Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317FEBCAC92911EFAF45A3BE762E951A.roa
File: 317FEBCAC92911EFAF45A3BE762E951A.roa (raw, json)
Hash identifier: +7dmnQ3T8r00YL9Pxtu+Fhd7ohm3MZ1r+TWperhHdPo=
Subject key identifier: 52:10:B5:7F:7C:DE:2D:DF:92:68:07:85:C3:B5:8C:40:49:DB:55:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01336D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317FEBCAC92911EFAF45A3BE762E951A.roa
Signing time: Thu 02 Jan 2025 16:47:03 +0000
ROA not before: Thu 02 Jan 2025 16:47:00 +0000
ROA not after: Sat 13 Dec 2025 16:47:00 +0000
asID: 984
IP address blocks: 154.222.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78701 (0x1336d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:47:00 2025 GMT
Not After : Dec 13 16:47:00 2025 GMT
Subject: CN=6776c307-1722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c1:59:83:ce:f7:1e:7e:8e:c8:90:64:a8:67:
d8:b9:34:93:7b:76:9e:42:44:f2:07:97:b5:14:1f:
0d:78:a1:6a:8a:e1:26:89:43:9d:6f:23:69:f2:be:
0e:27:d8:53:a7:90:d5:1f:b8:35:12:1b:7c:74:35:
ea:2d:86:f5:4a:fb:46:32:63:b6:7f:cb:77:67:3c:
41:5c:5f:16:75:67:6f:47:25:7c:2d:f4:69:e7:3f:
8a:06:fb:48:c3:cc:04:49:71:2c:b1:c1:69:a7:69:
a2:f7:08:b1:c8:50:83:e6:33:e5:42:b0:f1:50:08:
f2:39:a1:1b:15:5e:f3:5b:4d:2c:90:2b:2d:28:84:
74:cf:b3:16:5a:d2:c5:b0:7a:30:d3:9b:70:80:a3:
8c:95:ca:c8:ee:80:bf:e1:c5:b4:7b:d2:65:b1:bd:
e3:46:76:fe:81:e4:1f:66:e0:31:8b:f9:54:d9:56:
ed:76:48:8c:9c:7f:b5:01:6c:40:d1:35:42:f5:ff:
b2:9e:94:8e:4d:8a:9e:6d:84:1b:aa:80:b1:14:d1:
af:df:9c:78:37:c7:e7:5a:f9:32:fd:a6:95:fc:84:
53:e3:4d:c6:dd:78:23:7c:91:eb:00:8f:ec:d9:50:
08:b0:85:2a:95:7d:4e:ba:74:47:79:c0:b4:53:19:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:10:B5:7F:7C:DE:2D:DF:92:68:07:85:C3:B5:8C:40:49:DB:55:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/317FEBCAC92911EFAF45A3BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.129.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ae:fa:94:21:20:7f:ad:e6:44:86:57:c6:83:65:da:43:91:
9f:c7:b5:7a:97:c2:da:65:5e:cd:3a:63:9a:a3:92:62:97:b2:
6e:7f:81:28:19:16:c5:d1:24:2c:d9:6c:b3:00:10:cd:80:2f:
3d:46:a6:99:fc:32:47:41:57:b7:a5:1f:85:8f:de:88:bf:61:
c4:ac:ce:00:c5:73:58:e9:64:b3:10:db:87:b7:58:4b:cb:87:
9c:35:b4:1d:dc:bb:6c:1f:bd:94:c8:c0:be:1e:f1:86:4b:bd:
53:8c:0e:ee:d4:ab:b0:0b:96:ba:48:cb:0d:ae:b0:ea:b9:8c:
e4:1e:08:d9:7b:a9:68:eb:c8:f5:5f:1f:a5:1f:29:1e:1f:21:
50:ba:b7:c7:33:78:a0:2a:67:1f:55:da:67:3e:d4:32:7d:cc:
b8:fb:66:3c:8e:e4:c0:f3:d2:41:1d:c9:80:fb:38:6d:0d:b1:
b0:88:72:46:5b:ae:9c:2a:c8:7f:5e:6b:ba:13:25:7f:a9:f4:
7f:a3:dd:d5:22:c5:2a:75:41:1e:e1:2f:0c:be:c9:a8:14:9b:
96:c7:9e:7e:cb:50:22:e4:1d:0c:83:11:d4:31:c5:e0:fc:27:
e0:74:dd:f7:2f:b7:9c:ab:b3:74:47:22:da:e0:3b:2c:4f:9b:
b7:c3:a2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:10 2025 by rpki-client