Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AFBBE82D2E311EFA7F1D784762E951A.roa
File: 2AFBBE82D2E311EFA7F1D784762E951A.roa (raw, json)
Hash identifier: +87klso6CZ+WrlQguMTQ4K0ioUIMh7XG/UDB1E87ko4=
Subject key identifier: 16:21:DF:1C:CD:C9:8D:07:FA:81:5B:BC:92:8B:5C:C9:9B:3D:24:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AFBBE82D2E311EFA7F1D784762E951A.roa
Signing time: Wed 15 Jan 2025 01:50:59 +0000
ROA not before: Wed 15 Jan 2025 01:50:56 +0000
ROA not after: Sat 03 Jan 2026 01:50:56 +0000
asID: 984
IP address blocks: 154.200.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80764 (0x13b7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 01:50:56 2025 GMT
Not After : Jan 3 01:50:56 2026 GMT
Subject: CN=67871483-cde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:1f:00:50:20:6d:8d:4d:f5:e7:3f:66:b1:
ec:c5:94:3e:c2:88:39:14:6a:ad:a0:45:53:01:c4:
7a:a0:32:ea:b8:a2:3d:e0:46:fe:03:d9:f5:b7:5e:
06:c0:b2:d3:1e:c1:65:85:2d:1b:26:8c:d3:3e:2f:
13:bc:34:98:92:ad:07:da:ad:aa:92:d3:09:b5:43:
df:cd:84:2b:b6:7c:a4:00:66:b6:f6:de:26:0f:f2:
5d:d9:10:9e:95:40:83:04:7d:1a:19:1a:4a:73:8b:
b0:13:9b:a6:ed:9a:45:e2:d8:a9:b0:26:a8:44:0a:
27:fd:ac:03:d6:5b:0f:54:28:61:2d:e7:9a:1b:d8:
df:64:78:cc:c3:81:ea:77:d4:18:80:ef:e9:f6:af:
8e:ee:93:59:a1:ac:45:a9:b8:84:00:18:9f:2b:47:
8c:27:ee:99:6e:9e:08:4c:da:20:0c:f7:4b:99:5d:
53:a8:1a:b7:00:79:e3:a9:9d:30:9a:35:1b:52:67:
de:79:ea:fc:09:92:2b:4b:f5:c7:fd:cf:1c:cf:b2:
21:4b:4b:d9:a5:89:ec:06:be:e8:83:18:66:d5:1f:
8a:43:a9:a2:46:46:a1:1f:17:87:34:db:59:66:aa:
69:e0:66:31:ee:f1:ac:d7:67:1a:74:9a:cd:d3:7f:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:DF:1C:CD:C9:8D:07:FA:81:5B:BC:92:8B:5C:C9:9B:3D:24:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AFBBE82D2E311EFA7F1D784762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:47:8e:b4:17:ab:c7:e1:28:1b:c8:96:4d:51:b8:51:dc:8c:
6f:66:4c:a1:36:2d:6b:42:d0:00:30:5e:ae:f5:d5:a2:f0:be:
c1:91:47:72:56:30:10:2a:6d:bf:14:2a:88:5a:f3:36:e2:01:
f8:0d:eb:0e:5d:48:75:e7:15:2c:51:d6:38:8b:2a:3f:8d:5e:
9d:b1:89:02:b8:f6:38:20:c2:cf:17:cf:63:5a:2e:f6:8d:30:
96:2f:67:c6:34:0e:99:27:05:08:f9:18:7a:1c:eb:3e:9b:a8:
7c:e1:eb:84:e8:cd:a8:be:69:05:ac:fe:ec:8b:d9:09:36:25:
96:7e:7f:6a:d6:9c:7c:59:72:c2:1b:2d:e2:3d:e9:c2:51:a1:
46:05:ca:34:5a:73:95:7f:1f:bc:2a:1e:b1:71:75:a4:2a:87:
8e:34:f9:ff:f3:d8:59:06:f7:c1:a6:12:a4:bd:7f:3a:51:e4:
21:14:c1:aa:52:be:d4:17:8f:6f:c0:65:0f:c7:47:6a:90:13:
e5:97:4d:87:44:ff:f6:a6:95:86:79:fd:75:39:84:8d:84:ce:
26:64:a8:0c:68:a4:e6:63:36:59:60:84:9c:84:ef:2c:38:3b:
13:77:8d:97:b9:7a:85:a8:1e:4d:10:24:ad:00:48:c0:9e:29:
78:a9:65:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:53 2025 by rpki-client