Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/796BAF86C93E11EFAA4EE645762E951A.roa
File: 796BAF86C93E11EFAA4EE645762E951A.roa (raw, json)
Hash identifier: InIzKIyvt/rnyryfJaxEmrYetbz1Bm0UDlFQtMBw/nM=
Subject key identifier: C1:1F:3A:A8:15:DD:2D:92:30:88:09:2B:72:69:26:28:37:39:5F:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013415
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/796BAF86C93E11EFAA4EE645762E951A.roa
Signing time: Thu 02 Jan 2025 19:19:23 +0000
ROA not before: Thu 02 Jan 2025 19:19:20 +0000
ROA not after: Sat 13 Dec 2025 19:19:20 +0000
asID: 984
IP address blocks: 154.223.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78869 (0x13415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:19:20 2025 GMT
Not After : Dec 13 19:19:20 2025 GMT
Subject: CN=6776e6bb-9944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:37:da:d4:ae:59:70:b2:2b:cc:95:d3:17:
84:c3:12:8c:c1:7e:3c:7f:da:f8:d1:35:53:59:24:
1d:80:9d:1c:db:66:74:47:c7:40:0d:fb:fd:45:4e:
ed:46:3e:bc:6e:55:a3:cc:be:de:73:35:f9:8e:ec:
6d:da:52:b1:1d:79:db:9a:bf:58:00:40:9c:23:09:
09:21:cf:5a:94:b9:7b:40:2a:31:f6:e2:e1:6d:24:
0b:5a:ec:a3:13:77:1e:db:c4:2f:2f:b6:e5:d6:9c:
e4:c7:47:b9:e9:b1:02:70:b3:67:31:cb:47:89:12:
63:c9:ea:d1:17:aa:45:f5:2c:f2:2b:4f:f0:d0:fc:
cd:8f:68:fe:a7:27:61:e4:c4:09:c2:2b:05:c1:64:
76:5d:94:b9:9c:78:bd:b8:52:88:7d:98:dc:97:5a:
5b:f9:1f:7f:67:0f:22:8f:ec:95:11:e5:93:a4:cf:
d5:85:78:2c:81:bc:c7:28:c6:73:00:bc:d8:99:82:
44:8c:66:97:b2:c5:fe:ff:13:b0:24:f8:d6:53:93:
2d:f9:1e:09:88:1a:63:e5:43:26:c7:19:28:a4:3f:
83:ec:56:e2:ef:82:76:5d:29:61:08:4d:ce:2c:4e:
e9:8b:67:26:c7:77:54:79:81:fc:5f:83:fd:48:09:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:3A:A8:15:DD:2D:92:30:88:09:2B:72:69:26:28:37:39:5F:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/796BAF86C93E11EFAA4EE645762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.238.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fd:95:9a:c7:7b:db:74:0a:98:24:b9:ac:35:92:44:c6:e7:
c4:ef:4a:c7:ad:6e:1a:7c:e9:73:92:f7:53:d9:d0:c8:3c:a1:
6a:a2:d2:f9:07:0b:94:8c:5d:9d:94:cc:5a:c0:89:4b:26:fd:
d9:f1:14:5b:67:5d:a4:57:cb:f0:d1:92:c4:5a:f2:b5:fc:23:
8c:30:ce:9d:70:fc:7d:6a:74:54:3c:60:b1:df:b4:3c:fb:38:
d8:64:e9:e2:7b:25:e2:d0:2f:f8:cb:e6:49:d8:7c:7f:e4:c9:
a6:54:d1:13:fe:ae:47:2e:2b:1c:ce:2c:36:8d:a6:b9:99:b8:
23:20:2c:20:dc:76:e9:a0:73:6d:0f:3c:44:d8:03:2d:35:8a:
0d:78:a3:f9:b4:b9:f4:ea:7b:a1:c6:0d:9e:7e:c6:2b:23:c9:
d2:f1:97:0d:a4:32:50:2b:70:8e:68:68:de:44:db:ce:73:ee:
f0:bd:12:3e:b6:d5:31:19:3b:89:6b:50:9a:b2:d7:3a:0c:be:
48:49:f0:9a:4c:77:69:40:63:fc:5c:5d:85:08:20:21:5a:39:
2a:16:89:19:9d:72:d4:24:e8:7d:0b:73:7c:5d:e9:f7:ee:79:
71:17:24:ec:b2:5b:dc:67:3f:08:ce:83:52:c0:4c:a1:f1:b3:
cf:b3:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:05 2025 by rpki-client