Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75327104D58A11EFB6739542762E951A.roa
File: 75327104D58A11EFB6739542762E951A.roa (raw, json)
Hash identifier: UDlFUMEaQDs3DzEnW2tDbtzbX0PQWaNFkBCEhgfQmlk=
Subject key identifier: DB:05:23:20:7C:9C:6F:6A:1D:29:19:BA:1B:65:51:A1:21:48:91:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75327104D58A11EFB6739542762E951A.roa
Signing time: Sat 18 Jan 2025 10:53:32 +0000
ROA not before: Sat 18 Jan 2025 10:53:28 +0000
ROA not after: Thu 22 Jan 2026 10:53:28 +0000
asID: 63199
IP address blocks: 154.223.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81398 (0x13df6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 10:53:28 2025 GMT
Not After : Jan 22 10:53:28 2026 GMT
Subject: CN=678b882c-1938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:cb:34:af:1b:55:a6:44:96:8a:c8:b5:00:
d8:ee:62:75:b3:6c:84:98:2f:58:9d:cc:4f:25:29:
1d:61:75:5e:f9:db:df:cc:eb:bc:68:d8:5e:a5:e3:
c3:4b:e6:23:ed:09:2a:e0:4b:3d:54:f1:7d:9d:e9:
4e:fb:35:6e:87:56:bf:ea:52:74:e5:fb:bf:00:e2:
2c:51:e8:8a:e4:5b:57:f9:08:2c:d5:18:77:55:4e:
6d:28:9b:3d:95:20:c7:77:aa:11:02:0d:3b:d1:23:
0b:dd:0d:d1:04:38:27:fe:ea:d7:5f:07:6c:c5:af:
27:36:07:fc:a4:a3:fe:1c:d5:50:6d:8a:52:6a:4b:
a8:49:a8:75:ed:95:a1:53:b7:04:6d:40:d5:97:91:
68:11:bc:3e:d2:b3:14:19:fb:64:4d:8a:a1:e2:52:
ae:df:cf:e8:16:d4:42:8e:5b:e0:fa:93:95:07:bf:
d0:d1:8b:c4:39:15:1f:35:33:78:18:7d:1b:e7:92:
80:c1:4d:85:98:9d:09:32:02:6f:03:66:4b:de:23:
53:da:99:9a:63:ab:ad:f7:cf:57:34:c2:4f:dc:ea:
41:e8:07:9e:84:a9:30:20:4b:9d:ae:2e:34:d4:0d:
44:3b:ac:a7:0a:b6:69:13:b0:23:08:0c:a4:c4:ae:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:23:20:7C:9C:6F:6A:1D:29:19:BA:1B:65:51:A1:21:48:91:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75327104D58A11EFB6739542762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.164.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:3e:76:67:a8:ea:79:74:dd:ac:33:33:cb:4e:a5:29:8a:f5:
42:77:98:6d:05:5f:22:91:d2:a0:87:fa:1a:5b:b4:f5:fe:ff:
74:f1:32:4f:4a:b4:10:13:15:e2:d8:c7:73:0e:4b:62:a4:be:
1d:26:e9:67:8d:27:85:93:5c:12:12:7f:58:01:fa:be:b1:b7:
3d:2f:e3:70:8c:34:0d:69:36:2b:e4:ac:e2:c6:bb:8a:da:ba:
59:08:64:60:6c:a7:68:83:99:59:ed:62:f2:a9:c5:bf:22:a7:
c4:fa:c7:60:f6:08:31:61:6b:68:c4:d3:48:81:25:df:de:18:
2a:be:06:b8:a7:7e:ff:5f:b9:ad:f7:b6:f4:28:37:56:06:6b:
37:bf:2f:19:1f:27:b2:31:ba:49:0f:48:f8:88:14:d9:e1:e7:
5f:cf:0d:14:b0:90:1b:fa:02:18:04:05:be:c7:46:11:cd:56:
69:da:b1:4f:1c:04:fd:b1:26:62:65:63:f3:30:c6:ac:6d:e8:
d2:35:fa:30:dd:b2:11:5c:1e:6f:3f:ad:28:e1:0e:84:d4:7a:
bc:93:b6:29:a2:45:94:e8:bb:e2:db:ae:a3:91:ac:c1:c2:bc:
e3:27:dc:7e:0e:4b:c7:13:a0:e7:21:46:f8:0e:6f:fc:92:60:
22:cc:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:00 2025 by rpki-client