Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/375B1040C93F11EF80465F4A762E951A.roa
File: 375B1040C93F11EF80465F4A762E951A.roa (raw, json)
Hash identifier: d3EwgSeY1YJjW6WInQu/PM0wJ0miisCT5Dnz6k7Fa90=
Subject key identifier: B3:B5:EE:16:83:55:C1:E9:EE:71:AF:7E:BE:2F:9D:A9:B7:D9:DB:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01341B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/375B1040C93F11EF80465F4A762E951A.roa
Signing time: Thu 02 Jan 2025 19:24:42 +0000
ROA not before: Thu 02 Jan 2025 19:24:38 +0000
ROA not after: Sat 13 Dec 2025 19:24:38 +0000
asID: 984
IP address blocks: 154.223.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78875 (0x1341b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:24:38 2025 GMT
Not After : Dec 13 19:24:38 2025 GMT
Subject: CN=6776e7fa-1722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:88:e1:11:8f:e8:85:87:f3:13:8f:3f:94:
50:82:c9:7a:ea:1b:69:82:e4:84:d3:65:36:63:d9:
4f:e1:4b:ac:e0:8c:f1:df:7c:e6:28:e6:6f:c1:03:
2f:51:97:ba:b3:59:89:7f:7f:a8:03:5a:7e:ce:e3:
52:7a:dd:7e:04:ff:6c:29:19:e2:4b:2c:ee:8e:f2:
0b:89:cf:e2:f4:4a:89:43:eb:ce:80:8f:90:f7:c9:
19:85:0b:bc:71:2e:bd:7c:5c:48:63:bf:46:a2:05:
cd:5f:d2:39:7a:bc:08:ac:e5:8f:fe:11:15:a1:c5:
7a:ea:5c:bf:3f:79:ec:e4:99:47:d6:a6:c0:b5:73:
77:92:6e:f6:90:46:36:c7:e2:f4:c4:5f:17:a6:5c:
c7:6b:62:3d:e3:75:4b:c3:d3:2d:aa:82:ac:f7:5e:
e7:7b:ac:fb:28:17:07:98:68:31:77:c8:90:53:dd:
42:7e:5c:d9:2d:06:46:5d:52:79:ee:a7:ee:e4:68:
05:03:8e:ba:d2:44:38:0d:85:66:95:81:bd:20:e9:
b9:ee:70:29:65:a5:79:14:0f:8b:6f:75:31:c1:6f:
a7:55:ae:f1:b7:63:7f:de:66:41:aa:c2:83:6b:fb:
a7:59:64:ae:a3:b5:88:60:de:1e:18:59:df:b9:be:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:EE:16:83:55:C1:E9:EE:71:AF:7E:BE:2F:9D:A9:B7:D9:DB:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/375B1040C93F11EF80465F4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.241.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4f:f7:64:78:ca:18:23:7a:dc:fe:2c:f1:3a:3a:04:10:b8:
e2:f5:78:07:a6:d0:7e:93:b6:62:3a:6f:0d:a2:b7:56:7c:04:
68:e7:0f:22:d0:10:c7:f8:71:5c:1a:e6:6b:3d:7c:32:e1:45:
7e:3d:d8:5e:5e:8a:1c:f9:a5:e8:ee:06:50:ca:b4:9e:d8:7c:
c8:03:e0:95:62:11:9a:55:86:8d:56:6b:c2:f6:f5:2a:4f:5c:
31:4b:e6:50:d9:ee:63:38:e6:f7:12:58:f4:60:13:39:cd:78:
de:39:c6:6a:91:5d:81:95:e7:8a:68:d4:39:4d:bb:3f:1b:ff:
c3:4d:1a:e2:87:fc:4e:cf:d7:d4:58:dd:12:35:c6:04:6b:a1:
8f:c4:1a:49:cf:b2:e5:74:8b:1d:e1:11:48:89:ad:73:3f:1b:
ce:9a:33:2e:f2:bd:a2:bb:e4:a8:f9:8b:79:9b:24:9d:71:e6:
81:f8:34:dd:96:ad:cf:34:3e:07:f1:9d:6f:d5:52:60:61:cd:
f8:f8:28:a6:ff:79:70:ce:ef:6f:d3:28:42:a2:f2:b9:5d:a2:
47:66:f9:1f:02:c8:c3:0e:a3:06:c5:cd:6e:6e:84:df:5c:dc:
37:9a:67:46:f6:9d:07:e2:b6:70:2e:a2:af:0d:db:1b:0b:f2:
04:ef:4f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:53 2025 by rpki-client