Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D52F788CC91D11EFAFE2C378762E951A.roa
File: D52F788CC91D11EFAFE2C378762E951A.roa (raw, json)
Hash identifier: WNIshWDJqjpQbVpVSik6zEKTK0QTmXXlhQX8HSTuUSY=
Subject key identifier: A7:9B:6B:F6:6D:57:1F:0D:5C:6A:77:F4:AD:C4:86:D2:FC:1A:89:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013311
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D52F788CC91D11EFAFE2C378762E951A.roa
Signing time: Thu 02 Jan 2025 15:25:44 +0000
ROA not before: Thu 02 Jan 2025 15:25:40 +0000
ROA not after: Sat 13 Dec 2025 15:25:40 +0000
asID: 984
IP address blocks: 154.222.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78609 (0x13311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:25:40 2025 GMT
Not After : Dec 13 15:25:40 2025 GMT
Subject: CN=6776aff8-769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:c0:8d:64:11:4f:2c:3a:22:57:02:89:a0:
89:46:52:4d:51:05:f4:6e:0d:a8:ff:7c:df:44:32:
c1:95:d9:56:eb:73:23:b7:63:5c:30:1b:b5:97:0e:
bd:7f:cb:2b:11:86:91:f2:f6:cc:1a:a0:5b:3f:a4:
87:f7:73:64:bc:d7:c0:2c:6d:93:99:ad:c5:57:32:
42:28:ba:b9:63:95:24:01:c6:ce:f9:f1:4b:18:fb:
9e:19:74:8e:65:a4:b9:4b:83:f1:4d:45:ef:f0:3b:
74:0f:7d:1e:6d:50:ea:fe:a9:ea:e2:2c:44:f7:a7:
98:be:ea:ab:6c:26:ec:59:bc:52:ae:58:47:7f:47:
fc:69:92:f2:17:d9:28:5f:ec:87:0d:60:73:9c:13:
f4:2e:f8:ed:d7:1c:4a:c1:b0:70:00:71:8c:ee:24:
85:06:d0:ee:ca:52:61:6c:e0:f1:1c:40:a0:10:3e:
20:88:5a:14:89:7a:b6:2d:c3:bc:71:cd:7a:38:93:
80:84:bb:40:71:ed:58:8c:1f:23:0d:7e:d1:c9:d4:
4a:5c:87:35:09:58:33:c1:de:40:9b:55:b2:3f:6c:
65:d4:a7:4e:5f:05:13:67:df:cd:9a:d0:f3:2b:ae:
5a:d2:4a:55:cb:74:b2:d9:c4:eb:2e:fc:6b:da:6e:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9B:6B:F6:6D:57:1F:0D:5C:6A:77:F4:AD:C4:86:D2:FC:1A:89:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D52F788CC91D11EFAFE2C378762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f3:e8:b2:b2:f7:d7:7c:7c:ad:e4:f3:40:85:02:2c:be:e7:
65:94:3b:04:ea:3e:d5:c1:d9:4b:80:aa:3b:62:fd:65:6e:05:
e1:1d:47:bb:55:95:b0:c2:85:2e:7c:f8:cb:c5:2b:b3:78:29:
2b:c8:0a:c1:d2:71:a0:36:02:e7:19:aa:e6:33:fe:1a:21:98:
20:c9:f6:8e:44:b6:7c:21:8e:8c:a8:0c:4a:71:75:08:f8:ee:
31:b2:0a:24:1f:d4:ce:5f:c4:4a:b8:ee:4c:b8:c8:a6:a3:e6:
cc:32:f1:d6:1d:da:7b:18:4b:6f:73:9a:5c:92:da:27:cf:de:
b6:aa:76:3d:29:d2:8f:28:2d:7a:05:fd:04:54:b2:95:2f:a9:
11:d8:52:df:9d:f7:0f:1b:bf:46:0f:03:84:ce:ed:60:7c:a6:
ad:01:1f:e3:a3:f1:61:f0:a5:91:fe:60:7f:b0:5d:30:25:21:
fa:c8:11:52:43:9b:08:e6:6a:32:67:bf:8c:2e:36:c2:c0:71:
9b:8d:c1:42:67:f5:85:cc:96:7a:c8:17:68:42:88:14:8d:de:
b7:5b:cd:12:e0:f6:9e:c8:45:4d:1e:a4:83:4d:4a:66:ba:5a:
ef:10:9a:49:d3:f6:2f:16:c7:2b:06:1b:d3:87:fc:0f:de:c1:
e2:95:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:23:17 2025 by rpki-client