e3:1f:94:79:72:a4:d0:b0:1c:09:32:76:
2d:da:39:9e:5f:f2:dc:b3:92:35:68:11:46:6d:62:
08:01:6a:b3:11:5c:9f:f9:64:4f:25:a4:05:54:f0:
b3:cb:59:35:4a:d6:c7:02:51:c6:2a:a9:53:ec:bc:
29:87:29:0d:09:88:73:0c:53:0e:cd:9c:e0:9b:f7:
3a:55:de:b5:85:9b:e4:a1:99:0c:2f:3b:de:93:7f:
b2:22:04:15:63:5d:70:73:9b:e4:0d:e9:66:3b:72:
2d:7c:77:ee:f8:49:93:6c:b0:0b:4b:4a:c8:71:77:
6c:44:c8:bf:85:83:9d:df:aa:90:8a:fa:62:36:b4:
9c:74:76:15:8e:f8:58:86:e1:26:ae:da:81:6c:9e:
6c:b1:49:39:c1:73:a1:a5:ea:8d:3a:db:fd:28:0e:
52:12:d6:c7:16:2d:d0:59:4c:7b:95:a4:cc:ee:32:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:9B:CD:76:54:44:A9:E5:5C:ED:92:BD:C5:28:3E:7E:36:29:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8D07170CDBD11EFA3E2BD6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a7:6f:0a:1b:0e:d0:9f:e6:e9:ed:31:3b:97:17:db:f4:6a:
d9:92:e9:53:a6:ca:31:e9:5f:18:5f:e2:53:8d:28:b0:09:12:
c0:a1:f2:77:c1:24:fd:90:b5:44:f0:82:33:45:4a:dc:55:a5:
3b:22:34:ba:d4:0b:4f:21:e5:93:0c:c4:8a:9f:a6:9e:30:d4:
02:22:22:02:49:e7:08:8c:5a:89:14:7b:73:85:2f:a3:43:88:
ba:9f:df:73:8c:f0:17:b8:d8:da:59:14:8f:3a:29:ae:6f:b1:
b1:a4:f5:99:80:43:3d:85:05:af:b8:4b:a6:24:de:f1:c1:93:
ec:46:cb:65:b5:64:3d:a0:85:e1:44:78:1d:3a:10:16:af:30:
82:37:95:cf:73:ba:ab:f8:ff:eb:81:9b:a3:ed:53:85:4c:bf:
89:61:6b:f0:03:80:fd:07:ea:70:01:52:2e:c5:06:dd:27:8b:
b6:9e:b1:60:2b:9f:d5:87:ca:93:4e:d2:c5:f5:49:ca:d2:5d:
97:e2:c7:91:c7:d0:7d:91:a1:51:02:be:54:f2:ca:62:40:f6:
60:24:07:85:70:4b:11:da:05:b3:fb:d3:85:6e:40:fa:d1:ca:
f9:e0:74:b8:9c:9f:5b:3c:45:e4:e9:11:a0:aa:dd:b8:45:c6:
ff:24:b5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:58:24 2025 by rpki-client