Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F091F308C92611EF94D382B1762E951A.roa
File: F091F308C92611EF94D382B1762E951A.roa (raw, json)
Hash identifier: Ce6UNGUifEOsE9NBVHwrgSjUQg01GJAicY+zVIeDOtw=
Subject key identifier: 38:2B:7A:C2:E3:81:52:DE:27:F0:AA:95:25:8A:DA:CE:7C:8A:BF:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01335B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F091F308C92611EF94D382B1762E951A.roa
Signing time: Thu 02 Jan 2025 16:30:55 +0000
ROA not before: Thu 02 Jan 2025 16:30:51 +0000
ROA not after: Sat 13 Dec 2025 16:30:51 +0000
asID: 984
IP address blocks: 154.222.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78683 (0x1335b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:30:51 2025 GMT
Not After : Dec 13 16:30:51 2025 GMT
Subject: CN=6776bf3f-e66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:7f:1d:3c:16:47:17:ee:0e:cb:5a:98:0c:
cd:49:38:33:38:80:70:84:f5:78:1c:4d:09:bd:29:
26:18:c0:72:f5:05:a9:05:af:8c:e3:bd:67:75:bf:
16:f8:b7:c6:3d:bf:14:dc:d3:7b:d3:f6:5b:c7:0f:
13:54:30:ca:b9:99:e9:0f:f9:dc:19:3f:4e:c2:57:
21:2e:81:e7:e9:c3:16:a8:a4:ca:76:3a:e2:f5:de:
42:bd:00:51:08:0f:5a:85:33:a0:89:18:0f:f0:9c:
6b:9a:ad:bf:35:5c:a0:72:0e:e0:e6:fe:67:a8:4e:
4b:62:99:ce:ef:cb:32:76:67:51:30:14:7c:22:ae:
68:4c:1b:c7:22:32:ef:3e:d7:a8:f9:58:ea:81:29:
bd:dc:f3:28:12:6d:17:d2:69:f5:75:d3:51:98:14:
97:74:8d:db:04:bc:32:ba:58:ee:e2:74:97:43:8a:
7e:e1:52:c2:95:b1:1c:d1:30:84:fb:53:f4:fc:53:
fc:da:68:98:e0:c4:d4:c3:66:b2:14:01:4d:8d:5a:
73:4c:f7:14:d5:72:2f:d6:98:4a:b0:cf:90:b2:60:
2e:2b:47:d6:de:3d:bc:37:8d:12:31:58:fc:a5:37:
25:04:a0:7a:0b:b9:3a:9d:0f:0f:44:b9:03:ea:92:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:7A:C2:E3:81:52:DE:27:F0:AA:95:25:8A:DA:CE:7C:8A:BF:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F091F308C92611EF94D382B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cb:6c:6b:97:22:73:aa:41:43:34:b6:37:be:e5:ab:5e:c1:
5a:ce:b5:5c:9a:00:32:f4:5a:eb:0c:e4:fa:16:fd:c7:2f:68:
0f:9a:e8:9c:82:1e:30:9e:69:79:bc:e6:8d:6a:c6:af:32:27:
1d:77:99:9e:66:cd:e2:47:6a:79:f0:68:33:1d:95:c6:5e:69:
d3:0a:91:78:3d:dd:d5:0b:12:b8:b6:9a:57:92:fd:a9:07:cd:
47:e6:35:1b:4f:ed:7a:92:96:26:c5:3b:5c:fb:65:ff:af:e6:
fd:19:39:99:96:1d:ee:ea:38:a6:b9:9d:23:06:f9:47:39:c7:
ab:30:85:a0:fa:18:c1:da:45:01:d6:56:b8:d7:02:5f:9e:33:
3d:64:3a:ac:1b:f5:62:7e:5d:e1:9e:ab:0f:b9:ab:33:bb:08:
0d:5e:9f:90:b0:c0:cc:03:de:63:df:54:22:63:1d:56:6c:76:
b1:c7:d7:63:78:2b:f7:84:2a:f2:13:80:f6:52:c1:cd:ba:ea:
ce:b6:c8:79:c8:61:9a:3f:34:2b:ac:41:25:e4:35:86:ae:f5:
34:df:1b:24:17:85:d7:e9:43:bb:fd:93:1d:fb:02:10:e7:97:
4e:e7:09:01:28:1a:9d:9f:d1:b6:bb:41:92:6d:c5:53:37:11:
43:a2:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:54 2025 by rpki-client