Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B4B004C92111EF8E08648E762E951A.roa
File: 79B4B004C92111EF8E08648E762E951A.roa (raw, json)
Hash identifier: UtjeaBCubaTND6kP7bvF39dDBTpoD8TgufR+JNkmep0=
Subject key identifier: A6:3B:59:65:08:5B:FB:B7:99:0F:E7:43:61:10:8F:28:2D:31:CE:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01332F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B4B004C92111EF8E08648E762E951A.roa
Signing time: Thu 02 Jan 2025 15:51:48 +0000
ROA not before: Thu 02 Jan 2025 15:51:45 +0000
ROA not after: Sat 13 Dec 2025 15:51:45 +0000
asID: 984
IP address blocks: 154.222.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78639 (0x1332f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:51:45 2025 GMT
Not After : Dec 13 15:51:45 2025 GMT
Subject: CN=6776b614-d73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:f0:80:be:e5:bf:8f:0f:77:70:1b:13:5a:
80:8d:c8:5c:46:45:21:32:71:7e:71:ed:8a:dd:3f:
05:98:f9:c1:29:43:38:cf:4f:bb:9c:91:05:95:38:
a0:09:05:fa:a0:28:89:eb:0c:62:2d:a9:ed:5a:c3:
0d:7e:9e:c6:ed:1b:4b:07:72:1e:86:ce:9a:28:e6:
09:5f:ae:7e:50:74:85:d1:08:13:54:7c:67:9d:2c:
cc:d2:93:30:5a:64:3c:f2:07:dc:a1:89:2e:a3:25:
9a:f3:70:bc:c8:b8:cf:6c:30:84:ea:06:d2:cb:c0:
3b:7b:b3:bb:f9:89:8e:a1:b3:fd:ef:c5:91:98:76:
b4:82:60:d5:71:a4:e9:b4:98:bc:95:7e:9d:74:66:
02:7c:b5:8a:e7:c6:62:20:5f:e2:2c:bd:83:2b:b2:
c7:90:78:aa:04:2d:85:47:32:40:f0:3a:37:22:d1:
04:5f:12:81:ed:93:c4:48:bb:61:a1:94:91:b8:c1:
42:a5:cf:a9:da:0c:8e:18:b6:73:91:d9:ef:e7:fb:
ea:43:3f:31:66:40:11:fa:92:eb:ee:fc:33:89:5f:
80:32:89:fa:37:c2:8e:71:b8:57:89:34:61:a5:d0:
d9:4f:69:a7:49:d7:68:3f:c1:7d:f7:7b:ae:c7:2a:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:59:65:08:5B:FB:B7:99:0F:E7:43:61:10:8F:28:2D:31:CE:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B4B004C92111EF8E08648E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d1:03:0d:23:d1:21:c3:50:ee:f2:97:73:fc:c5:b4:59:d9:
71:23:a0:5f:c7:53:0e:88:ba:4f:73:53:ab:06:2d:a7:88:1d:
01:a3:ee:01:3d:88:94:3b:2c:38:68:5b:f3:46:c3:32:29:0e:
dd:c4:db:b6:50:58:90:d5:a9:7c:ef:20:8a:fe:15:cf:55:5c:
79:38:ed:19:fc:48:bb:c2:9b:f8:26:9a:a6:a1:59:fc:5a:be:
3c:03:df:22:5f:33:a6:0e:f8:45:c9:76:0e:bd:ca:6a:0d:7f:
eb:02:0e:7f:99:7c:2b:56:bf:ea:ee:3c:60:fd:72:2c:1d:e1:
a6:a4:db:49:1e:3b:f8:52:69:53:69:15:33:47:45:6b:78:6a:
ce:9c:03:92:a6:dd:f2:66:18:0a:28:b1:2c:9d:a8:8e:e6:7b:
4a:a1:4d:82:10:8d:06:7b:b0:d2:e0:ae:49:07:c7:c5:71:df:
80:67:0e:1e:7f:67:a5:5c:bb:e8:d9:6d:1a:8d:bb:69:25:ba:
cf:2e:c1:3b:68:63:ed:16:3d:29:88:5e:60:44:75:64:2f:73:
f3:fc:c0:a4:30:34:bf:15:98:bb:9c:84:53:aa:a3:a5:d5:d5:
81:c0:f9:9f:43:d6:c3:7b:3b:b3:33:c1:65:f0:d6:77:24:c3:
88:62:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:04 2025 by rpki-client