Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22862F6ECDD711EF9216CC89762E951A.roa
File: 22862F6ECDD711EF9216CC89762E951A.roa (raw, json)
Hash identifier: r9Krx+qBgafLLdRO9LuIlQ2iw2rmxUfRziyLt+TllgY=
Subject key identifier: 72:86:77:FC:72:F1:4F:42:C8:80:2C:AD:3E:C1:0E:73:D0:7D:C8:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013773
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22862F6ECDD711EF9216CC89762E951A.roa
Signing time: Wed 08 Jan 2025 15:42:15 +0000
ROA not before: Wed 08 Jan 2025 15:42:11 +0000
ROA not after: Sat 03 Jan 2026 15:42:11 +0000
asID: 984
IP address blocks: 154.88.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79731 (0x13773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:42:11 2025 GMT
Not After : Jan 3 15:42:11 2026 GMT
Subject: CN=677e9cd7-bf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:9d:9f:28:ab:be:aa:9a:2c:04:c9:ec:4b:
56:e9:23:ef:3c:4b:36:b9:65:2c:60:b8:06:a4:93:
dd:11:24:be:4b:d5:a8:3a:7d:e9:a4:c1:7e:15:11:
83:d3:fc:92:0d:22:10:36:72:d2:aa:34:03:7f:50:
9d:15:c8:0f:99:bd:7d:37:e3:dd:b7:aa:74:d6:41:
7a:fd:a4:39:7b:99:1b:20:7f:91:c0:5d:d7:1a:51:
03:2f:5b:d0:f9:0f:98:1b:a7:36:7b:07:e6:88:5a:
d2:bb:d2:0e:51:43:fa:e1:bc:90:61:a2:ab:a6:84:
69:37:5f:39:df:80:01:ba:82:7f:96:82:13:f1:99:
31:75:73:5c:4d:37:78:f3:17:ad:2c:1a:0d:ae:3e:
3c:6d:f3:20:02:0e:cd:e3:de:19:f9:7c:94:ac:57:
b9:0d:5b:83:06:42:32:9c:7d:4c:2f:6b:22:6c:fe:
1e:68:9e:b1:14:0a:12:44:2a:78:1c:60:49:03:0a:
f8:f0:56:df:87:64:a8:5e:90:4b:49:14:fa:ad:a8:
35:a1:1d:9c:e9:a1:6c:bd:36:ad:ee:08:36:2c:26:
d1:36:0a:99:5b:25:b6:84:d9:f5:47:79:f4:bf:2e:
55:61:de:02:e9:c9:86:b1:a2:90:1e:c9:1b:64:a0:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:77:FC:72:F1:4F:42:C8:80:2C:AD:3E:C1:0E:73:D0:7D:C8:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22862F6ECDD711EF9216CC89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.41.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:de:73:b4:58:14:d4:ce:a0:83:15:7a:91:aa:52:28:e7:44:
68:18:de:19:01:06:b3:53:c3:16:c7:0c:78:01:c1:82:43:7b:
50:07:1c:40:44:f6:b6:9f:5e:ce:8b:7b:8b:80:85:5e:76:32:
b7:d9:14:c8:49:3d:45:ba:08:ff:4a:ef:d9:b6:21:c0:67:2d:
f6:29:c1:14:38:8e:72:b8:9a:32:a2:0f:4a:af:5a:d7:d0:18:
f2:59:3e:43:73:3a:94:52:8f:39:b2:9e:f1:08:05:89:fd:52:
e1:67:42:19:7e:3f:9d:f7:83:a1:bc:ed:ba:bf:ef:2b:72:0b:
c0:e3:ea:47:4e:22:1c:fa:17:68:c3:f8:31:a7:e7:df:6c:55:
2a:9f:fa:5e:e8:50:68:d5:cb:48:14:ca:f1:5d:7e:54:33:e6:
9d:03:80:17:3c:b2:71:3c:33:46:75:b1:48:b8:3b:8b:0e:a6:
1b:e1:84:3f:4c:f7:42:38:bb:d5:f5:1e:ad:5d:e8:e5:5e:ea:
96:a8:05:05:f2:24:ae:c2:22:07:77:e5:73:40:95:fd:f5:b5:
cd:48:cd:48:9f:fb:3c:eb:3d:61:fe:bf:07:88:32:b9:bf:5d:
55:da:9f:54:94:f5:6e:b8:5f:89:0d:2b:48:55:20:45:ac:31:
87:fe:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:37 2025 by rpki-client