Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/822A2912CDBD11EF86695669762E951A.roa
File: 822A2912CDBD11EF86695669762E951A.roa (raw, json)
Hash identifier: k/W3ztMx7cHz/+F9698yj/uBZNLjyEFdqOyuZqRok4g=
Subject key identifier: 5A:D8:29:B6:AC:16:CE:C0:EB:AC:04:BC:4F:E3:1A:40:49:55:41:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/822A2912CDBD11EF86695669762E951A.roa
Signing time: Wed 08 Jan 2025 12:38:49 +0000
ROA not before: Wed 08 Jan 2025 12:38:45 +0000
ROA not after: Tue 16 Dec 2025 12:38:45 +0000
asID: 984
IP address blocks: 154.200.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79604 (0x136f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:38:45 2025 GMT
Not After : Dec 16 12:38:45 2025 GMT
Subject: CN=677e71d9-3de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:08:42:a8:62:09:ee:44:2d:eb:16:71:17:
f9:44:38:48:6d:e6:ea:0d:0b:41:34:54:6b:22:44:
7f:59:47:4b:0c:6a:2e:47:eb:9e:bb:a1:70:3e:d0:
b2:f0:12:12:69:f3:3c:bb:67:d1:a8:93:0f:b0:72:
15:85:86:76:6f:62:b3:03:7d:48:c3:a6:ae:86:36:
c4:29:e7:c5:60:81:19:58:d1:f9:fb:68:c7:a5:d1:
37:1f:f8:fb:0f:6b:f5:9b:53:07:46:ff:6f:0e:b8:
8e:82:d8:f4:5f:2f:3c:f3:ff:55:c8:a8:b0:27:bf:
0c:cb:cb:4c:27:9b:35:a7:4e:34:06:59:90:c8:ac:
9f:34:d4:c7:69:57:25:44:c8:bc:95:ef:66:b3:36:
9a:68:39:0f:31:90:43:cd:21:f4:1a:0d:05:5f:04:
cb:a4:4f:cd:b1:f4:a3:1d:ac:27:cc:f4:e7:8f:4c:
97:65:14:46:e8:f0:0f:b6:04:6a:cb:cf:6d:97:e2:
29:6e:41:90:49:49:f1:65:3f:1b:fa:13:e6:bc:4c:
6f:aa:51:8c:6a:95:2f:28:b0:cc:a0:48:93:2f:0f:
4e:a1:4f:e0:db:13:ad:c2:55:0d:76:41:e9:e6:25:
be:e7:68:52:93:a3:2c:aa:f0:8d:a9:bc:9c:33:ec:
4e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:29:B6:AC:16:CE:C0:EB:AC:04:BC:4F:E3:1A:40:49:55:41:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/822A2912CDBD11EF86695669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:42:f7:f1:c2:5a:7a:b3:03:f8:62:03:84:ad:94:ee:75:ae:
71:fc:3f:0a:cb:88:68:53:4d:89:bf:8b:b1:3d:ad:38:73:38:
9e:4f:6d:b0:8f:d4:c4:3b:17:00:6d:a6:34:9a:3f:3c:c3:b2:
1f:a7:26:e1:6c:67:c8:17:17:0d:2a:d7:54:f3:1e:f8:b3:cf:
3e:a6:17:3a:a9:73:68:00:a5:8b:38:f0:ed:3f:87:d1:1e:e8:
ae:4a:68:5e:72:f0:c6:05:d6:4e:53:ba:3f:c1:06:06:58:0a:
c8:f2:43:5b:74:a5:61:47:d0:8a:79:97:2f:56:bb:8a:bb:06:
83:7f:2d:6b:0b:e8:78:15:f4:5e:78:cc:72:dd:4e:da:ae:77:
2d:86:b6:20:e6:2b:35:4d:4a:b8:2e:7e:c3:32:3d:93:9c:95:
01:26:03:5b:b9:78:b1:b8:d8:63:7a:7a:06:41:51:f1:cc:66:
36:26:d2:ca:a2:b3:4c:f3:8f:07:40:1c:86:1b:f8:63:cb:02:
18:54:03:9c:ca:5f:57:95:24:75:03:7c:79:fc:72:1c:41:fd:
50:b2:e8:3d:95:52:b6:b3:15:39:23:c3:24:0b:03:e0:d5:3a:
85:ee:9d:e4:da:0c:5a:e5:cf:bc:48:f1:06:f8:71:4c:f8:9f:
1a:ac:04:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:15:00 2025 by rpki-client