Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1418D2C92611EF8B4A34AD762E951A.roa
File: 2A1418D2C92611EF8B4A34AD762E951A.roa (raw, json)
Hash identifier: sosbySjOAVza/7VM6Jr7kZKzm+RCXDUQ4vszjwaUOv0=
Subject key identifier: 7E:0E:51:F7:83:6A:A2:78:76:06:7B:D1:E0:01:48:CF:29:70:E1:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013355
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1418D2C92611EF8B4A34AD762E951A.roa
Signing time: Thu 02 Jan 2025 16:25:22 +0000
ROA not before: Thu 02 Jan 2025 16:25:19 +0000
ROA not after: Sat 13 Dec 2025 16:25:19 +0000
asID: 984
IP address blocks: 154.222.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78677 (0x13355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:25:19 2025 GMT
Not After : Dec 13 16:25:19 2025 GMT
Subject: CN=6776bdf2-5c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:d0:7a:56:1a:db:83:4b:7c:5a:76:bc:6a:
87:8e:5e:bb:b1:cc:86:c6:e7:51:e2:9c:c4:43:8e:
09:ba:bc:5a:8a:a9:65:12:4f:a8:e6:d8:80:a0:cd:
49:70:ca:fe:d4:f2:7a:1a:6c:be:c9:74:7e:8e:a0:
a4:98:c2:7e:94:1e:3d:92:62:61:ab:e0:63:6a:f2:
f5:7c:9a:51:dc:4a:0d:79:6c:4b:be:93:e9:44:9c:
80:6b:87:25:83:e0:0b:fa:a4:26:c8:c9:85:93:d4:
93:c9:35:bb:e0:1d:e2:12:ff:d6:30:55:8a:11:f1:
cf:b6:aa:b9:11:dc:90:e9:57:9c:6a:4c:2c:2e:8a:
a7:51:a3:82:00:af:53:3c:69:e9:38:f9:62:18:5f:
e1:c1:6c:e6:2d:3c:52:21:bb:a0:c8:b1:12:e5:5f:
89:40:81:ef:67:c0:16:ca:7a:bb:4c:0e:10:2f:ef:
05:3e:1e:36:a4:16:07:1b:6e:23:d9:98:d8:ab:96:
cc:e5:c1:5c:6f:29:17:7b:bb:4a:4d:69:9a:cd:c3:
0e:7a:08:82:de:10:4c:dd:f3:ad:e0:d8:b1:cc:2f:
36:1e:ee:53:a6:05:ea:f4:9e:9f:bc:99:8a:69:bc:
12:66:3a:86:2a:aa:a4:6c:0c:a5:fc:7c:4e:0c:bd:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:51:F7:83:6A:A2:78:76:06:7B:D1:E0:01:48:CF:29:70:E1:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1418D2C92611EF8B4A34AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.116.0/24
Signature Algorithm: sha256WithRSAEncryption
92:80:cc:8b:12:c5:98:a9:5a:e7:ce:b3:f0:5e:ae:e7:47:61:
cc:d8:55:ba:f9:85:9f:2b:b5:e2:a1:0a:aa:df:7f:79:b2:13:
65:52:5a:c4:ce:31:e2:c7:a4:ce:d5:e7:6b:d6:c8:8e:02:07:
c7:3a:64:e0:25:45:ba:58:03:eb:de:c1:1e:8a:f2:36:36:a3:
fd:eb:a6:48:dc:f1:2f:f6:d7:8f:5a:0d:2d:43:56:36:09:33:
90:01:f8:6a:03:36:96:14:33:6c:90:3a:9d:7e:75:5a:4a:bc:
28:7c:2c:db:a5:4c:b2:99:57:97:77:9f:d2:21:5d:35:95:49:
51:d8:36:8d:9b:c7:cb:76:bb:cd:f6:9c:24:70:8b:fd:d0:c6:
7d:13:5c:cc:af:c8:76:a6:6c:cf:ae:7b:62:ca:50:5e:3f:32:
87:b2:ee:9d:df:eb:7d:16:6d:ab:f0:cc:b0:c4:d1:70:af:c8:
0e:ce:cb:75:87:e2:df:76:e0:f5:b7:eb:ea:28:66:b4:c8:e3:
41:c3:48:74:55:29:56:99:e8:f8:ce:8e:37:c4:0b:7d:de:75:
6d:62:ea:d8:1a:b2:b1:50:ae:e1:77:ee:aa:ca:e5:22:4e:be:
78:e7:85:4c:a0:b9:5f:8f:70:45:28:77:4b:05:15:cb:a2:44:
68:89:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:14 2025 by rpki-client