Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/850E5276C92F11EF8D8E2A67762E951A.roa
File: 850E5276C92F11EF8D8E2A67762E951A.roa (raw, json)
Hash identifier: Xe2tS72DbZyWegWt+V+IZJrAwlE83ThHkeHSn7SD22M=
Subject key identifier: C5:79:9A:3F:65:AC:01:F4:A9:45:D1:E2:CE:F8:3B:32:70:F3:79:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01339F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/850E5276C92F11EF8D8E2A67762E951A.roa
Signing time: Thu 02 Jan 2025 17:32:20 +0000
ROA not before: Thu 02 Jan 2025 17:32:17 +0000
ROA not after: Sat 13 Dec 2025 17:32:17 +0000
asID: 984
IP address blocks: 154.222.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78751 (0x1339f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:32:17 2025 GMT
Not After : Dec 13 17:32:17 2025 GMT
Subject: CN=6776cda4-8fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:b1:41:be:2b:a8:b4:ca:17:3a:6d:66:a5:
81:59:fc:ad:1e:d4:3b:f2:48:57:e5:63:26:d8:a6:
91:4c:2e:f1:3a:a0:84:82:25:50:5a:0e:7c:c2:b0:
7b:e7:b1:94:e7:0b:86:f4:69:4b:2b:2d:cd:24:57:
23:16:37:0b:c5:d3:7a:a3:4c:30:93:cc:14:d7:e3:
89:ef:02:b8:2c:de:9d:e6:06:ed:b0:60:04:d5:42:
44:3f:01:d4:db:aa:dd:c6:39:ab:04:a8:03:d9:40:
6f:29:00:45:0d:32:8d:13:42:ef:ff:b6:5d:17:fe:
93:4e:be:da:8c:ba:c8:f1:97:ae:69:2e:ef:47:d4:
d7:f8:41:ce:96:e1:6d:a0:0f:d1:21:54:09:5f:54:
9f:be:09:74:f8:22:c4:69:a3:42:08:4e:2b:22:3f:
60:e7:da:1f:4b:86:8f:b2:e4:49:dd:5b:1a:91:dc:
f0:1c:4d:3c:10:ee:6a:33:29:b3:9e:7d:26:59:86:
c0:eb:25:40:cc:50:dc:68:8d:5d:ba:24:89:32:a8:
56:ff:be:3c:68:2a:72:e5:99:80:08:3e:12:bc:f6:
ef:c2:64:d8:8a:79:1a:ff:dc:66:c5:1e:a3:d5:2b:
19:2a:ff:82:f8:7b:24:ea:fc:a4:d6:43:0b:03:10:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:79:9A:3F:65:AC:01:F4:A9:45:D1:E2:CE:F8:3B:32:70:F3:79:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/850E5276C92F11EF8D8E2A67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.156.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b5:e0:43:41:6f:6d:4f:02:4d:a5:57:91:88:1b:24:44:8d:
d6:5c:25:b1:83:43:76:92:b7:15:56:fc:06:5f:69:df:6d:a6:
d6:3c:e1:86:6f:51:57:28:d9:a4:aa:ce:6e:0d:5e:84:1b:5d:
3f:0d:b7:e0:58:b4:e2:cd:4f:70:7a:d9:2a:6d:72:c0:fe:25:
13:f6:8e:9f:ff:f6:a3:e7:d0:c2:a6:94:3a:82:c5:e5:4c:8e:
64:44:c0:f6:57:12:55:17:a1:f2:e5:de:69:64:20:ec:2f:85:
25:68:a4:b7:a8:52:fe:80:d8:bb:41:79:4e:52:7d:b6:2a:c1:
30:26:46:62:5e:e2:ef:7c:c8:f2:96:a4:6e:df:66:c4:7e:49:
ce:0a:98:c1:60:bf:d5:12:d5:e3:72:b3:8d:a6:d3:b0:13:67:
b4:2b:8b:5b:62:39:19:64:bb:29:34:88:31:05:54:4b:1c:c4:
21:d4:3d:2b:1e:7d:bc:ac:a4:49:21:47:92:68:60:03:d1:19:
6b:c0:28:d7:e5:b5:87:01:cd:92:2e:a9:39:2b:30:44:e3:95:
78:02:25:a9:33:ce:11:46:21:f8:05:1f:90:3a:13:6c:e0:50:
de:8e:b2:f5:26:02:14:99:aa:b2:cd:30:eb:2f:7a:1c:cf:d3:
21:2d:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:32 2025 by rpki-client