Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA77D5B0C92511EFA11415AB762E951A.roa
File: EA77D5B0C92511EFA11415AB762E951A.roa (raw, json)
Hash identifier: 608ixNu/U4w6oKls4/gcrZUbHiBT/XvD8xSMWB9epXg=
Subject key identifier: D0:9F:C3:29:17:75:5F:7F:6A:A0:91:86:95:B8:26:8B:C1:A4:2A:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013353
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA77D5B0C92511EFA11415AB762E951A.roa
Signing time: Thu 02 Jan 2025 16:23:36 +0000
ROA not before: Thu 02 Jan 2025 16:23:32 +0000
ROA not after: Sat 13 Dec 2025 16:23:32 +0000
asID: 984
IP address blocks: 154.222.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78675 (0x13353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:23:32 2025 GMT
Not After : Dec 13 16:23:32 2025 GMT
Subject: CN=6776bd88-d61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:45:5c:ed:a4:28:77:99:d1:2d:3f:a1:46:
95:fc:a2:b5:d7:3c:35:a4:b7:07:d3:08:eb:d7:ff:
e1:21:88:c8:23:15:b1:3b:26:89:27:23:47:f3:78:
e0:7b:62:e1:6e:f8:8b:c6:e5:22:dd:60:01:4e:45:
2c:10:4a:ff:fa:28:14:4a:d8:94:f6:6e:c3:12:d6:
e9:00:98:eb:5b:26:88:15:b0:ab:49:ed:fb:eb:ce:
cb:50:ab:36:8d:b2:c2:aa:8c:37:d5:b8:d4:56:32:
17:a7:1e:40:a9:75:19:11:52:b7:be:d9:c1:38:d9:
4f:0d:8d:ab:74:8b:fd:1b:93:e2:b1:85:00:75:26:
7b:4f:f7:98:c8:e2:b4:77:39:21:6c:4e:0b:1b:66:
5d:c4:b1:8f:49:df:e9:ca:12:b9:d0:3e:45:f6:b6:
ce:fa:57:37:06:c4:f9:34:48:23:b5:9a:30:10:82:
1a:29:a5:b4:ee:02:9e:0c:0b:31:4e:7f:f5:7a:d1:
12:b4:aa:91:43:c9:58:69:dc:4b:96:50:70:cf:54:
a5:65:be:f8:be:c7:c0:5f:8d:67:fc:d2:36:d6:c0:
ea:2f:66:9b:79:7a:ff:c8:d6:04:af:de:ac:06:84:
f1:a7:f4:d2:1a:03:3b:7b:76:1e:26:77:ed:38:d6:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9F:C3:29:17:75:5F:7F:6A:A0:91:86:95:B8:26:8B:C1:A4:2A:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA77D5B0C92511EFA11415AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.114.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b8:6f:fd:eb:36:16:c9:d2:b7:37:86:9e:79:66:4b:a5:14:
67:f7:42:72:85:b9:98:be:81:ce:08:c8:cf:81:d6:c8:43:e7:
c9:8d:b7:a7:3e:9d:5c:77:37:7b:b8:aa:b1:a1:08:08:13:86:
50:c2:a4:df:f5:f0:49:4f:8c:5e:8a:a2:15:3f:45:35:39:41:
f7:3b:6b:a1:9d:90:c8:ea:da:2b:5c:d5:b1:f0:34:73:12:9e:
79:13:c5:f6:e7:c3:a0:c4:99:80:28:ae:da:13:d9:19:f3:8d:
8d:6a:2a:cb:f1:5c:8a:25:58:f3:6f:1a:18:58:74:14:a2:44:
34:9d:52:77:a7:ba:94:f5:a4:c6:a6:b6:70:69:bd:62:08:4e:
17:25:15:81:f8:df:3c:b9:96:ba:6b:84:3f:0c:6f:bc:bc:cb:
50:b2:a3:c0:c4:b9:5b:a9:c3:c8:64:fd:dc:07:ba:63:4f:fc:
91:28:54:c1:b9:40:ab:24:64:e9:b3:33:31:0e:22:b5:46:f7:
65:4a:29:b7:00:66:9f:c4:fd:8f:dd:eb:89:9c:73:84:d3:cd:
65:6b:89:10:a7:d8:c8:db:5b:d6:60:20:19:74:07:89:0c:35:
bb:9e:5d:75:e4:68:ca:db:0c:1e:76:0f:4d:c9:67:5d:4a:fe:
08:2b:1c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:48 2025 by rpki-client