Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362040DECF6011EF9B334254762E951A.roa
File: 362040DECF6011EF9B334254762E951A.roa (raw, json)
Hash identifier: xaGRsOcIyKxQx/M4Y64gOn+nrYvUUlVnA1KTFIP8C7E=
Subject key identifier: 32:02:07:DD:43:6B:6F:E5:9F:D5:F1:14:56:02:63:70:B2:F3:58:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362040DECF6011EF9B334254762E951A.roa
Signing time: Fri 10 Jan 2025 14:36:00 +0000
ROA not before: Fri 10 Jan 2025 14:35:57 +0000
ROA not after: Fri 12 Dec 2025 14:35:57 +0000
asID: 984
IP address blocks: 154.81.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80393 (0x13a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:35:57 2025 GMT
Not After : Dec 12 14:35:57 2025 GMT
Subject: CN=67813050-6c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:71:ee:91:5e:fa:e9:67:ec:37:88:b9:32:
2e:76:eb:76:cf:b9:1a:04:44:d5:02:ba:3d:03:db:
40:4f:63:d1:9b:05:25:76:e6:fa:05:3d:2d:eb:5e:
39:74:00:6e:cc:28:8b:73:03:c0:eb:6d:60:4a:7d:
da:51:fa:08:c7:9b:b1:6c:85:d5:63:11:22:16:25:
b5:10:df:42:09:e0:4f:a9:93:17:e7:1e:41:de:7d:
12:11:2d:64:64:e4:1e:19:c3:85:96:30:2e:de:2e:
bd:af:38:3a:c8:60:e0:b6:91:83:6e:1c:c4:0f:ab:
88:71:fe:f3:fe:56:af:bd:16:60:99:0f:11:63:96:
f5:55:32:a3:91:c2:88:9d:a8:ed:0a:dc:37:34:f9:
dc:69:e1:3e:2d:4e:b5:ef:90:67:68:05:d9:e5:c2:
42:06:5a:d7:c2:05:3c:e5:99:18:de:f0:6d:1d:ea:
81:87:db:48:f5:ad:a6:61:ab:ae:b1:7e:22:08:0c:
2c:b5:91:ec:09:38:36:db:9b:ca:73:5d:66:49:f3:
f5:61:79:1b:06:5d:ee:3a:fc:57:57:92:3e:4b:c3:
3e:89:3f:24:d9:d9:85:10:c1:1d:c8:0b:3c:eb:0e:
7c:95:17:1e:cd:9e:ee:f5:af:f4:01:bb:3e:b1:f1:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:07:DD:43:6B:6F:E5:9F:D5:F1:14:56:02:63:70:B2:F3:58:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/362040DECF6011EF9B334254762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5d:7f:b9:d6:3b:1f:af:f7:a6:c4:02:06:e2:57:f3:fd:9a:
a9:f3:17:1e:b8:4f:2e:72:43:00:de:fb:60:a6:be:de:bf:69:
b7:06:95:97:1b:4b:bb:f6:27:a8:d8:f7:a8:9c:5f:dd:a6:15:
56:3c:6e:c9:2a:91:f2:12:40:6d:fe:dd:f1:35:13:b8:f8:b2:
a8:ec:eb:89:df:5e:36:9d:53:bc:90:f3:9f:27:3a:34:38:80:
94:2c:4f:7b:f1:d4:ce:5b:c5:90:10:ee:5c:5d:f9:91:b5:5f:
6c:f2:2f:68:d5:0b:a8:0b:d7:f9:04:9a:37:a3:c1:39:01:99:
de:5e:b0:24:82:6f:7c:ce:14:09:7b:c5:a8:05:24:6b:8f:7a:
ed:b1:3a:53:e4:27:74:2d:e2:30:84:83:18:2a:e5:e7:d7:be:
ad:f7:25:cf:b4:e6:4f:5c:20:4a:f1:ab:45:5e:82:ed:62:bc:
b0:34:b4:b0:b4:ba:b4:4f:3f:62:b2:fd:ea:33:6a:7f:d8:0e:
4c:0c:38:7c:dd:a8:fe:26:8c:2e:34:4e:7e:04:84:4d:30:58:
c0:97:af:d7:08:2b:8f:b4:a2:f8:d7:08:a8:14:83:6c:b7:d7:
6f:34:ac:59:3a:17:57:25:a2:62:3f:9a:68:06:e0:a3:14:d5:
85:32:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:11 2025 by rpki-client