Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B146DC2C92B11EFB36C494F762E951A.roa
File: 7B146DC2C92B11EFB36C494F762E951A.roa (raw, json)
Hash identifier: cv4IJH/xV+SMMLm/MuBlpXa6NKx9RNFcR2+9CGOcLZ0=
Subject key identifier: F4:52:FB:04:AC:C1:57:53:72:AE:AD:CA:A4:F7:CF:15:E4:6B:2F:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01337F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B146DC2C92B11EFB36C494F762E951A.roa
Signing time: Thu 02 Jan 2025 17:03:26 +0000
ROA not before: Thu 02 Jan 2025 17:03:22 +0000
ROA not after: Sat 13 Dec 2025 17:03:22 +0000
asID: 984
IP address blocks: 154.222.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78719 (0x1337f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:03:22 2025 GMT
Not After : Dec 13 17:03:22 2025 GMT
Subject: CN=6776c6de-d476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:ec:b5:22:e9:41:44:aa:94:c3:3f:fb:7d:
42:23:13:71:d6:42:df:a6:21:5c:d2:34:84:8f:80:
da:8a:13:7a:f2:2a:99:7c:b8:03:ab:03:0f:2a:1f:
83:62:d2:86:c9:56:dd:d4:97:6e:6a:c3:e7:dc:49:
8b:6f:38:18:0c:1c:5f:fd:80:76:29:d4:d4:5a:a9:
a3:7b:c4:2c:42:a3:4a:c4:1a:74:95:b1:77:47:98:
ed:7e:3e:0c:4d:da:8f:c6:f0:a5:80:c1:42:2a:da:
fb:b1:36:36:4c:71:c7:32:15:83:e4:e5:c8:b7:10:
02:b4:bd:d7:34:87:d6:4d:37:3f:83:a8:28:b3:29:
69:3b:7c:c9:bd:41:21:44:6f:dc:b2:54:4d:53:96:
8a:ed:88:68:ee:a6:bb:41:19:b3:2f:23:9d:18:4c:
41:68:43:68:7a:e8:2a:c1:1d:49:ef:a0:a4:76:de:
23:35:5b:c5:fd:a5:f3:d3:8f:f9:d7:3c:7f:07:09:
c6:75:5d:bf:ba:d6:8f:7c:40:27:16:c0:b7:cc:13:
46:6d:17:e4:13:06:a9:61:1f:10:1e:1e:53:91:cc:
3f:13:9b:2c:cc:33:2f:c5:f6:14:e6:dd:73:4e:a9:
6b:57:c3:17:dc:8f:8b:75:ab:f7:47:e4:8a:63:91:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:FB:04:AC:C1:57:53:72:AE:AD:CA:A4:F7:CF:15:E4:6B:2F:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B146DC2C92B11EFB36C494F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e9:59:47:39:17:49:dd:f7:61:47:e0:b9:8e:2d:97:7b:0a:
79:98:d0:72:83:15:ab:d3:56:db:02:f0:a1:e8:f0:de:42:7c:
6a:a0:cf:8f:3a:be:5f:fd:70:32:c8:8b:d3:fb:29:1b:70:41:
0e:69:3a:f4:cb:b3:de:91:66:fc:dd:35:e2:b9:9e:00:dc:92:
9e:fe:72:d1:2c:4e:8a:3f:4d:03:59:67:32:e7:24:17:0b:87:
8b:5e:0f:67:27:a0:e8:dd:7a:1c:28:3f:6e:67:5e:0a:57:f7:
9e:bb:68:cd:85:24:fc:a4:97:90:af:46:8a:e1:51:10:51:9e:
ca:2c:e2:92:f9:a7:ec:e4:d4:87:34:2d:b9:8b:ef:15:d8:13:
cd:b3:9c:2d:61:c1:f0:14:28:51:dd:6f:a8:25:57:5a:5e:fe:
9d:fa:44:49:57:46:cf:bb:13:eb:f2:fc:af:24:f5:5f:50:f0:
06:96:8b:fe:f4:dc:a5:9b:4c:81:71:04:a0:5a:a0:58:c8:36:
7f:00:21:18:2c:e2:97:93:8c:4b:c8:28:ef:e0:48:a1:f1:51:
70:cd:2e:d1:96:b0:e4:af:d7:48:bf:e8:aa:cf:05:39:73:6c:
65:e4:ca:26:6f:b7:42:7d:69:ec:2b:5a:6d:4c:48:81:ac:58:
49:e5:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:56 2025 by rpki-client