Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD1B7CB6FF1311EF8E482485762E951A.roa
File: FD1B7CB6FF1311EF8E482485762E951A.roa (raw, json)
Hash identifier: UHWdthpHIBC4lZTfUd04uweEcmribFmGzbZ4B0/WSn0=
Subject key identifier: 2E:9E:FE:04:C1:CD:AC:B9:ED:5E:5D:B1:F3:E1:6A:B7:19:B1:A5:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017393
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD1B7CB6FF1311EF8E482485762E951A.roa
Signing time: Wed 12 Mar 2025 07:31:19 +0000
ROA not before: Wed 12 Mar 2025 07:31:15 +0000
ROA not after: Thu 12 Jun 2025 07:31:15 +0000
asID: 398478
IP address blocks: 154.199.208.0/20 maxlen: 24
154.199.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95123 (0x17393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 07:31:15 2025 GMT
Not After : Jun 12 07:31:15 2025 GMT
Subject: CN=67d13847-025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:60:0c:bc:4b:38:42:09:70:0b:72:48:11:
ac:b6:f0:08:da:8a:39:48:a6:f0:b1:0a:9d:a5:c8:
25:05:08:11:09:4e:2f:1c:93:72:9d:47:e3:34:da:
24:13:00:20:d0:1c:69:c6:09:0b:b9:03:fb:41:ea:
3e:73:f8:66:10:50:48:ce:60:a3:2b:b9:1c:e4:19:
ab:6d:05:bf:10:aa:e9:40:5a:3a:29:e4:fb:49:43:
d1:2a:e0:09:3b:dd:3c:12:27:d0:0d:36:4b:2e:f3:
f2:05:02:35:a2:a7:99:34:2c:5f:99:7e:e9:4e:f0:
e2:14:bb:96:a7:9f:fb:dd:67:31:ee:57:fd:29:43:
ce:44:22:87:b9:36:32:88:e9:28:8f:3e:d7:e6:73:
5e:e1:b3:1a:21:4b:47:92:b8:26:95:90:6c:ea:dc:
b3:6b:00:00:83:0a:0e:c7:3e:57:4f:ed:6d:04:43:
2a:34:14:d2:39:b4:f0:c7:8c:2d:67:66:71:55:de:
e9:47:3b:a7:85:53:de:79:3b:fb:a1:aa:4f:22:80:
49:8b:6a:3a:b7:22:cf:b4:3f:11:b7:d2:bd:95:02:
9c:92:11:f6:41:4b:80:2e:7a:6b:e0:89:01:62:88:
02:41:e0:31:e1:bc:c7:11:a2:11:66:89:47:58:b8:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9E:FE:04:C1:CD:AC:B9:ED:5E:5D:B1:F3:E1:6A:B7:19:B1:A5:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD1B7CB6FF1311EF8E482485762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.208.0-154.199.255.255
Signature Algorithm: sha256WithRSAEncryption
d0:3f:41:bb:13:fe:34:c4:45:fc:e1:fb:cd:14:3a:f1:7b:fe:
d3:14:71:56:37:1f:04:a8:89:57:ba:cc:98:c5:30:f0:25:a7:
2e:1d:f0:37:bb:c3:01:ba:22:41:c1:45:79:a4:9a:d9:50:e3:
be:10:b0:6c:48:24:37:53:7f:1a:7a:35:b7:01:fc:c6:21:59:
4e:ef:0d:71:96:52:fc:d5:e0:3d:80:7d:6c:f1:19:ad:84:cb:
2e:ab:a5:f0:f7:03:33:a6:59:60:4c:7e:9c:e0:68:3b:34:12:
ea:23:19:2c:d3:a8:3c:1e:ad:55:ff:ba:fe:1c:df:8b:eb:c0:
50:3e:41:b8:82:fd:9b:28:66:c0:f0:2b:50:17:a6:38:ba:a3:
f0:6b:d2:31:47:dc:77:d3:74:a9:2e:65:09:e1:29:3f:37:69:
b7:75:f6:16:a1:a3:ab:21:60:49:ce:26:03:12:e6:aa:4f:a5:
ed:7d:8c:3d:97:30:2e:db:cc:39:b8:54:93:87:53:f8:c2:90:
13:50:64:8f:1b:62:ec:f7:a5:f9:a8:1a:20:49:b1:83:cd:0c:
d3:a3:cc:bb:e2:83:f0:56:76:cb:8c:14:12:ad:90:5b:2a:f1:
62:e6:77:b1:6a:98:b4:4a:ec:2c:3b:e4:cb:ef:7e:2c:02:3b:
ac:61:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:53 2025 by rpki-client