Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F77FBE86C92911EFA0D98646762E951A.roa
File: F77FBE86C92911EFA0D98646762E951A.roa (raw, json)
Hash identifier: jz5x+l3yRsRNuTxmG3gwPMAN734FOsNIReg+ARTPj0c=
Subject key identifier: 6F:35:D5:E8:23:8D:60:FD:5A:54:B9:59:F9:4D:F8:7F:01:F4:8D:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013373
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F77FBE86C92911EFA0D98646762E951A.roa
Signing time: Thu 02 Jan 2025 16:52:35 +0000
ROA not before: Thu 02 Jan 2025 16:52:32 +0000
ROA not after: Sat 13 Dec 2025 16:52:32 +0000
asID: 984
IP address blocks: 154.222.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78707 (0x13373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:52:32 2025 GMT
Not After : Dec 13 16:52:32 2025 GMT
Subject: CN=6776c453-ca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:c2:3b:2d:82:ba:30:34:6c:87:21:6e:a4:
99:95:53:31:f8:f0:85:4e:ad:8f:71:9a:df:6a:ba:
f9:52:29:c5:02:5b:72:75:47:56:44:9e:76:09:dd:
26:a9:19:be:3a:d6:fd:28:5c:ad:0c:5f:73:28:e7:
26:66:1f:e6:f4:4f:64:40:f8:39:3c:6c:d4:11:62:
c1:2a:73:37:5e:71:e7:21:36:94:85:4b:0e:46:5a:
b8:72:4a:a4:7c:ac:58:fc:1d:19:0f:c9:bb:60:3a:
ea:28:88:d7:2a:12:17:94:19:e5:59:c2:d7:a2:fe:
b5:eb:b5:bc:41:78:d0:f2:16:b8:df:2e:f6:01:95:
06:c9:a7:4f:1b:01:67:d5:59:2e:87:b8:3c:a4:11:
b9:5a:27:56:36:47:82:63:ae:ad:d1:19:76:e2:01:
06:bc:0a:bf:01:15:3f:31:46:c2:9f:5b:a5:2c:b3:
7c:41:b8:30:eb:3c:32:fd:bd:c4:01:e7:4a:36:e0:
a5:a7:b2:20:f9:ef:a6:16:61:e6:80:60:fe:65:2a:
8f:29:e2:d9:d6:16:be:ce:e6:23:fd:18:14:0c:04:
8f:da:a5:c1:e4:6d:31:c9:89:21:bf:33:a4:17:77:
c7:eb:4b:4d:5e:83:cb:9f:2c:1b:c9:ea:37:7e:53:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:D5:E8:23:8D:60:FD:5A:54:B9:59:F9:4D:F8:7F:01:F4:8D:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F77FBE86C92911EFA0D98646762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:07:7b:8a:00:ad:b4:5c:3f:94:ae:3b:39:e7:85:b0:df:d7:
99:39:ae:31:ab:f6:e2:7a:61:6f:9e:dd:56:61:33:39:22:0b:
d9:48:6d:23:b1:a8:ef:05:3c:e1:3f:11:2b:64:d1:29:0f:aa:
2f:e4:cb:f0:89:c3:bd:2d:83:16:00:03:7f:c6:cc:d8:f1:68:
d6:78:f6:6f:de:03:50:25:23:20:6f:85:bf:ad:7b:aa:63:02:
f8:99:b5:1a:13:cb:81:8c:85:df:44:ef:38:96:9c:12:3b:55:
11:c1:61:5b:e9:71:5e:b4:8a:03:c7:8b:f3:41:61:b5:c3:24:
01:cb:8a:f7:99:39:61:40:d3:35:a8:6e:4e:11:de:a1:51:15:
f0:7e:50:4b:c7:7d:0b:0d:5a:19:9f:bb:2f:c0:9c:85:e9:7e:
4f:a7:c7:93:d1:f8:88:4d:11:05:33:4b:5a:7e:9f:b1:32:ef:
e6:3f:54:39:cc:ce:d9:3f:ce:63:75:15:13:d1:6d:86:5f:82:
22:20:07:55:5d:40:a1:7f:53:57:29:5c:5a:e5:a9:31:99:c1:
9c:6b:5e:15:a8:1f:4c:45:9e:79:98:46:ba:b3:6b:b9:96:51:
11:ea:de:d4:83:36:f6:69:3b:a7:5a:a7:9e:a2:db:40:20:63:
54:f5:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:05 2025 by rpki-client