Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD3DE56ED1311EF81664996762E951A.roa
File: FFD3DE56ED1311EF81664996762E951A.roa (raw, json)
Hash identifier: zlqWGpA+8bP0hCJpyx8GkLIjn5sBeESoFgbBMpyqocY=
Subject key identifier: DA:1E:8A:22:7F:CB:A1:3D:16:EC:F9:03:CA:C3:F9:C0:D9:FB:F6:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0157EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD3DE56ED1311EF81664996762E951A.roa
Signing time: Mon 17 Feb 2025 09:46:02 +0000
ROA not before: Mon 17 Feb 2025 09:45:58 +0000
ROA not after: Sat 23 Aug 2025 09:45:58 +0000
asID: 152920
IP address blocks: 154.208.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88044 (0x157ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 17 09:45:58 2025 GMT
Not After : Aug 23 09:45:58 2025 GMT
Subject: CN=67b3055a-a30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:09:bb:d5:21:7c:64:42:1c:10:f2:a6:e3:
fa:e7:85:17:ba:6d:27:75:bc:1f:52:1e:0b:f5:c2:
65:dd:18:2c:f0:00:1d:11:44:12:c7:df:82:5e:82:
5c:52:d3:6c:d2:7f:64:41:5b:4b:a1:d2:ab:f9:59:
d4:8b:a3:81:64:ed:2e:d3:dc:92:0e:59:d9:d2:a1:
f7:33:2a:89:66:4f:8a:54:1a:de:2d:2b:f5:1f:55:
ca:48:22:51:57:43:0b:a5:c8:bc:01:b3:d2:27:ba:
2c:a9:2f:28:0c:f6:0f:e3:12:f7:ae:a6:f6:63:f4:
7a:05:e7:29:0b:e7:c4:52:0b:76:f8:71:1b:3c:12:
4b:27:90:64:47:7e:d7:ce:a5:8b:c5:7a:80:b8:0b:
8a:ae:7f:26:54:ca:ca:7f:48:b9:32:5e:e6:14:9a:
9e:82:0c:8c:33:01:b3:38:ba:99:1f:31:fc:29:75:
45:cd:eb:52:9c:98:d0:5c:21:a3:ce:8c:db:83:97:
d3:ef:22:3f:96:0b:eb:26:01:46:44:f3:18:de:b6:
27:ca:21:a6:74:f2:63:c9:c0:e6:c3:c0:81:30:cd:
09:47:64:fe:26:8f:24:37:98:bf:f1:da:b5:f5:a2:
a6:f7:ea:32:c8:75:b7:1f:af:56:ec:1d:c3:2c:ab:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:8A:22:7F:CB:A1:3D:16:EC:F9:03:CA:C3:F9:C0:D9:FB:F6:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFD3DE56ED1311EF81664996762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.160.0/21
Signature Algorithm: sha256WithRSAEncryption
d8:02:3d:aa:2b:94:77:09:b6:18:be:a7:bf:57:83:99:75:19:
a8:55:f5:21:80:19:41:44:67:a9:17:00:89:43:32:db:b6:19:
19:17:64:4b:fa:ad:97:d8:5b:53:36:ea:b6:89:e5:4a:d5:5b:
0b:0e:cc:23:df:33:bd:23:bd:86:94:43:d9:ed:03:45:96:7d:
d0:56:d4:36:6f:d9:fe:4f:d0:bc:8b:36:5f:87:44:a5:d7:0d:
53:93:8c:af:7f:48:74:a9:d1:d9:ae:f5:5b:f2:67:a2:1e:f5:
47:c5:e5:2e:71:1d:41:fb:40:79:19:aa:13:3f:94:50:ac:a8:
ab:3b:54:a7:90:0a:cf:ba:1e:2c:04:0e:6c:91:1f:9e:40:40:
74:1b:96:b7:bb:b1:48:6e:77:36:e1:e5:eb:a8:aa:74:30:f6:
cd:98:aa:11:c5:09:c1:83:b4:bd:d7:a3:aa:dd:fc:5d:d3:4a:
0f:fb:66:c1:77:de:af:82:7d:85:1d:42:c7:a9:31:9f:7c:d9:
e4:9f:82:d5:25:9e:81:a5:e0:81:6d:3a:05:1f:70:86:bf:65:
71:de:6c:3b:53:46:51:e0:95:96:e5:92:55:85:3b:fa:7a:64:
70:2a:47:e9:a2:59:46:4b:a0:48:45:12:e2:74:ea:aa:42:c3:
4a:28:62:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:00 2025 by rpki-client