Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A685CD2C93611EF85B9D593762E951A.roa
File: 9A685CD2C93611EF85B9D593762E951A.roa (raw, json)
Hash identifier: Gnuk/Vxy6gFfQOEAjADZVZVaWd7vRxZWEPy4v/aXxjI=
Subject key identifier: E6:C2:D9:78:8A:EF:8A:C5:39:05:84:EF:9D:2D:5F:6A:B4:4E:81:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A685CD2C93611EF85B9D593762E951A.roa
Signing time: Thu 02 Jan 2025 18:23:03 +0000
ROA not before: Thu 02 Jan 2025 18:22:59 +0000
ROA not after: Mon 13 Dec 2027 18:22:59 +0000
asID: 17561
IP address blocks: 154.222.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78807 (0x133d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:22:59 2025 GMT
Not After : Dec 13 18:22:59 2027 GMT
Subject: CN=6776d987-9cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:97:1e:5c:b5:74:64:26:19:c6:fb:d9:17:
70:4f:06:64:96:62:51:5e:cb:bc:2f:4c:49:97:c9:
98:12:7e:30:b9:f5:94:fe:e5:e0:17:06:37:c3:d0:
12:83:24:16:be:8e:20:9d:64:a4:86:2c:2b:4f:8e:
51:d3:d8:16:b5:5b:26:01:71:b0:ae:f6:d2:ba:7f:
38:19:f5:28:d9:45:79:c1:c8:df:ce:b8:ec:f4:d6:
b3:b6:fe:db:8c:2e:f7:dc:f9:4e:6f:85:fd:02:af:
04:33:b8:f5:09:a6:2e:94:4f:d2:b3:3d:d4:b5:9e:
77:cb:ed:43:ba:c1:7e:73:91:20:5a:81:3b:0a:9a:
73:d7:e6:a5:98:6b:8a:e7:98:06:59:5c:36:03:73:
69:9f:66:35:96:d4:45:fc:4c:da:8c:4f:11:92:ff:
7f:34:44:59:15:dd:aa:df:42:3f:3a:27:77:24:84:
9c:24:12:8a:cd:b2:1c:dd:9a:59:48:59:1a:5f:ea:
cc:c0:93:d4:3a:ce:e4:0d:88:40:67:3d:4b:ed:7b:
9e:5b:70:a8:ee:45:45:de:90:f2:cf:d9:f5:94:cf:
8c:71:a7:8c:65:74:c3:95:f8:ed:d0:60:df:84:7b:
16:ef:92:75:a2:55:ea:78:42:29:a8:9e:22:99:47:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:D9:78:8A:EF:8A:C5:39:05:84:EF:9D:2D:5F:6A:B4:4E:81:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A685CD2C93611EF85B9D593762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.187.0/24
Signature Algorithm: sha256WithRSAEncryption
af:16:63:b7:4a:78:e3:de:e8:b5:98:fb:48:4d:40:61:b0:fb:
e5:00:87:64:49:bc:d9:fe:9e:82:e1:1f:18:32:6e:3b:39:12:
b8:ed:be:34:09:c6:e5:c7:b5:9f:c1:48:8c:7f:91:e1:c1:a7:
d9:04:ce:25:5a:67:77:61:f3:af:00:4c:87:8f:a0:9f:15:89:
82:85:a8:65:0f:c9:8a:b0:28:cf:5e:71:b2:af:b6:19:8c:bb:
14:30:bb:3a:15:d3:95:a7:1a:1f:8c:f4:3a:2e:78:00:50:5e:
d9:dc:dd:b8:ac:95:f8:fd:29:f5:ba:f4:e0:01:3f:5e:13:28:
48:b9:86:d2:9a:8d:53:3f:db:18:2e:df:cc:fc:c5:f4:4c:fe:
bc:7b:c6:33:07:69:d1:24:59:ac:71:a6:c9:fc:f8:79:68:f4:
62:fb:1b:81:dc:cf:00:88:f2:59:a9:ae:4c:43:ac:2d:e5:09:
ef:c4:25:d0:f1:f3:e2:94:99:c2:ba:23:39:a0:9d:89:cd:96:
f2:43:a7:cf:fc:4a:0f:77:4e:ee:39:17:ad:1d:8f:95:e4:db:
4b:ca:58:e0:18:2f:9e:ad:47:13:46:70:ba:aa:54:0c:ca:72:
78:0b:d8:56:67:2d:96:dc:70:33:a1:e1:27:13:1f:12:1f:35:
e5:72:92:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:06:24 2025 by rpki-client