Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA8DC9ACC91A11EF9C006167762E951A.roa
File: EA8DC9ACC91A11EF9C006167762E951A.roa (raw, json)
Hash identifier: LcKYvpcD85kOh1GqB/zRCh47/yyaP+JQ+VWFuAqKpeU=
Subject key identifier: 04:9E:28:71:9B:1E:1F:04:67:E2:23:24:15:20:20:9D:FA:37:5E:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA8DC9ACC91A11EF9C006167762E951A.roa
Signing time: Thu 02 Jan 2025 15:04:51 +0000
ROA not before: Thu 02 Jan 2025 15:04:48 +0000
ROA not after: Sat 13 Dec 2025 15:04:48 +0000
asID: 984
IP address blocks: 154.222.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78585 (0x132f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:04:48 2025 GMT
Not After : Dec 13 15:04:48 2025 GMT
Subject: CN=6776ab13-b190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:6f:fe:bf:2c:e7:b6:b6:72:39:78:7a:89:
f8:01:3a:0c:6d:bc:13:ff:65:aa:5d:84:83:27:61:
36:54:60:d9:77:cd:1a:57:ba:27:95:45:13:f9:7a:
e0:6b:08:7a:7b:11:ce:5d:a2:cb:89:7c:64:c5:d4:
27:47:60:27:37:2b:f9:5e:65:a4:8d:a0:16:d0:fe:
79:58:7d:60:d3:a4:2f:d7:97:7e:d2:c1:19:48:00:
eb:e8:09:fa:01:a2:40:ec:7f:96:ea:df:25:82:30:
16:bb:b5:32:7a:da:6b:a3:a1:56:c1:06:d2:f5:db:
52:c5:7d:1c:56:c4:35:1f:3d:37:17:45:7e:7b:48:
30:7c:01:62:1e:d0:1d:b1:e0:30:84:4f:ae:3c:ef:
f9:8d:93:7d:ba:dc:56:a0:17:6d:01:98:ad:c5:31:
ad:e2:9e:26:ab:d0:c3:61:2e:d4:9b:47:9d:88:72:
07:d6:a0:01:d2:bd:30:a9:dd:7a:4c:a8:5b:c6:3a:
24:d8:32:36:ae:03:6e:42:4f:93:0b:65:4d:14:4e:
71:7b:20:4d:7c:b6:d9:a5:84:27:2f:b9:b2:ee:7d:
0a:bb:8f:47:d2:d9:35:4d:18:38:21:ef:44:74:0a:
a9:6b:41:4e:a6:0a:ba:a5:00:6a:e8:82:34:fc:bc:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:28:71:9B:1E:1F:04:67:E2:23:24:15:20:20:9D:FA:37:5E:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA8DC9ACC91A11EF9C006167762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.39.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:24:f1:9f:30:72:98:14:ca:3b:e8:f3:8c:01:4a:39:f0:85:
3d:de:c3:be:73:1a:44:14:f7:a8:24:e7:31:1c:d8:95:07:04:
5d:7e:18:55:a1:da:34:80:d7:74:2c:18:56:21:f1:75:9a:9d:
40:ea:8a:b8:9b:76:e5:f3:ee:d1:b0:b6:dc:a9:83:b4:b6:bc:
23:8d:a6:26:aa:92:55:27:42:b4:e8:43:a0:e4:72:72:3d:88:
3d:a6:e0:c9:ef:0d:6d:cd:00:6e:24:e7:a7:ae:0c:24:b6:99:
ac:e4:a6:b8:29:f3:eb:75:4f:21:09:59:ca:c4:f9:4e:89:e3:
3e:69:be:f9:29:5a:64:71:45:51:00:14:e2:1c:df:03:20:1d:
f0:b3:c7:ed:5c:e6:3b:46:d1:a0:30:82:a8:8b:b1:90:d5:08:
5e:7a:f8:6e:6a:65:1c:27:58:2d:9c:4a:7e:eb:28:45:1a:c1:
05:0d:87:cc:e6:c3:28:05:f6:e6:ea:ae:7d:87:45:ac:d1:dc:
ff:5d:e9:78:81:26:50:61:d6:34:aa:61:7e:35:41:ef:48:c9:
7c:8e:27:59:d5:29:71:c1:20:83:52:e9:c7:9a:0b:13:d6:15:
9d:55:bc:c3:8e:f6:3b:80:a7:a9:7e:d7:ba:f4:af:67:b4:b0:
f8:79:95:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:11 2025 by rpki-client