Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85F16EB6C93011EFBEFE5F6D762E951A.roa
File: 85F16EB6C93011EFBEFE5F6D762E951A.roa (raw, json)
Hash identifier: 9Kt6EfOQcQfh/ErDlMwhVMP+QGIRbJ4IZ0bzrcoigFU=
Subject key identifier: 28:3B:C1:C6:B2:DD:CD:D8:FB:14:1B:68:DC:32:F8:0A:A6:3E:BD:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85F16EB6C93011EFBEFE5F6D762E951A.roa
Signing time: Thu 02 Jan 2025 17:39:32 +0000
ROA not before: Thu 02 Jan 2025 17:39:28 +0000
ROA not after: Sat 13 Dec 2025 17:39:28 +0000
asID: 984
IP address blocks: 154.222.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78759 (0x133a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:39:28 2025 GMT
Not After : Dec 13 17:39:28 2025 GMT
Subject: CN=6776cf53-3aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:19:60:f5:f3:b3:86:b1:47:ca:05:3a:b7:
cb:03:74:ba:f8:cb:87:dc:99:12:cb:2b:6d:d3:e3:
fd:6c:d8:d7:be:13:e0:19:f5:c8:8c:25:59:97:a8:
ab:67:a1:61:90:ac:cc:89:a2:63:6a:f3:b5:c8:0d:
21:0b:30:7d:f5:f2:59:aa:5a:c7:f5:78:5a:7b:59:
3f:17:0c:35:fd:dc:a3:28:ce:18:ce:1c:6c:d5:a7:
80:f2:74:97:d9:8b:10:e8:72:9f:14:95:ac:0d:1b:
81:c6:4d:61:d2:61:fb:6d:b9:7e:74:b9:0f:24:68:
9c:67:6a:14:01:c7:87:05:63:59:07:74:00:e1:10:
66:bb:6c:0c:34:67:c7:91:97:e3:21:39:62:2c:75:
81:08:f9:94:70:ba:d8:7e:8c:03:4b:a6:4d:d3:e6:
5c:7a:d1:3e:21:48:45:b4:35:f0:19:ae:bd:39:cc:
52:07:0c:fd:8d:60:bf:a6:9e:25:9c:78:e7:83:74:
f2:de:ed:a1:11:c7:fc:03:27:cf:c2:ef:7b:69:0b:
f2:f3:ea:68:84:5a:ca:a5:64:8b:0d:5b:6a:1b:4a:
b3:f1:f2:fc:d3:b1:5e:be:76:a9:91:ff:2a:52:4e:
46:56:37:df:a2:2d:35:82:6f:87:f5:67:a0:aa:22:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3B:C1:C6:B2:DD:CD:D8:FB:14:1B:68:DC:32:F8:0A:A6:3E:BD:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85F16EB6C93011EFBEFE5F6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.161.0/24
Signature Algorithm: sha256WithRSAEncryption
51:89:88:d0:77:08:4d:12:33:46:34:3c:12:60:56:58:35:97:
12:18:f5:93:cf:05:5d:4f:69:52:ef:2f:3d:28:22:5a:af:ec:
10:ac:24:65:99:cb:ff:21:f8:ba:c6:00:18:c5:97:4c:8c:0e:
48:50:b6:31:7d:14:01:f6:cf:07:6d:a8:20:6d:fd:4e:f1:0a:
9c:d8:a2:3f:90:f6:ab:13:c8:1c:2c:20:04:1d:19:36:30:e9:
1a:b1:59:1e:f0:5f:27:89:ad:d3:e9:38:af:56:91:06:d4:5b:
df:62:b9:6a:9c:d7:db:95:14:76:01:b6:c2:ae:77:75:99:21:
cb:e7:fd:4d:2a:4a:c5:6e:94:b8:89:83:d8:ac:41:32:5b:b0:
a6:2b:7b:9a:df:c3:21:39:c9:b9:03:b7:21:81:5a:67:ee:66:
03:3d:ca:e8:36:49:05:9f:c0:96:41:d8:12:b8:2a:02:80:d4:
86:bd:70:3f:25:97:d7:a9:5d:e7:66:c4:e3:1d:89:b0:fa:58:
cf:30:f4:47:3f:c5:de:40:3b:23:24:8c:3a:d2:2a:e1:2f:6d:
55:70:7a:cf:24:50:c5:35:ec:5a:fd:c6:c4:03:7f:2a:5b:62:
69:e4:12:e4:90:2f:ad:9c:c5:7b:e0:d9:b5:6a:4c:f8:08:94:
0b:39:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:13:53 2025 by rpki-client