Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8394598C93E11EFA8410648762E951A.roa
File: B8394598C93E11EFA8410648762E951A.roa (raw, json)
Hash identifier: PP0hpT0+b4pwl1gRtpuEl4BMAzCu0COV7X5in5QcEMY=
Subject key identifier: 22:61:A8:38:DA:01:5C:EC:7B:E0:28:F0:F9:E0:FF:AB:7B:35:F5:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013417
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8394598C93E11EFA8410648762E951A.roa
Signing time: Thu 02 Jan 2025 19:21:09 +0000
ROA not before: Thu 02 Jan 2025 19:21:05 +0000
ROA not after: Sat 13 Dec 2025 19:21:05 +0000
asID: 984
IP address blocks: 154.223.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78871 (0x13417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:21:05 2025 GMT
Not After : Dec 13 19:21:05 2025 GMT
Subject: CN=6776e725-6b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:be:0b:35:b3:87:dd:60:8f:3b:94:87:2e:
34:18:46:0c:99:d5:21:f6:21:58:f8:48:c2:96:9d:
e5:8f:53:af:52:62:af:69:7b:5a:2b:1f:a4:7a:79:
9e:58:ff:9a:c5:63:21:20:84:f2:77:17:8e:35:65:
7b:95:db:81:79:8b:18:8a:32:0d:c3:d6:3f:e5:e4:
76:f4:af:ed:8a:ac:5c:dc:bc:4b:3b:8e:1d:3d:12:
e0:02:a9:e2:18:c6:03:de:ba:53:87:ba:ec:7b:ce:
f9:fa:67:9b:1d:9c:7a:a4:0d:06:d7:51:96:26:17:
61:06:98:57:5f:2a:72:0d:23:b2:56:88:b8:85:fe:
c5:f8:db:1c:7a:71:8e:18:5a:df:af:25:cf:62:ca:
e8:4b:14:3f:50:39:b8:ab:af:d4:e1:13:02:5d:c3:
1a:e5:b0:32:19:bf:cc:fa:76:1d:d0:c1:fd:58:cb:
8c:8b:7f:7d:6f:21:0d:0d:48:84:f1:7f:c8:4d:4f:
7f:38:4b:17:95:99:f8:ce:ac:75:04:10:03:07:56:
38:60:65:71:06:88:d9:5b:b6:11:ef:12:ef:45:1b:
36:69:06:1a:e5:c9:22:cf:31:f7:01:42:f8:4c:bb:
74:97:75:e7:4e:b5:25:02:4d:99:00:30:8d:45:47:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:61:A8:38:DA:01:5C:EC:7B:E0:28:F0:F9:E0:FF:AB:7B:35:F5:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8394598C93E11EFA8410648762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.239.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c0:bc:b1:74:31:eb:39:c5:fb:1b:4c:4d:a7:9d:84:5d:5b:
9c:b1:ea:d4:39:28:a8:36:6c:40:52:b8:7c:59:6d:3b:18:81:
ba:86:3a:85:fc:97:e6:3a:13:28:32:8a:54:fc:cd:82:86:29:
d5:08:7b:f9:a3:3f:fc:18:35:40:6f:82:c0:71:8c:06:ed:ea:
57:90:e6:94:ae:92:d8:67:ae:da:95:e4:08:55:1e:28:3c:d0:
bb:b0:85:b5:79:62:bd:cf:dd:ee:8f:12:58:9d:86:6a:bf:08:
f8:a8:a8:f3:26:a1:d0:9a:f8:c4:bb:a0:d8:86:71:45:d0:9f:
d9:bd:37:23:fd:9a:14:8e:63:77:cc:d8:1d:98:de:df:8c:08:
f8:46:60:52:2b:bd:2e:41:68:e2:ab:b9:17:77:a2:51:fe:89:
42:f3:bf:6c:d7:e9:a0:bd:bc:23:32:15:b2:10:c4:96:a7:98:
b1:83:38:1d:c3:3d:2f:88:6b:0b:ac:21:7e:bb:49:ac:4e:00:
5f:84:fd:a5:b4:2c:72:49:3b:99:cc:51:c1:d2:a1:21:d3:b0:
bf:bd:b2:8c:71:f4:fb:ee:8d:6b:c8:6a:02:d3:a0:6a:af:16:
ae:33:e4:b9:cf:a0:ee:a3:d1:ee:ec:ab:f7:c7:7b:ff:d7:c8:
a5:6b:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:24:05 2025 by rpki-client