Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADBEF636C93D11EFB257FB40762E951A.roa
File: ADBEF636C93D11EFB257FB40762E951A.roa (raw, json)
Hash identifier: tjI/7+uJxBKblgj0KWHxzpM7wsYKH13q/cIq1IsPQF0=
Subject key identifier: 35:08:BC:F4:8B:ED:53:9F:FA:64:7D:2A:20:78:FE:B1:C5:36:71:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01340F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADBEF636C93D11EFB257FB40762E951A.roa
Signing time: Thu 02 Jan 2025 19:13:42 +0000
ROA not before: Thu 02 Jan 2025 19:13:38 +0000
ROA not after: Sat 13 Dec 2025 19:13:38 +0000
asID: 984
IP address blocks: 154.223.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78863 (0x1340f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:13:38 2025 GMT
Not After : Dec 13 19:13:38 2025 GMT
Subject: CN=6776e566-8d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:bc:a2:7e:cc:f4:a0:9a:48:94:53:01:76:
db:b7:ac:e2:33:30:7a:b1:b2:d7:fd:91:2e:c5:16:
37:ee:2f:97:c5:a6:7d:65:51:a8:85:02:b7:32:fc:
17:17:dd:ed:3a:fc:67:e5:35:40:0e:dd:88:04:b8:
f2:c7:8e:54:1b:62:65:88:52:07:ea:1e:60:0a:b0:
da:36:00:5c:27:c9:9e:34:6c:a4:e4:37:9b:63:ba:
05:8f:51:9f:04:c8:88:62:80:fd:24:62:15:07:c1:
9b:0c:05:2b:5b:d5:2c:72:20:68:6b:94:34:f9:c4:
f0:90:21:69:e3:35:db:75:e7:b8:24:59:a6:72:4a:
15:f5:08:7a:94:3e:05:43:7c:7c:d6:22:2b:f6:08:
69:2c:9f:2c:96:ac:8d:d7:88:49:9e:d3:c7:8b:39:
bd:2b:16:ae:f5:92:11:42:55:27:c6:ff:1b:98:60:
89:db:75:87:e6:c0:c0:35:3e:d5:71:bc:38:d6:bb:
03:fe:23:44:fb:15:64:c3:2d:69:c2:ca:db:34:4c:
9f:be:77:c9:e7:ae:11:95:60:32:88:01:13:2a:00:
85:cf:ec:2a:f6:21:f9:15:f6:f4:e9:16:92:6d:f3:
ea:1d:b6:b8:16:d8:76:01:83:a1:5d:cf:8c:35:df:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:08:BC:F4:8B:ED:53:9F:FA:64:7D:2A:20:78:FE:B1:C5:36:71:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADBEF636C93D11EFB257FB40762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c1:c8:a1:de:e0:bd:40:e1:ff:de:4b:dc:29:51:45:56:7a:
d3:f7:f3:5f:b9:28:44:b4:90:d1:63:9e:87:1e:ab:eb:2e:9d:
6a:43:c6:68:bb:fd:1f:2d:13:9d:79:fb:79:6e:9e:52:f2:24:
9a:f0:c8:6d:fe:87:b3:6e:3d:fd:fd:11:1b:1a:73:12:22:f5:
54:a2:32:9e:c5:49:6b:49:c7:b0:13:19:be:8e:16:7f:cd:de:
c8:5b:38:3a:d8:37:dc:0e:c9:a9:6f:97:4e:45:c9:31:42:7c:
33:c0:bc:e4:1d:5d:a8:c3:79:a2:50:96:a6:b9:8b:e5:f7:45:
33:af:05:a6:43:3c:6f:d6:35:fc:a2:14:35:56:ee:3a:8c:9e:
7e:08:c0:83:3e:08:57:36:1a:67:07:26:b3:dc:74:70:41:3a:
7a:ac:0b:66:43:22:ef:5c:15:86:3e:fa:47:9d:ec:68:fb:8f:
83:2e:eb:4c:12:de:b5:84:09:d1:bd:7a:ff:7a:2d:d0:f5:12:
2f:5c:fa:c8:39:e9:d9:8b:db:95:71:32:c7:8a:e9:45:97:de:
73:da:bd:a2:0e:88:dc:d6:a3:cd:b6:13:f5:14:32:80:77:70:
64:5a:e5:af:ab:b8:12:51:89:c5:e2:f4:d3:33:42:14:1a:c8:
57:06:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:54 2025 by rpki-client