Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2A7A05EC92811EF83883ABC762E951A.roa
File: B2A7A05EC92811EF83883ABC762E951A.roa (raw, json)
Hash identifier: H/oxC5FalVWjMqzkb8pg1DuUERNEmH2KzX0Tx9GfkUc=
Subject key identifier: 3C:97:07:D4:BE:BD:4C:BF:F6:DA:DD:BA:3B:1D:E9:E9:18:F7:65:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013369
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2A7A05EC92811EF83883ABC762E951A.roa
Signing time: Thu 02 Jan 2025 16:43:31 +0000
ROA not before: Thu 02 Jan 2025 16:43:26 +0000
ROA not after: Sat 13 Dec 2025 16:43:26 +0000
asID: 984
IP address blocks: 154.222.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78697 (0x13369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:43:26 2025 GMT
Not After : Dec 13 16:43:26 2025 GMT
Subject: CN=6776c232-aa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:e2:91:18:d9:40:36:30:2a:86:43:50:43:
7e:2d:08:f4:76:02:64:7f:7e:84:77:71:97:c5:ed:
63:e9:04:be:ce:a6:c3:78:a4:9e:1d:fd:af:aa:1d:
72:19:f5:32:47:0b:c9:06:0c:91:d3:42:c2:32:0d:
7b:00:0a:b0:94:42:0a:57:1a:f9:6a:d4:c4:d3:4a:
d3:76:cb:90:b4:f4:e5:1d:7c:dd:bf:99:34:2e:72:
35:65:3d:b3:4d:f4:0c:ee:2a:9f:43:05:aa:b1:01:
8b:7c:c5:6f:a3:41:90:28:21:ff:17:fc:35:85:8b:
23:8c:4d:88:b5:51:e2:69:2e:57:1f:bd:d9:2d:13:
bb:6d:84:b7:88:2d:7a:43:42:0b:d7:32:bc:25:b1:
9f:a8:c0:32:95:6f:52:cc:70:20:73:06:32:6e:f0:
0c:3f:79:9a:f2:48:2f:25:a0:47:2f:93:41:4b:be:
48:87:3a:42:1e:e7:13:40:e1:28:35:b6:c6:18:a3:
de:f8:6a:ac:df:c5:06:73:fb:0e:53:f6:2a:90:e4:
c3:71:60:72:76:89:aa:5a:f2:f2:53:f7:62:1b:87:
76:47:17:36:2b:8b:e1:de:9d:7b:30:c5:ed:d5:de:
0a:99:99:0d:4e:0d:85:86:41:1b:45:1c:84:79:d5:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:97:07:D4:BE:BD:4C:BF:F6:DA:DD:BA:3B:1D:E9:E9:18:F7:65:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2A7A05EC92811EF83883ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:58:f4:0a:a5:8a:3a:c3:29:b6:1a:5c:93:89:67:d9:c1:8e:
2e:55:94:79:34:22:4d:de:0a:26:2c:a8:92:5d:9d:a9:44:a9:
63:e4:a8:79:28:52:5a:4f:46:f4:2e:b3:48:55:46:af:be:bd:
db:60:05:82:b5:68:43:c7:ae:95:c2:d1:3b:d5:aa:0b:06:7b:
49:c8:2e:2e:62:c5:93:f0:92:ab:b8:4d:b5:20:73:88:47:e6:
31:83:99:0e:25:5a:69:e1:81:9a:3a:a7:4b:24:fd:3a:85:36:
14:76:68:20:b5:d5:1a:d9:3e:a9:7a:0e:1a:39:d5:bf:ad:78:
a4:ec:4e:20:b9:50:da:3c:a1:8a:dd:44:c6:5b:71:89:d5:75:
07:24:a4:15:ed:b1:dc:60:52:e7:a9:1d:23:47:ab:af:30:88:
0e:78:ed:d0:2e:46:1f:07:90:ea:65:77:c4:10:32:23:4a:b4:
8d:6b:52:87:ab:8d:3b:b1:6c:39:17:1e:1b:7b:f4:d0:c5:ad:
30:7b:a1:61:1c:75:97:af:bb:ec:04:fc:0c:51:4c:74:8d:6b:
87:87:3c:c5:29:1c:40:03:24:2c:f5:19:5a:5b:66:07:f4:aa:
7a:fd:28:33:8a:ee:b9:78:14:db:50:7e:b0:cf:97:7d:cd:0b:
fe:94:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:04:16 2025 by rpki-client