Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767F611ED2E411EF8304E78E762E951A.roa
File: 767F611ED2E411EF8304E78E762E951A.roa (raw, json)
Hash identifier: 7xmls/1XND2nGmbCrJDa5xkp7KSVlnLxh80EEfB3CQo=
Subject key identifier: A5:D7:07:8B:38:26:F7:80:FC:3B:D7:AB:0E:85:91:98:21:84:68:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767F611ED2E411EF8304E78E762E951A.roa
Signing time: Wed 15 Jan 2025 02:00:15 +0000
ROA not before: Wed 15 Jan 2025 02:00:12 +0000
ROA not after: Sat 03 Jan 2026 02:00:12 +0000
asID: 984
IP address blocks: 154.211.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80774 (0x13b86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:00:12 2025 GMT
Not After : Jan 3 02:00:12 2026 GMT
Subject: CN=678716af-c574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:05:ff:28:03:c6:ee:b2:ad:4a:7d:a1:fc:
98:27:0c:6e:ab:b5:1c:c8:4e:69:18:90:50:38:84:
86:da:6c:a7:b7:c5:de:bc:63:aa:c5:e5:4e:fb:52:
20:f4:70:ba:24:26:02:cc:3d:16:13:d6:c3:ea:d9:
fa:6a:6a:0f:7b:5a:df:e2:af:41:71:0a:dc:57:81:
25:d5:18:0b:38:ac:b9:91:e4:f5:e5:b6:64:c2:c6:
c1:26:21:b5:6f:bf:19:b2:f9:bf:ad:24:80:ab:21:
9a:d0:1d:df:c0:59:26:6d:9b:13:ac:ea:64:3f:f9:
6f:64:b3:48:8a:05:5d:08:b6:89:a2:33:29:83:9c:
19:35:21:c3:6e:4e:f8:a5:b5:58:ff:56:2e:ec:44:
70:e5:61:fe:67:d2:4d:c9:d0:e4:5f:c7:31:48:72:
d8:4d:2f:32:fe:b9:f4:4b:8b:3e:d9:b0:57:34:c1:
dd:47:38:36:a1:ec:21:f7:4b:58:ca:e3:2b:44:e6:
c0:64:9a:b1:19:d9:83:e0:30:dc:e9:79:ad:a4:4a:
dc:fd:b4:db:a1:da:14:5c:de:c9:16:0c:30:b6:1f:
0f:03:bb:57:89:9a:1a:0b:a3:32:68:22:01:37:6a:
58:54:fb:28:92:2f:b9:a1:b4:96:c6:3c:9f:3c:bb:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:07:8B:38:26:F7:80:FC:3B:D7:AB:0E:85:91:98:21:84:68:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/767F611ED2E411EF8304E78E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:cb:94:dc:72:6c:15:83:36:a6:f7:b7:14:c5:48:8c:12:48:
c8:c5:0a:68:d6:b3:87:2e:26:ce:c4:48:de:66:8a:65:96:23:
d4:b0:dd:06:e6:f4:6e:1f:01:86:0f:13:2c:fb:8f:d0:2b:c1:
85:f7:8c:b7:a5:d6:d7:a3:51:42:57:9f:bf:06:78:35:24:5c:
b2:26:fe:f6:70:29:c7:6f:27:a9:b0:44:50:56:93:83:e9:40:
a2:a4:18:69:23:f0:f9:1a:5c:53:f0:81:b3:0a:e7:89:0f:9e:
b8:17:52:4c:24:0b:fe:cc:ca:8e:68:9d:fb:db:a7:84:b7:7e:
35:ce:94:c9:96:50:f4:83:27:d1:3f:5c:90:4c:0e:fe:12:fe:
d4:bd:c4:77:2b:05:21:0d:08:6f:d4:50:3a:c5:47:b0:05:44:
b3:ab:a3:da:90:f4:ef:dc:ac:13:34:49:cb:50:9d:49:b1:d9:
f6:c2:5e:82:e6:d2:c9:e9:4b:6c:2b:2c:8a:c5:19:44:f8:89:
8e:bb:14:96:2c:e2:35:cd:07:fa:dd:89:06:59:c2:2e:ae:60:
5e:9c:d5:aa:9d:d9:f2:4a:08:87:68:0c:89:8d:a9:03:a7:63:
b4:45:56:85:f3:4f:17:20:29:66:58:13:18:c1:af:bc:21:7b:
39:e1:5e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:18 2025 by rpki-client