Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09593092CDBC11EF9363B760762E951A.roa
File: 09593092CDBC11EF9363B760762E951A.roa (raw, json)
Hash identifier: WrYOXSFuZ7Hkp0fVVxyD+fjfU+07EhG72j3MjxAs8+E=
Subject key identifier: 46:68:32:DF:F0:C4:B2:AA:1A:26:3A:23:A0:15:24:5D:94:CF:B3:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09593092CDBC11EF9363B760762E951A.roa
Signing time: Wed 08 Jan 2025 12:28:17 +0000
ROA not before: Wed 08 Jan 2025 12:28:13 +0000
ROA not after: Tue 16 Dec 2025 12:28:13 +0000
asID: 984
IP address blocks: 154.200.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79592 (0x136e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:28:13 2025 GMT
Not After : Dec 16 12:28:13 2025 GMT
Subject: CN=677e6f60-fd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:d8:70:da:9b:d8:ae:22:37:a2:91:4c:99:
7b:9d:96:75:cf:00:23:35:43:74:29:e7:a7:18:f8:
cf:11:d7:d1:b0:93:45:cd:b9:95:9d:71:92:c2:bd:
55:40:c4:36:b0:c5:87:5a:0f:ce:fd:e0:2a:38:e0:
5d:9c:56:c8:bf:1f:29:62:6a:67:cb:11:ed:78:b7:
1c:82:86:52:89:34:c8:59:2e:b4:d0:a1:d9:55:e2:
eb:08:a2:e1:1e:29:e3:94:2e:a6:97:a0:f2:70:64:
fd:c1:42:ae:7d:9b:b5:83:35:16:96:05:41:63:de:
0c:94:ce:1e:db:3d:13:59:cf:c4:70:a3:96:86:91:
2f:b2:7c:28:c4:6f:07:25:3a:03:1d:a7:a8:00:bd:
76:85:08:b7:74:f7:78:82:5a:63:c7:a5:15:48:bc:
1b:6a:65:9b:4c:96:53:00:ca:19:db:e8:d6:e5:87:
33:a1:89:44:35:4c:e3:1d:73:0b:09:9a:52:2b:77:
f4:4f:dd:7e:8c:74:d6:fb:41:34:6b:ef:4d:56:cf:
f5:0c:0d:88:20:15:fa:3a:72:7e:38:59:68:59:59:
03:a1:ee:dd:bd:a3:c1:03:bb:69:d2:ff:ce:7c:14:
c3:64:4c:f1:5f:b0:22:e3:86:8d:44:d0:9a:cc:67:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:32:DF:F0:C4:B2:AA:1A:26:3A:23:A0:15:24:5D:94:CF:B3:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09593092CDBC11EF9363B760762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.195.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b2:b7:41:0e:9f:9d:c6:e2:90:42:15:4d:e4:5c:6e:fc:03:
b5:f0:99:90:a2:eb:82:a9:59:ee:e9:2e:a8:c4:49:fe:75:7f:
ba:a3:d0:bc:42:6b:9d:09:d0:1e:74:ee:fa:f5:dd:e8:74:08:
8e:f6:37:fb:2f:b2:d7:3b:68:37:8e:b2:31:44:6c:4d:c9:be:
37:c9:5a:f8:86:c0:48:32:8e:f5:a7:de:34:be:39:8b:e7:18:
49:e9:e1:79:ca:7e:02:64:91:44:ab:df:c8:8d:74:ed:ce:82:
0c:1c:a7:41:16:20:20:65:b8:94:4f:9f:74:84:03:a2:8c:07:
69:a4:a8:ac:ba:6b:1c:09:a3:a1:5a:e8:c4:ad:03:63:b2:93:
3d:a4:1a:d6:c0:da:dc:ad:6b:da:88:be:39:45:51:26:96:55:
8f:be:e4:9b:05:35:cb:06:5f:f7:d0:c9:13:f6:de:2d:ce:b8:
28:58:30:02:7f:8d:82:6e:c4:56:6d:ee:5a:18:a2:76:c2:87:
5f:1c:13:71:d0:17:b9:9b:c9:37:38:20:4a:94:6c:26:fd:62:
d6:7d:8a:41:bd:43:88:cb:8a:ff:da:48:fc:b1:8b:ce:97:db:
05:10:ec:4b:86:52:fa:95:23:de:77:fc:62:26:ae:56:e3:ce:
cf:fa:02:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:24:12 2025 by rpki-client