Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6008DD4EC93811EF85DF959F762E951A.roa
File: 6008DD4EC93811EF85DF959F762E951A.roa (raw, json)
Hash identifier: 5XSafHUAq7lVqZsmANO6R/b7InmamA0RxDQwF5AOBq0=
Subject key identifier: 17:07:CE:09:0F:EE:9A:39:89:6D:E4:4C:D3:C0:7B:F0:70:D4:88:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6008DD4EC93811EF85DF959F762E951A.roa
Signing time: Thu 02 Jan 2025 18:35:44 +0000
ROA not before: Thu 02 Jan 2025 18:35:40 +0000
ROA not after: Sat 13 Dec 2025 18:35:40 +0000
asID: 984
IP address blocks: 154.223.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78821 (0x133e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:35:40 2025 GMT
Not After : Dec 13 18:35:40 2025 GMT
Subject: CN=6776dc80-11db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:75:67:77:76:0e:ee:3a:bc:2b:4f:42:b9:
de:6d:05:7d:d4:29:02:a0:d9:aa:ab:fe:e5:aa:ca:
f4:94:62:d5:69:f8:09:13:fd:7c:e3:c9:4c:3a:23:
b9:fd:c8:be:4d:7b:60:8b:cd:70:f3:3e:4b:50:ff:
ed:d6:f6:25:1f:de:54:2f:be:97:c7:fd:9e:7d:e0:
ae:33:aa:35:45:5f:17:80:c2:49:7c:0d:22:ae:7d:
1b:40:33:d7:ca:18:21:eb:ef:a6:92:d5:34:7a:b8:
4e:3f:e9:01:7e:ea:0b:d3:3b:ff:dc:52:4c:29:61:
20:0d:82:49:b1:9d:22:91:f9:6b:27:e5:4b:6e:5c:
09:03:31:05:dd:38:ac:aa:cd:78:c0:bc:d6:fa:6f:
99:bb:d4:59:b8:47:ac:32:7a:b0:1a:f1:4b:21:10:
7f:88:dc:7c:ee:d3:ab:1e:3f:ba:d8:9d:bf:4f:27:
6c:e3:ad:5b:e1:b2:ac:0a:72:c7:79:e1:87:60:df:
43:14:d3:78:49:e0:d0:a5:ab:8f:93:21:00:0a:4d:
8f:53:30:44:01:81:87:71:c8:bf:62:09:4b:4a:62:
82:83:c6:10:d1:51:9c:9f:f2:15:f5:d9:7c:33:5c:
d2:f1:af:cd:f3:69:4a:5e:4f:9a:6f:97:f6:83:4e:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:CE:09:0F:EE:9A:39:89:6D:E4:4C:D3:C0:7B:F0:70:D4:88:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6008DD4EC93811EF85DF959F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.93.0/24
Signature Algorithm: sha256WithRSAEncryption
80:09:c3:6f:84:ae:15:3f:08:50:04:93:0e:ce:a4:a3:be:54:
31:7a:ea:aa:d9:db:b6:22:fc:f3:4e:1f:90:fa:2a:ce:f7:e0:
ee:fe:97:bf:94:8c:83:cd:57:b1:f9:cf:5f:b5:eb:68:6f:ee:
76:39:c8:5a:5b:8e:93:70:2c:0b:23:12:eb:c1:32:9d:87:31:
b6:3a:3c:55:eb:e7:72:66:d3:51:88:62:9f:6d:c9:8e:ee:93:
5c:88:8c:8d:40:24:bb:fc:c3:7d:d0:98:53:3d:f5:5a:fb:21:
d7:45:3b:8f:b3:59:8e:0c:f8:ea:9f:d8:81:19:31:d6:0e:23:
56:e9:a6:3e:33:9d:17:99:f0:11:26:b0:34:9d:ad:e6:57:91:
13:ab:73:7e:fc:bd:a0:00:40:1c:bf:3d:ac:88:48:80:ed:e8:
13:97:ee:fa:87:2d:4b:3b:3d:0b:35:0a:60:0b:17:f9:df:fa:
ff:59:93:0f:fd:09:c3:5e:f5:f0:ed:7c:39:e0:32:d6:54:12:
19:f3:6c:b6:56:4b:4e:a6:fa:46:7e:6b:01:d0:52:bf:dd:a7:
b7:b8:c1:5a:06:2f:49:71:c0:9b:bd:a7:85:af:51:06:1d:97:
72:4f:ad:68:b3:4b:70:8a:13:fd:40:c2:71:be:da:bb:9c:1a:
69:af:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:03:59 2025 by rpki-client