Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE4A1CCC91311EF833DB7B8762E951A.roa
File: 9DE4A1CCC91311EF833DB7B8762E951A.roa (raw, json)
Hash identifier: Njz4ykBYHigWG68mvmCU+osSjHSBw3Y7ZocAVszxZWY=
Subject key identifier: 42:9F:CA:80:E1:90:DD:07:6D:0A:E5:4F:AE:AD:A6:1D:B1:77:95:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE4A1CCC91311EF833DB7B8762E951A.roa
Signing time: Thu 02 Jan 2025 14:12:36 +0000
ROA not before: Thu 02 Jan 2025 14:12:32 +0000
ROA not after: Sat 13 Dec 2025 14:12:32 +0000
asID: 984
IP address blocks: 154.221.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78525 (0x132bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:12:32 2025 GMT
Not After : Dec 13 14:12:32 2025 GMT
Subject: CN=67769ed4-8303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:da:5e:b4:f2:4a:70:b5:7e:61:93:4d:b2:
7f:94:9e:a3:8f:30:b5:2b:0c:a8:4b:8b:00:32:a8:
47:54:1d:b2:01:bb:bd:16:43:74:9c:c4:c9:54:bd:
99:c6:0f:18:db:8c:fd:27:eb:7c:4e:1f:02:3d:6d:
aa:57:67:c2:cc:9e:fc:3f:04:da:dd:4a:9a:bc:27:
23:e4:5a:e2:68:8e:97:81:74:87:f4:3f:3a:3c:33:
b5:7d:ad:57:08:f7:0f:eb:44:48:75:3a:99:17:f3:
ca:6c:e1:87:9a:06:e9:2d:4d:70:ad:f7:31:3a:39:
c8:39:97:05:dd:e7:a5:cf:59:44:c9:5d:7e:6a:77:
ee:29:81:50:34:55:49:06:84:9f:cf:d4:cb:f1:72:
fb:23:07:67:71:16:1a:fd:9e:bc:ef:85:41:80:c9:
15:9b:51:21:e9:38:07:c2:69:88:29:ed:7f:02:fc:
db:c8:7a:32:c1:ca:67:f3:76:ab:e0:57:f0:a5:33:
2f:d1:22:1b:d8:f3:d3:e3:07:92:96:5d:8d:1b:71:
4a:2e:a7:95:93:9c:a3:8d:f1:1e:65:03:00:4c:14:
e1:50:97:8b:dd:36:6d:7c:83:0d:f6:f4:72:dd:47:
df:1f:ed:f9:4a:64:26:26:5e:98:d2:a7:08:8a:5f:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:CA:80:E1:90:DD:07:6D:0A:E5:4F:AE:AD:A6:1D:B1:77:95:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE4A1CCC91311EF833DB7B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d5:7a:6e:f2:cc:0e:bb:57:d3:0e:b3:ff:88:bf:cc:e0:46:
44:a2:dc:89:af:1c:8d:8f:8e:cd:27:6b:92:e0:02:86:ba:9f:
a2:85:27:e4:ef:7a:c3:00:c3:aa:81:46:e8:a4:5a:cf:a2:1a:
1d:b3:c7:b2:b3:1a:01:71:bb:b7:1f:2b:de:aa:6f:b1:e2:ae:
66:80:00:1c:a4:5e:54:ce:8d:43:8f:fa:b2:16:24:85:21:e3:
0e:46:82:7e:74:8c:29:75:b4:ed:71:b6:f6:58:ea:e6:85:21:
cc:d3:ed:d3:e0:e8:aa:2b:19:ab:52:c1:af:d3:88:2f:c1:aa:
21:e9:d3:be:59:fb:ed:22:04:d8:67:ad:d7:33:2a:1b:86:46:
b2:1d:9d:c7:81:79:be:1d:22:8a:e6:37:fb:ac:04:97:8e:d1:
0c:c7:b3:83:22:20:6d:a5:c8:b2:d5:e5:79:a1:fd:e0:5b:1b:
71:0a:45:3a:89:29:c9:dd:50:31:c8:7b:95:38:d8:70:7c:d3:
ea:66:87:f7:d2:94:b0:59:e2:7a:ff:1e:5f:bd:ed:b2:de:7e:
1a:de:bd:6c:8c:b5:ac:c3:c4:53:71:1f:6b:d7:41:4e:aa:5c:
4f:64:1c:e9:e9:58:7c:4d:72:da:f1:2d:cc:0c:9b:5d:8f:96:
14:87:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:31 2025 by rpki-client