Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10D037DAC93411EFB45B9384762E951A.roa
File: 10D037DAC93411EFB45B9384762E951A.roa (raw, json)
Hash identifier: dkaGnR941DOLRjbRTXgupR3Gz/5WgLvxmdh6EQGSux8=
Subject key identifier: 77:1B:B9:58:52:44:63:92:F4:F3:DE:93:47:1A:2E:B3:C6:40:CA:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10D037DAC93411EFB45B9384762E951A.roa
Signing time: Thu 02 Jan 2025 18:04:53 +0000
ROA not before: Thu 02 Jan 2025 18:04:49 +0000
ROA not after: Sat 13 Dec 2025 18:04:49 +0000
asID: 984
IP address blocks: 154.222.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78787 (0x133c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:04:49 2025 GMT
Not After : Dec 13 18:04:49 2025 GMT
Subject: CN=6776d545-1636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:2b:0f:c3:a2:d9:37:b7:2b:bb:df:8c:7a:
82:c1:f2:9e:e0:df:fa:ca:6e:08:ca:a2:e8:e3:5f:
ee:ad:46:84:6e:4b:d4:2d:0d:13:7b:de:7a:21:dd:
c5:8f:53:54:37:42:12:e9:84:17:75:59:a6:b3:43:
98:d9:8a:78:94:c4:f3:10:74:71:5a:db:13:b2:e5:
ee:d4:26:ec:db:54:14:b7:3a:8d:ed:e1:28:84:b1:
be:01:33:a9:30:c9:b8:ce:bb:52:d3:37:f9:9f:e7:
56:3c:49:3d:08:92:33:c3:65:d1:90:ce:c7:f9:7f:
af:2a:f1:a7:18:5d:b0:d8:f5:a9:bb:79:f8:6f:d4:
dc:3e:ef:58:90:9e:96:37:2e:ff:69:e6:5d:6f:1f:
38:84:b9:c7:c5:69:62:8a:16:fe:76:51:04:e7:82:
76:bc:fa:85:6e:42:21:5b:b0:d3:fc:b5:44:a5:d2:
2a:90:20:c8:6a:07:84:51:3d:f9:d0:b1:fd:b5:6f:
f2:53:c4:7c:0a:70:12:a3:59:7d:80:54:32:15:2c:
92:73:ce:4f:61:a8:00:3f:c4:8c:dc:ea:4b:b7:90:
42:d2:d9:c0:85:63:37:e7:ab:5f:c4:06:7a:a1:ab:
cf:07:9d:d9:b9:92:5a:35:1e:03:93:82:cc:df:8a:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1B:B9:58:52:44:63:92:F4:F3:DE:93:47:1A:2E:B3:C6:40:CA:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10D037DAC93411EFB45B9384762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e9:47:b9:09:90:dd:b7:aa:98:c1:bc:c6:83:40:0a:11:93:
69:8e:16:f6:c4:6f:d1:41:84:79:64:56:ed:7d:59:ff:59:ad:
e6:6a:43:e4:4a:a4:0c:ca:da:86:e5:cc:54:ff:19:89:93:96:
f9:9a:91:28:98:67:1d:f8:b4:a6:ab:51:3e:0e:60:01:a8:9c:
a1:f3:19:f0:36:17:07:fa:45:6c:c2:0f:ab:e9:a9:d6:1d:04:
a2:57:1b:f3:78:8a:fb:21:35:02:26:00:b4:7e:22:19:83:ae:
04:6f:0e:84:92:4b:3e:60:e3:40:52:1a:9c:6c:4f:e5:79:64:
37:5a:7c:c2:ec:96:52:27:55:d2:96:6e:1d:23:1c:09:b3:72:
5a:6d:62:f1:17:f1:b4:85:69:7c:09:88:53:b3:8f:be:1c:36:
db:17:20:3b:73:51:8a:b6:f2:3a:99:f9:79:11:c1:d9:0c:e0:
73:97:8b:1a:bc:eb:12:bf:2f:4d:ec:ce:bd:52:61:a5:98:03:
ec:86:ca:b8:da:87:c4:a3:3c:48:03:ef:56:62:02:86:2e:10:
9a:38:ee:9a:07:5f:e6:db:57:af:36:3a:81:ea:73:bb:b9:29:
d7:a5:61:4b:55:26:65:24:35:b4:5b:06:1e:3a:8c:5e:9d:fd:
20:36:24:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:45 2025 by rpki-client