Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F46B52CDBD11EFB9942567762E951A.roa
File: 08F46B52CDBD11EFB9942567762E951A.roa (raw, json)
Hash identifier: 38CDXLxuCTh+zIPbADfDF3qWBaszsrGaNOkpAnKpxMQ=
Subject key identifier: AB:F5:7A:B4:A9:20:4A:01:25:34:D5:B9:AF:33:20:B9:8D:76:14:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F46B52CDBD11EFB9942567762E951A.roa
Signing time: Wed 08 Jan 2025 12:35:25 +0000
ROA not before: Wed 08 Jan 2025 12:35:22 +0000
ROA not after: Tue 16 Dec 2025 12:35:22 +0000
asID: 984
IP address blocks: 154.200.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79600 (0x136f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:35:22 2025 GMT
Not After : Dec 16 12:35:22 2025 GMT
Subject: CN=677e710d-312b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:e2:5d:f8:d5:7a:61:92:ef:3a:ae:61:7f:
c0:09:c0:4c:ae:f6:89:03:63:9e:66:ce:45:fe:59:
0a:7b:8e:0a:7d:a5:d3:da:15:88:5f:38:d7:fe:1a:
a7:95:46:37:17:8d:65:83:32:f2:84:3b:a9:0f:70:
ce:91:0a:3d:64:9e:b3:18:9f:b0:93:0b:08:8b:92:
64:2c:08:fa:b0:7d:3b:87:0a:2f:e3:ac:89:96:8f:
85:66:65:8e:82:f2:e2:58:dc:44:0c:ba:13:bd:73:
c5:53:64:99:ca:cb:23:bb:71:5d:4b:16:43:06:89:
34:03:f7:75:fe:68:7e:d8:e2:17:3f:24:52:18:ed:
60:0c:01:5f:eb:a0:20:eb:e6:db:3b:68:fc:fe:a3:
f4:54:45:0b:e9:de:78:2c:c1:2c:e4:75:4d:4f:20:
02:38:d6:bb:c6:19:93:5d:e7:6a:44:e1:1a:94:d7:
75:7c:7b:bb:0f:2d:fd:7f:53:07:25:63:27:4f:bb:
0e:5e:6b:60:08:f6:d5:b9:ec:24:80:cc:36:3f:66:
2c:5d:12:24:e9:92:38:d1:4f:15:d7:6a:19:08:b3:
81:be:60:67:1b:c0:87:c2:33:44:99:e0:08:f2:21:
fc:ba:e1:56:45:43:08:62:28:4e:02:df:c2:a7:3f:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:7A:B4:A9:20:4A:01:25:34:D5:B9:AF:33:20:B9:8D:76:14:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F46B52CDBD11EFB9942567762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d8:90:c4:f5:d4:dc:7c:c5:55:4d:3d:59:08:c4:40:d3:1b:
2c:75:a8:ab:88:97:cd:d0:b2:85:b7:2a:fa:e7:51:1c:26:a2:
c8:1f:76:a3:46:c8:30:c8:bf:e1:63:b4:19:a7:a0:9d:3e:8c:
96:aa:a3:88:6b:4f:cf:83:82:2a:f2:46:15:77:ff:08:fe:f9:
dc:30:71:3d:a9:d7:f1:93:72:44:ad:60:e5:12:64:70:eb:41:
e4:58:90:27:48:57:45:d3:d3:1d:1f:3c:ef:8d:b5:9c:af:8e:
25:c2:89:22:8e:e4:15:a1:a4:52:43:9b:d2:32:f8:1c:df:b8:
47:14:3f:81:29:f9:0b:c5:6f:85:aa:af:5b:ea:0c:b9:4e:5b:
b0:a8:a4:72:2c:e5:ef:a5:95:b5:80:d8:04:2f:f7:00:44:ee:
e0:ea:de:05:2e:ea:67:e4:2a:01:9a:ae:f5:3d:3a:41:9e:31:
a7:03:ac:65:89:26:b0:42:00:e2:21:d6:45:1d:87:87:f6:fc:
35:e0:1c:c0:b2:7f:4a:a5:b6:ec:9e:1c:f0:a4:f8:26:68:46:
7e:09:6f:73:db:e4:22:ff:7e:b0:f1:22:f9:7f:09:09:c6:41:
d1:47:70:86:83:40:9d:d5:d1:3f:d2:cd:b5:44:4a:8d:46:b8:
db:d6:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:56 2025 by rpki-client