Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A054496AC93811EFB27900A1762E951A.roa
File: A054496AC93811EFB27900A1762E951A.roa (raw, json)
Hash identifier: w4ve9yoFBruGK8paP5+2X3npb2SIoqJVCsd2vWNGeW8=
Subject key identifier: 08:25:C6:11:0E:B7:63:E0:F3:7E:CA:EA:1A:A3:C0:CB:F6:B8:10:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A054496AC93811EFB27900A1762E951A.roa
Signing time: Thu 02 Jan 2025 18:37:32 +0000
ROA not before: Thu 02 Jan 2025 18:37:28 +0000
ROA not after: Sat 13 Dec 2025 18:37:28 +0000
asID: 984
IP address blocks: 154.223.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78823 (0x133e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:37:28 2025 GMT
Not After : Dec 13 18:37:28 2025 GMT
Subject: CN=6776dcec-3740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:e8:ab:92:e3:18:0f:06:b7:23:54:da:50:
29:67:c6:dd:f5:28:ce:aa:2a:9c:8b:0e:98:2b:0f:
d7:44:2b:f7:96:92:c6:5f:40:eb:7a:ca:11:c2:c5:
71:b5:aa:3b:99:97:c9:29:a5:39:62:c8:33:41:18:
e7:58:04:2b:90:fc:be:78:0d:85:06:f8:95:15:db:
4b:b9:a1:bd:d7:14:64:cd:a4:f7:ab:88:66:d7:89:
2d:ad:4e:b9:f0:8d:09:50:1e:ad:0e:fd:85:e5:e2:
52:e3:a6:4c:d2:22:46:14:9a:7d:7b:3d:bc:b6:92:
66:0b:f9:16:00:99:80:e7:45:bc:97:eb:22:88:aa:
96:ff:c8:89:22:71:17:f5:7d:83:26:e5:b9:db:0d:
87:7d:98:bb:44:ab:08:4d:55:a0:da:f8:4d:13:1a:
b9:68:fc:cb:4e:a7:a9:2f:c7:76:29:1c:73:1a:9c:
e5:20:1c:d7:d5:cd:a3:7d:47:77:fd:8b:38:24:0a:
78:7b:9b:0e:9b:d4:d5:87:51:5b:42:06:34:46:e5:
60:81:ac:db:dd:9f:e1:80:14:3e:be:9f:fb:77:ed:
d4:50:6d:48:d1:06:03:30:08:9e:f2:80:84:39:a4:
e9:7c:cc:dd:62:f9:1c:d2:d8:81:aa:b9:71:1f:b5:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:25:C6:11:0E:B7:63:E0:F3:7E:CA:EA:1A:A3:C0:CB:F6:B8:10:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A054496AC93811EFB27900A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.94.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ed:81:9a:8a:e7:14:73:a4:ce:f6:0e:02:4d:06:a0:ce:1d:
cb:47:a7:49:4e:01:dd:4b:ca:4a:8c:ad:d3:cb:c5:fe:a1:89:
57:a6:a0:97:f2:16:25:01:df:c7:46:5f:b5:11:c3:21:16:af:
bf:02:68:6d:ab:5b:85:64:c6:fb:ea:46:db:b8:07:dd:dd:60:
10:19:f1:5a:a9:15:5c:fb:52:31:92:96:00:28:e6:d3:5e:5b:
22:7c:6b:73:5f:fe:a2:1b:dd:40:ef:b7:b3:f8:2d:e9:de:25:
10:3c:de:99:a1:ff:3e:c1:aa:5b:01:79:d7:c1:48:40:0b:99:
1c:f5:93:5c:38:bc:03:7e:7b:a2:52:6e:36:45:cd:7e:d5:dc:
f5:d9:8f:e9:0c:7f:7e:a3:36:b1:ac:b6:5e:44:e4:73:dc:bf:
76:2a:ea:1b:33:11:85:d7:ea:9e:3b:7d:f4:34:4a:0a:b7:d9:
66:c6:24:8f:79:5c:dd:b9:4e:65:1e:4c:5a:f3:b5:22:41:d1:
7d:ee:c1:c3:89:b7:bc:ab:57:63:04:33:96:f1:4a:03:48:d2:
ae:e9:b3:40:78:f7:b8:56:8f:63:11:f8:ef:a7:26:66:24:1a:
78:fc:22:5d:70:47:42:56:14:34:a8:3c:be:1f:18:56:79:31:
b9:e2:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:58:13 2025 by rpki-client