Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7641893AC92911EFB1E0F841762E951A.roa
File: 7641893AC92911EFB1E0F841762E951A.roa (raw, json)
Hash identifier: 4dz8fnb4Ac6F0S3qCLKDqEST1+iVGp3fJAfs2/lLmB4=
Subject key identifier: 6E:34:13:86:6B:83:66:5F:B1:BB:9C:7C:BC:F0:11:41:11:47:E2:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01336F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7641893AC92911EFB1E0F841762E951A.roa
Signing time: Thu 02 Jan 2025 16:48:59 +0000
ROA not before: Thu 02 Jan 2025 16:48:55 +0000
ROA not after: Mon 13 Dec 2027 16:48:55 +0000
asID: 17561
IP address blocks: 154.222.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78703 (0x1336f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:48:55 2025 GMT
Not After : Dec 13 16:48:55 2027 GMT
Subject: CN=6776c37b-1d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:10:4f:c6:c2:1c:bb:a8:31:10:d7:6b:7a:
61:25:93:f4:93:12:2d:29:5a:3a:ae:49:e8:33:98:
a0:16:80:70:3a:da:4d:9e:1d:7d:1c:5a:0e:bf:b3:
57:7b:c8:de:f2:d1:26:6c:06:6f:5c:36:2e:3f:28:
6d:5a:4a:34:3b:ca:96:94:8f:e0:d9:2c:05:10:55:
3e:c3:09:d2:e9:10:e4:a6:07:10:e0:24:54:6c:54:
2b:cc:f4:ee:bd:01:33:f2:a9:cf:ca:50:43:1b:9c:
ed:d8:e8:cb:f2:00:08:45:77:a7:07:e7:dc:8b:5e:
1f:9e:2b:ab:77:cc:4b:35:37:07:e2:7a:4f:3c:cb:
45:30:4f:7d:b5:c0:e4:ae:f7:ba:fb:4c:d1:5e:ed:
25:9a:72:99:ef:8f:c0:bb:3c:f6:e7:7b:3c:21:8d:
b9:ea:c4:05:a0:db:3e:51:c0:4a:fa:fc:2b:75:7b:
0c:fd:7e:39:a5:a1:b9:85:e4:ef:8f:f6:5f:66:cb:
cd:e9:fd:78:79:ac:f3:91:1e:65:a0:85:3d:e2:08:
b6:ec:d4:c8:b9:fa:a4:77:86:4e:8d:60:09:18:15:
a0:9e:27:52:c7:fe:a0:f3:cf:8c:aa:6c:ee:7b:66:
21:54:d8:54:f3:05:38:2e:11:83:c2:65:4c:9f:37:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:34:13:86:6B:83:66:5F:B1:BB:9C:7C:BC:F0:11:41:11:47:E2:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7641893AC92911EFB1E0F841762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a6:3e:61:08:60:d3:5b:df:10:93:dd:0d:7e:01:c2:35:7e:
ac:1c:7e:47:10:cc:11:2c:6e:5b:e4:d9:5b:91:53:33:0a:b5:
75:d4:e2:d9:7e:77:28:54:33:cb:68:2d:07:13:73:88:b4:5f:
a0:6e:21:d1:4c:13:71:4d:ab:40:dd:f3:ea:46:97:51:60:3a:
24:24:10:4d:7a:ce:28:d6:80:06:49:1a:6e:c3:f9:46:e1:7b:
03:20:7d:d2:06:21:a6:35:55:59:ff:db:c3:1e:5a:61:b1:3b:
fb:58:43:46:49:71:46:bf:e9:5a:e6:16:85:3a:9d:f9:0b:79:
7a:01:bc:35:f4:60:a1:33:2f:a3:f0:ab:bf:20:1f:e5:75:d3:
b4:ee:c9:50:18:09:11:b6:e4:1c:a5:bf:3c:db:59:f4:29:61:
7b:22:24:30:6b:30:6d:73:da:6a:5d:2b:09:dc:ce:fa:d5:71:
5f:18:fa:a9:ba:6d:24:6c:49:f8:fc:4d:b1:84:5d:d1:c2:4b:
1d:aa:b6:af:a0:73:7c:20:2f:f7:1e:c0:d0:0c:01:3a:51:10:
26:af:c8:04:f7:70:82:4c:7f:60:a4:b1:c8:bf:b5:57:b4:51:
89:21:8d:16:1f:47:b3:3f:ce:a1:89:cd:75:eb:b5:cf:9f:1f:
91:68:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:00:09 2025 by rpki-client