Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F06F5008C92811EFB0E25DBE762E951A.roa
File: F06F5008C92811EFB0E25DBE762E951A.roa (raw, json)
Hash identifier: PQ8LGZddvZDiUtIhXcCKtuVbCliFh1mS/mD5ZqYpJ+g=
Subject key identifier: D2:1E:27:4A:27:4C:2B:F8:FB:CE:5E:D7:64:B4:70:44:A1:F2:55:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01336B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F06F5008C92811EFB0E25DBE762E951A.roa
Signing time: Thu 02 Jan 2025 16:45:14 +0000
ROA not before: Thu 02 Jan 2025 16:45:11 +0000
ROA not after: Sat 13 Dec 2025 16:45:11 +0000
asID: 984
IP address blocks: 154.222.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78699 (0x1336b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:45:11 2025 GMT
Not After : Dec 13 16:45:11 2025 GMT
Subject: CN=6776c29a-6c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:4b:52:e7:07:ba:27:09:be:0d:b7:35:95:
77:29:fa:73:1e:9c:16:b5:84:44:2a:80:27:04:c9:
2f:19:43:7d:b2:c5:ca:c2:87:0b:55:4d:71:bf:11:
50:d5:37:86:f3:37:ad:8d:a0:17:57:19:9b:28:9f:
81:1f:46:55:82:06:42:15:49:86:79:26:c6:7e:26:
52:c7:c6:20:db:ca:ec:0d:1a:14:14:57:9c:86:61:
af:6e:7c:90:03:ef:3c:57:a9:b4:09:80:b8:d8:0e:
b5:ad:f3:f3:c7:e3:db:06:34:76:26:43:b1:65:e7:
31:7d:5c:66:96:ee:4b:d5:75:d8:e6:aa:e4:0c:45:
b5:37:06:38:c5:65:63:d5:cc:86:ba:5f:27:24:c4:
1b:54:d3:a6:04:5d:f1:12:27:1d:c6:29:c8:19:7a:
ce:2e:5c:de:c2:9c:03:07:58:5c:85:e6:61:18:09:
60:54:d1:d9:64:20:77:df:24:5e:ba:af:90:4b:bb:
dd:ea:23:4a:6e:c5:ea:98:50:bb:16:ea:a1:e0:bf:
d6:86:1d:e7:85:ef:ed:db:41:9b:df:f1:ac:0c:de:
f0:af:19:eb:51:44:b3:9f:c2:b8:f2:96:5f:b4:c1:
7f:a6:6a:49:17:da:15:d4:17:f1:62:f6:dd:80:af:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1E:27:4A:27:4C:2B:F8:FB:CE:5E:D7:64:B4:70:44:A1:F2:55:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F06F5008C92811EFB0E25DBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2d:ae:0f:21:ea:1d:1d:36:d5:f6:99:1c:d9:c8:2e:31:26:
ec:7c:f9:0e:a8:36:97:64:dd:b2:a1:f3:ad:08:e9:1b:8a:5f:
b6:d1:a7:9c:54:7f:09:16:9d:50:04:01:26:a0:02:95:7e:64:
e1:89:c1:66:52:66:15:79:48:41:2c:fd:8f:fa:37:59:e0:bf:
ba:62:3c:ad:b9:d5:bb:86:6e:6b:12:8b:22:22:6d:6c:35:cc:
3b:c1:23:ab:1f:81:95:24:05:f3:d6:ad:4c:99:df:07:30:51:
8a:59:e9:40:77:8a:09:18:b4:74:55:9b:d6:d9:21:b8:58:cc:
eb:56:b6:b7:97:5e:c3:5c:2e:f3:6a:29:bb:d2:a9:3b:55:ba:
88:87:bd:be:da:a0:ef:56:f9:5f:3d:aa:d8:fc:7e:6e:19:13:
8f:4b:a2:45:72:c8:5d:fe:e8:b7:a3:3b:b7:2a:09:e8:92:07:
66:1a:46:3d:58:71:3d:ab:ce:1f:3f:05:e1:57:17:43:7e:b5:
07:53:67:b2:fe:ba:ef:6e:9a:05:a8:2c:0f:08:cd:37:23:14:
c2:0e:5e:55:63:bd:7f:4b:c0:f6:03:e6:73:f6:b3:94:57:68:
20:47:48:3d:2d:12:e7:4c:7b:57:11:f2:e4:4a:bf:ab:85:b7:
a4:76:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:24:32 2025 by rpki-client