Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2678A806D7CB11EFA74C1682762E951A.roa
File: 2678A806D7CB11EFA74C1682762E951A.roa (raw, json)
Hash identifier: UqqyxjURxghSZ8w1YWFXPIGn1eFppbevRLZmf8uA9R8=
Subject key identifier: 11:91:9D:4E:BB:12:61:CD:06:62:9D:D2:A6:4F:BC:0D:D1:42:BD:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2678A806D7CB11EFA74C1682762E951A.roa
Signing time: Tue 21 Jan 2025 07:41:39 +0000
ROA not before: Tue 21 Jan 2025 07:41:36 +0000
ROA not after: Wed 26 Feb 2025 07:41:36 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81517 (0x13e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 21 07:41:36 2025 GMT
Not After : Feb 26 07:41:36 2025 GMT
Subject: CN=678f4fb3-df9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:74:12:23:c8:69:13:c3:8e:40:31:77:2c:
c6:2c:eb:f6:36:53:e3:30:c3:c1:20:bc:be:55:b4:
53:50:92:86:f9:e1:fb:c8:7e:18:2d:00:af:c2:a4:
2c:72:00:35:da:3c:6b:b2:96:20:c6:c0:34:97:94:
ad:75:a6:01:23:28:f4:28:6b:da:30:ee:42:52:d3:
90:84:63:5a:a6:5f:15:f2:a7:60:de:33:3b:8f:70:
5f:7f:98:0f:41:45:73:b1:61:6e:82:5d:4b:3a:cb:
4e:7f:b4:de:0f:79:b0:dc:6f:48:d8:d0:ff:08:1d:
94:d2:e4:9d:39:2b:8f:ea:32:d5:a9:f8:78:60:52:
01:04:c1:59:d3:9e:52:54:e0:45:01:9c:5d:54:6c:
97:e7:d7:dd:6a:94:90:48:dc:c7:9d:fb:ee:a9:53:
62:50:b6:d1:e2:c2:1f:c8:77:87:c8:ac:d5:e0:e8:
e8:b6:42:86:3d:d0:e6:6f:71:2b:67:b8:09:66:d8:
f9:80:e2:92:8c:5c:77:84:0d:a7:d4:65:8c:90:24:
c4:42:04:f9:51:38:8c:32:ce:c1:ef:aa:31:1b:07:
8b:cf:47:28:27:46:90:e2:7b:67:17:cc:6b:f2:a7:
25:ce:36:f4:69:d7:19:ca:9c:1a:85:35:25:0e:d9:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:91:9D:4E:BB:12:61:CD:06:62:9D:D2:A6:4F:BC:0D:D1:42:BD:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2678A806D7CB11EFA74C1682762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:93:e6:94:cd:52:1e:ff:b9:b5:e2:01:a2:d8:96:46:f2:90:
5c:b0:5b:fa:b0:b4:6a:70:33:5d:d6:39:9f:6a:dc:2f:f0:0d:
72:44:cb:c3:c7:98:77:27:23:10:b1:a5:c7:f3:d8:cc:d7:c2:
63:5b:69:1e:f4:83:c8:13:dd:8a:e9:ea:9e:d2:30:60:4a:bc:
a4:19:41:89:fd:51:b9:46:99:af:b3:26:bf:2c:29:fe:eb:f6:
ab:22:19:71:58:bb:50:bf:0c:0d:88:10:3c:fc:d1:4d:1f:b5:
ab:76:9d:eb:01:92:27:cd:78:47:af:4e:56:21:f2:72:d0:d3:
7f:bf:ad:27:ad:ca:80:59:f2:b5:7a:b2:ff:e8:74:48:4a:c3:
89:7e:3c:4f:c4:37:f8:09:f1:d2:fc:f4:df:c5:08:cd:f5:8d:
48:c4:ab:d4:55:fd:dd:9d:27:95:58:c1:8f:1c:ef:cc:6d:8f:
d2:fa:b5:fe:3a:a3:62:0d:9a:05:1b:41:b1:44:08:f2:a3:01:
24:b2:3b:cf:97:e4:39:87:0f:69:df:23:27:a5:cd:89:8f:7a:
c7:0a:96:47:0e:77:b5:1d:30:7d:8b:83:9c:2c:ac:a9:50:b7:
eb:aa:c0:ed:88:ef:c4:19:d5:16:83:8c:e3:6e:4a:67:56:56:
5d:40:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:13:04 2025 by rpki-client