Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDCC452C91E11EFBD252E7F762E951A.roa
File: CEDCC452C91E11EFBD252E7F762E951A.roa (raw, json)
Hash identifier: /xzh06KlklIjiUW/GiKV7kkPDhTIqP2F/TZ4LMQn0tY=
Subject key identifier: 4A:60:B8:FE:8B:EC:E9:07:67:78:27:44:9E:25:16:26:F2:07:8F:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013319
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDCC452C91E11EFBD252E7F762E951A.roa
Signing time: Thu 02 Jan 2025 15:32:43 +0000
ROA not before: Thu 02 Jan 2025 15:32:39 +0000
ROA not after: Sat 13 Dec 2025 15:32:39 +0000
asID: 984
IP address blocks: 154.222.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78617 (0x13319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:32:39 2025 GMT
Not After : Dec 13 15:32:39 2025 GMT
Subject: CN=6776b19b-e7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:91:49:61:2a:36:49:08:1d:e5:ca:df:55:
a3:e4:fe:28:40:46:6f:1f:58:c3:d6:ea:af:49:42:
41:de:ab:38:19:b8:c5:de:55:a4:d4:06:fb:1c:6b:
4e:da:90:a3:12:2c:a1:7c:f2:70:f9:cb:fe:bd:a8:
4f:75:4e:5e:45:dd:d4:70:62:2d:92:f7:33:f6:7b:
77:a1:26:a2:ec:d0:11:82:c8:6a:de:93:fc:53:4d:
53:cb:65:0e:2a:54:35:e8:58:f0:9d:c9:e5:8c:52:
ad:49:70:9b:d9:67:9d:da:e1:20:72:ca:1a:13:f1:
c4:49:a0:c5:3e:11:0d:1d:56:1d:a9:c4:be:6d:24:
62:07:21:b7:a9:f8:5f:a0:8f:7d:4a:4c:8e:cb:ee:
66:38:c5:d9:9e:e3:52:b4:47:1d:1e:9f:41:e6:21:
ca:ea:5f:cb:b9:d3:d5:82:12:2c:9f:3b:b7:a1:b6:
99:b0:58:ac:d5:68:50:ae:77:4b:52:25:65:8f:f1:
8e:14:91:72:a1:c4:f1:43:51:9c:dd:8e:cb:b2:cc:
3b:5f:96:89:aa:db:fa:e5:a0:12:b9:8d:8e:ad:37:
84:8c:c4:0b:92:79:4e:17:b8:1c:29:b3:86:a9:9d:
0b:9e:c7:a6:7c:91:b9:34:34:02:3d:4e:5b:d2:50:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:B8:FE:8B:EC:E9:07:67:78:27:44:9E:25:16:26:F2:07:8F:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEDCC452C91E11EFBD252E7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.81.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e2:7a:8d:c1:ff:06:29:cf:33:3d:5c:15:1e:47:d6:d4:f1:
2b:4f:bd:ef:4f:30:e5:f1:80:61:19:52:94:1d:18:37:3a:5d:
85:b8:5c:05:76:41:7b:2d:f1:4e:bd:dd:ba:8c:0a:e0:0b:e2:
09:c7:c0:83:51:1e:ca:7c:82:06:c5:05:e0:96:98:9f:bd:48:
98:27:0d:ee:f6:09:78:59:b2:d4:f5:09:94:9d:4d:d5:04:69:
ed:9d:4a:9f:31:35:44:89:87:35:62:d1:d6:a2:8c:79:88:33:
28:e8:11:d2:3c:31:fc:e5:b8:6a:8a:ff:1d:d0:58:18:80:b4:
e9:f2:a6:7b:7f:81:56:cf:d4:83:c2:28:99:26:d7:a3:07:2a:
15:d3:5a:0e:0a:d4:9c:50:01:02:96:d9:53:0a:0a:ba:2b:08:
14:e4:3e:89:97:85:a1:70:57:0f:6e:54:b3:17:c7:d6:7e:01:
57:c1:70:4a:2c:b7:8e:89:c5:6d:e9:c8:86:54:10:af:4c:f3:
c4:a3:33:dc:31:67:e3:87:80:fa:50:54:54:f7:2d:69:3f:00:
a2:6b:de:16:c3:ff:ba:49:e9:46:7f:dd:e8:91:dd:96:1e:fb:
a2:57:4e:d9:c4:ed:c7:a5:91:c7:34:83:04:88:39:12:07:80:
eb:1e:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:39 2025 by rpki-client