Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B3492CC91711EFA6D22C52762E951A.roa
File: 87B3492CC91711EFA6D22C52762E951A.roa (raw, json)
Hash identifier: wNz+e6QjjECDhPbkIOdKcJjRr/gSpjn0ue12Mmf4LMs=
Subject key identifier: 78:A3:00:7E:1C:45:47:55:09:2D:CD:A2:A1:15:70:3A:0C:40:6E:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B3492CC91711EFA6D22C52762E951A.roa
Signing time: Thu 02 Jan 2025 14:40:37 +0000
ROA not before: Thu 02 Jan 2025 14:40:33 +0000
ROA not after: Sat 13 Dec 2025 14:40:33 +0000
asID: 984
IP address blocks: 154.221.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78557 (0x132dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:40:33 2025 GMT
Not After : Dec 13 14:40:33 2025 GMT
Subject: CN=6776a565-51ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:d9:e3:25:55:c1:81:61:09:71:7e:f6:54:
5b:d7:9b:1e:23:da:9f:64:f6:84:73:12:12:4b:82:
72:4b:97:56:c1:83:a0:4c:57:81:12:6c:06:ed:68:
7b:58:d9:ba:10:0f:21:9f:33:1b:51:2a:11:0d:3d:
62:fe:c0:65:26:85:83:f1:49:b1:7a:ec:b7:91:5d:
d0:4f:7b:98:d4:df:d8:e4:53:42:cb:dc:db:31:07:
d4:59:57:95:c4:59:1a:f2:ad:40:33:d1:92:5a:76:
dd:2e:e6:9e:62:a1:53:85:db:db:4b:cc:cc:f0:0e:
35:da:4b:84:e7:e4:7d:a6:c5:76:b6:4d:32:48:41:
e2:c6:fc:35:ce:64:7e:2a:4b:15:23:23:db:14:e5:
81:f4:24:c6:51:ca:fc:4b:80:16:53:6b:22:0b:cf:
ab:a7:78:80:38:b4:43:bc:54:72:78:7c:ea:78:1e:
c2:1c:44:f5:9f:ba:d0:57:53:5c:ee:1d:38:57:2d:
d9:3e:ee:2d:a7:ef:a9:ff:da:1b:60:2f:b5:a5:41:
55:29:42:30:de:6b:dc:70:fb:40:02:4f:a4:18:5b:
f7:2d:8e:9e:d9:57:f7:22:0f:de:ad:62:8d:08:7d:
35:1a:84:74:3f:fc:e2:b5:d5:c7:1d:df:74:94:d9:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A3:00:7E:1C:45:47:55:09:2D:CD:A2:A1:15:70:3A:0C:40:6E:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87B3492CC91711EFA6D22C52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c2:00:9c:2e:6e:dc:4b:d6:aa:25:86:de:29:6e:00:3f:a9:
1d:ba:68:69:9d:a0:78:0c:2e:bc:53:13:d4:8f:10:a6:76:d1:
03:c7:19:57:00:52:0c:5b:f8:80:66:4e:cf:10:9f:5f:71:b0:
08:54:b6:e8:a5:2e:18:90:15:f5:da:1d:46:6c:c7:e2:ce:89:
a2:71:35:13:8a:1a:18:02:04:f5:93:cc:f4:e8:45:f8:67:8d:
9a:ee:e0:17:c1:f8:7c:81:d6:6b:5c:bf:30:e2:e4:fa:a9:45:
9a:31:35:7a:a0:f4:df:5f:b9:e5:fe:fe:bb:c7:fa:4a:12:e6:
66:45:f9:ca:b3:82:ff:0e:9b:e7:e0:29:bc:d1:ee:93:99:bb:
d6:7b:4c:04:95:e0:e6:a8:92:6d:87:52:29:ca:3c:1b:12:b1:
2e:a0:87:c5:c6:fb:f4:96:60:3c:66:bd:34:cb:c4:0a:ff:f0:
0e:be:dc:ac:87:7d:88:3a:5b:c2:ae:e5:37:10:1f:9c:62:d2:
61:6e:dd:9d:18:37:dc:36:b7:6f:92:2c:e5:2b:4e:3d:c9:9c:
da:d6:e0:2a:c8:e9:2d:a8:9d:6b:b5:f9:29:b1:bb:80:24:6c:
5f:36:eb:38:ff:1c:4a:52:3f:80:e2:a7:1f:df:f6:c4:46:dc:
e6:d2:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:20 2025 by rpki-client