Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB446AA8C92411EF9358A4A2762E951A.roa
File: AB446AA8C92411EF9358A4A2762E951A.roa (raw, json)
Hash identifier: ZwNvLK2V1RfWu6u4CgCtRz/b1QmfktUZrc4/d6VyK+U=
Subject key identifier: 7F:55:8E:6D:CC:17:A0:6B:35:F7:07:06:BE:FB:71:3D:49:90:BA:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013349
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB446AA8C92411EF9358A4A2762E951A.roa
Signing time: Thu 02 Jan 2025 16:14:40 +0000
ROA not before: Thu 02 Jan 2025 16:14:36 +0000
ROA not after: Sat 13 Dec 2025 16:14:36 +0000
asID: 984
IP address blocks: 154.222.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78665 (0x13349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:14:36 2025 GMT
Not After : Dec 13 16:14:36 2025 GMT
Subject: CN=6776bb70-a351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:65:fa:d9:48:5b:d9:e2:c2:4f:fa:c2:d5:
77:11:d0:36:98:9a:81:12:e6:27:94:5c:93:ac:22:
d7:38:a1:a0:dc:35:1b:9c:f4:20:7f:92:d6:74:8a:
b0:a1:d6:ea:1f:52:be:06:5c:9e:6e:9d:44:4f:93:
1e:fc:c5:d1:e9:bb:a1:08:12:3d:a9:7b:64:e0:50:
3d:bd:d7:a8:fe:ac:a7:cd:e6:d9:a5:5f:16:3c:7a:
1c:72:95:4b:0e:de:fb:ca:bb:ea:cc:d5:6c:0b:f2:
f0:96:1c:bc:4b:33:88:41:65:13:8b:7b:10:d7:f1:
f8:26:d2:cd:c1:5d:fd:77:34:6c:7f:8b:32:31:80:
72:68:ae:3e:3d:ee:35:ab:f6:28:d8:1a:dc:8b:53:
07:cf:be:79:b8:e7:cd:7a:81:34:3c:b7:7e:8e:2f:
50:5c:3a:0e:79:ad:f6:fc:70:c7:6f:f8:94:d4:ed:
2b:bb:96:14:f7:c2:2b:4c:25:8d:de:ec:8d:2d:8d:
85:2a:f4:25:52:23:a1:08:a0:72:51:95:03:bb:d1:
60:14:54:2c:b1:f0:08:10:e9:cf:41:62:45:81:98:
81:87:8f:2b:cd:f2:ea:89:0e:6e:47:0c:a0:8a:2d:
5d:fc:9a:68:47:eb:b4:b2:17:9b:73:4f:36:44:d3:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:8E:6D:CC:17:A0:6B:35:F7:07:06:BE:FB:71:3D:49:90:BA:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB446AA8C92411EF9358A4A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.107.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e5:a8:8a:ca:90:97:0b:88:ff:f0:8b:67:15:4d:ed:b4:f8:
b5:10:fd:94:0f:cd:32:82:ae:20:17:cd:4a:ad:43:dc:d1:21:
d5:5f:e1:98:47:06:2a:27:95:7d:03:94:51:60:88:86:55:1d:
96:af:84:42:df:56:72:a2:a6:95:44:35:e0:e1:09:aa:93:b1:
16:af:62:89:26:23:32:9e:c4:6a:e1:28:78:f7:3c:9b:c2:a6:
95:c7:f4:5b:47:99:a1:90:6f:01:04:79:d0:02:9d:c8:ff:c1:
25:dc:bb:05:d2:b2:b0:26:d3:b5:fe:fd:7a:88:54:92:00:ac:
f3:3c:9a:b6:05:b8:ad:30:a5:32:9e:33:45:99:8a:95:7b:43:
20:2f:30:75:e0:52:db:3f:4d:d8:64:51:16:75:fc:95:b8:fc:
5e:04:f8:dc:7b:e2:c9:8c:42:57:22:5a:1c:3a:71:a4:6f:b2:
e6:23:34:f0:a8:f3:b0:ed:1b:38:69:d9:6d:b1:b2:00:50:44:
f1:5d:11:7d:6a:de:7c:8e:73:bf:a5:79:10:e3:19:b3:19:8b:
87:18:77:56:3c:fa:af:e7:f4:61:5f:5d:61:92:18:43:3e:88:
8e:5b:d6:55:d8:d9:29:cd:5e:d9:19:a1:7c:b4:f8:ab:6e:0f:
ae:67:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:07 2025 by rpki-client