Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/014C9098DA1311EF94F768B7762E951A.roa
File: 014C9098DA1311EF94F768B7762E951A.roa (raw, json)
Hash identifier: bWEtJXrq83LlKHxHnpyJDtVZF1BKFqdGepMHQE9EZEQ=
Subject key identifier: 67:E2:D1:07:EA:67:9C:C3:4E:4D:4A:0F:47:99:FF:25:0E:12:2F:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/014C9098DA1311EF94F768B7762E951A.roa
Signing time: Fri 24 Jan 2025 05:21:03 +0000
ROA not before: Fri 24 Jan 2025 05:20:59 +0000
ROA not after: Sat 01 Mar 2025 05:20:59 +0000
asID: 44559
IP address blocks: 154.81.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82896 (0x143d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 05:20:59 2025 GMT
Not After : Mar 1 05:20:59 2025 GMT
Subject: CN=6793233f-033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:54:09:99:df:d8:6a:71:ec:6b:29:a2:68:
ab:a8:db:5f:72:92:49:79:91:e4:9f:5f:98:c2:66:
05:7f:48:e2:ff:3d:a2:5e:52:74:34:38:b5:b3:cd:
91:5d:ba:30:a9:13:71:fe:c1:69:47:c9:4b:b4:41:
30:c4:3f:b7:63:f4:49:74:13:f6:60:56:11:e4:1e:
82:c2:11:90:a5:df:fc:b6:a9:01:32:19:fa:ad:91:
7b:bf:61:fa:7c:e7:8e:a8:23:b0:33:8e:c7:fe:2c:
24:af:61:21:5c:7a:20:40:28:03:64:69:3b:98:71:
bd:1c:dc:73:cd:5e:ef:78:03:08:04:42:2c:a6:02:
5e:36:85:7f:9c:3b:e4:36:61:28:ad:e8:ea:9b:54:
d5:53:96:7e:3e:78:e1:03:94:66:ce:f0:6a:af:24:
7b:99:87:03:a8:49:f8:da:2d:29:e6:87:28:6e:ac:
ff:fd:ec:e7:c4:17:5c:cd:ee:8d:88:c8:46:7b:02:
24:a3:5d:a0:ee:56:ea:8d:7a:ca:96:7d:04:75:9a:
b9:1e:46:58:9c:01:3b:8b:f4:83:a4:d5:ab:0c:60:
cb:e6:c4:c7:d9:a9:77:5e:47:30:39:65:4d:53:21:
99:f7:a6:45:a1:82:71:fd:1e:18:d7:de:0b:78:9c:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E2:D1:07:EA:67:9C:C3:4E:4D:4A:0F:47:99:FF:25:0E:12:2F:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/014C9098DA1311EF94F768B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b3:e7:43:b2:a2:4b:0b:a0:df:4f:2a:a0:7a:82:b9:33:95:
95:39:df:db:c4:62:a8:00:0e:02:ab:43:85:0d:85:d4:82:90:
d4:fe:06:62:96:74:45:53:df:75:44:9d:e7:67:97:83:62:b2:
93:14:39:df:8a:2c:4f:c5:55:e0:6c:47:8a:d1:ce:ad:b3:d0:
06:6d:67:4a:34:8b:7e:74:cf:fd:ad:68:35:ce:c8:22:1b:6f:
01:84:39:05:33:f1:20:e3:b1:99:9e:e1:26:f9:18:c1:69:b1:
98:c4:de:8f:9b:6c:12:94:b9:97:b5:94:53:30:75:08:6d:16:
2d:27:fe:ea:54:50:ca:fe:15:e7:96:2d:b8:a3:c2:73:5c:6f:
ff:97:77:5f:e7:68:d6:b7:30:e3:f7:3f:8a:f4:6d:c8:2a:38:
04:a1:6f:d5:0f:dc:62:ae:2d:a7:ab:35:7a:df:51:72:38:b8:
19:76:7d:b4:f7:15:2a:ff:1c:2d:4b:f3:26:e0:55:1d:8b:85:
4c:ff:30:c0:50:75:90:fe:11:d7:29:aa:c3:f4:a6:56:1f:9d:
d4:57:ca:b7:8a:96:bc:e6:aa:0f:0c:5d:12:d7:81:5f:ab:43:
42:a1:f1:15:85:0f:cd:ac:03:96:ba:6c:34:c9:e5:d4:28:ce:
f9:02:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:14:51 2025 by rpki-client