Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/796BBDD0C92211EFAAB09494762E951A.roa
File: 796BBDD0C92211EFAAB09494762E951A.roa (raw, json)
Hash identifier: QpNa0AQQObV3byzAGf9cbzmBM47CRODQ7pftNzJbPzw=
Subject key identifier: 35:46:A4:3F:59:35:D6:01:06:EE:BF:3D:26:EC:7E:A5:17:3B:8E:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013337
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/796BBDD0C92211EFAAB09494762E951A.roa
Signing time: Thu 02 Jan 2025 15:58:57 +0000
ROA not before: Thu 02 Jan 2025 15:58:54 +0000
ROA not after: Mon 13 Dec 2027 15:58:54 +0000
asID: 17561
IP address blocks: 154.222.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78647 (0x13337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:58:54 2025 GMT
Not After : Dec 13 15:58:54 2027 GMT
Subject: CN=6776b7c1-7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:70:21:c8:04:6f:f4:53:c5:df:a2:6b:01:
20:31:de:06:51:3e:64:78:c6:90:f2:cb:39:68:fe:
58:74:b4:3d:f4:3b:bc:1e:9e:b5:37:8e:41:a9:e9:
87:a8:04:78:96:93:bc:a4:b9:9a:99:20:26:9b:bb:
02:72:de:51:89:16:ee:2a:af:bb:3c:58:35:f6:56:
d5:f5:23:94:de:92:9b:e1:2d:18:ad:2b:c4:fe:c9:
7b:82:1c:3f:ec:a6:77:b8:d4:7d:e9:08:76:73:5d:
53:c3:d3:09:78:1b:72:73:fa:2d:a5:48:ec:1f:f7:
b3:af:1c:d2:a1:17:df:a4:d2:41:25:da:e0:85:56:
f3:19:0a:e2:d7:b1:3c:87:77:91:4a:0d:a8:b5:88:
6c:c5:d8:06:4e:12:73:94:b7:8b:94:c7:50:66:78:
55:dc:be:fc:76:8c:1b:76:9e:53:e9:e7:0c:88:7f:
f5:da:05:40:49:fd:75:c3:6a:2a:5b:0c:0d:50:c7:
b3:b8:27:cc:41:ce:e8:14:e2:1d:ab:95:50:6a:22:
aa:61:3e:d0:f8:ab:19:42:26:33:0d:92:c7:d7:3c:
96:ec:06:9f:08:6d:8d:5c:9f:5a:ae:6a:88:7d:d3:
1e:30:ab:f1:1c:3c:e1:fb:74:3b:62:1d:92:14:90:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:A4:3F:59:35:D6:01:06:EE:BF:3D:26:EC:7E:A5:17:3B:8E:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/796BBDD0C92211EFAAB09494762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.97.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:db:25:c0:7d:17:28:fb:96:db:d2:e1:4d:44:d3:68:3d:ea:
dd:6b:46:7f:ab:b3:0e:a5:04:dd:2e:79:e0:15:75:0a:80:76:
c2:50:00:ca:29:7f:38:b5:fe:93:02:a2:fe:7f:7d:47:aa:8b:
44:3e:83:74:8a:08:33:71:2f:f7:f9:4b:41:b1:4b:fa:b0:9f:
c5:46:01:d6:c9:1f:d5:39:53:a1:4d:46:ea:4d:ff:bb:87:82:
5c:93:2c:42:d2:9b:39:80:c4:3e:26:b8:c9:67:82:ed:3c:01:
54:c3:2a:fd:7d:5a:a4:ce:4c:69:a0:24:00:74:d8:77:99:4c:
d2:18:4e:f8:0a:9e:0c:6c:22:05:e9:f2:f7:5e:54:34:61:88:
1b:3d:25:b2:45:e2:76:99:c3:df:a4:8d:79:9b:08:00:24:40:
34:ff:e7:5c:fc:c5:1c:9a:bb:fc:97:4f:03:57:ce:08:5f:9b:
7a:85:bd:df:b2:4f:1c:01:8a:f9:96:5c:49:8e:58:12:fb:66:
e4:c4:30:54:15:0c:1d:f7:91:06:a7:57:68:21:aa:a8:6c:c0:
ad:3d:a7:37:91:92:06:08:2b:87:15:28:f8:2a:7d:70:35:5a:
a5:a3:b3:f3:60:7a:e4:74:06:1c:07:7e:30:aa:e6:da:b9:a1:
0c:30:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:26 2025 by rpki-client