Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/802056B2C92D11EFAD4F1D5C762E951A.roa
File: 802056B2C92D11EFAD4F1D5C762E951A.roa (raw, json)
Hash identifier: thZVCMIeruhFiUzpLMOkFb6Dcyr1L0a4lg55VNYQFUs=
Subject key identifier: 25:2E:1E:78:44:EA:84:EB:87:19:4F:3C:F0:5E:3B:D1:D2:AD:DF:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01338F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/802056B2C92D11EFAD4F1D5C762E951A.roa
Signing time: Thu 02 Jan 2025 17:17:53 +0000
ROA not before: Thu 02 Jan 2025 17:17:50 +0000
ROA not after: Sat 13 Dec 2025 17:17:50 +0000
asID: 984
IP address blocks: 154.222.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78735 (0x1338f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:17:50 2025 GMT
Not After : Dec 13 17:17:50 2025 GMT
Subject: CN=6776ca41-ae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:fe:e5:cc:ec:81:28:d7:33:97:08:29:c4:
d4:7e:92:11:8b:aa:6c:4c:c2:54:18:4b:8c:2a:02:
30:9e:2e:b0:df:92:25:83:da:4b:4b:62:90:16:45:
e5:bd:2e:8d:c1:57:e1:7f:3a:e6:20:a0:16:bb:de:
0f:c4:78:14:a2:34:ba:aa:21:25:7e:5a:da:88:19:
d7:51:34:06:b6:15:d0:09:a1:6a:76:5d:a2:b4:e0:
c2:7e:97:54:72:ed:d2:f0:f3:09:9c:21:8b:f7:a7:
12:da:56:3e:a5:9d:6b:ec:8f:09:be:70:91:c2:dc:
91:fa:1d:55:62:6a:ff:db:39:99:7a:64:5b:a0:c9:
32:20:4a:81:ba:d2:2e:7e:72:68:b0:2a:f9:7e:60:
1c:a6:72:a7:cc:e8:eb:ef:9b:61:50:fb:4b:da:e9:
14:ef:ad:5e:45:fe:1e:c0:46:2f:2f:79:6c:c5:19:
c2:99:cd:ea:40:ba:cb:49:8c:e5:18:91:f4:4a:da:
5d:1d:04:46:bb:3e:bd:af:2c:b9:1b:5b:75:a2:f0:
c1:a0:ae:c3:bc:dd:10:c3:8d:4a:ed:96:05:f0:f6:
2c:14:56:29:12:42:dd:0f:d1:94:c0:de:53:e3:94:
8e:4f:4b:75:eb:63:5b:98:14:47:10:3c:23:0f:d1:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:1E:78:44:EA:84:EB:87:19:4F:3C:F0:5E:3B:D1:D2:AD:DF:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/802056B2C92D11EFAD4F1D5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7d:13:50:56:df:13:2c:da:e4:31:af:c3:f4:4c:7c:51:0c:
14:1d:21:08:31:e2:89:80:52:3a:26:b2:0d:97:40:f2:fe:a9:
0e:41:32:79:f4:e0:69:ff:4d:77:bd:a2:52:09:ed:4b:95:8a:
59:fa:15:f5:05:66:1f:67:8f:3f:eb:b6:4c:78:0f:61:35:2c:
f8:89:e7:36:c4:4e:c0:24:67:36:4a:f2:6f:95:d4:41:b6:27:
ec:04:90:5c:23:8c:cb:8a:78:7a:ed:54:77:15:d0:67:e3:92:
58:65:6b:c6:85:6c:fd:4f:ed:a9:f9:74:f5:45:1f:8b:78:15:
d4:c4:96:82:9e:5b:e5:17:61:d7:a7:0e:c4:be:58:56:76:1c:
86:09:71:fa:95:a8:bd:b2:69:de:da:6b:15:af:7f:6f:98:64:
ce:c9:bc:b6:79:f0:bf:4a:a3:09:d0:a9:f9:88:d4:97:98:34:
ff:bc:72:96:a9:b6:75:47:5a:b3:c2:bb:6d:f2:35:d2:7c:a1:
fc:ed:8e:c0:40:70:98:86:2a:83:e1:dc:48:10:00:eb:f0:84:
f7:48:79:a9:ea:24:d6:16:db:59:f5:c7:b5:da:df:30:76:f3:
fe:2d:fe:24:bb:f2:7a:9d:81:26:62:a5:e5:2a:33:a7:aa:d1:
1a:fd:31:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:49:00 2025 by rpki-client