Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C5477CDA0A11EF94300C81762E951A.roa
File: 37C5477CDA0A11EF94300C81762E951A.roa (raw, json)
Hash identifier: kIFdnqf+5ljcHT3EO0r7iFSbEYv1lWcDJqk/ua+8HPk=
Subject key identifier: FE:44:12:09:5D:63:78:C6:83:78:4A:8F:36:D1:76:BC:8C:86:0B:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C5477CDA0A11EF94300C81762E951A.roa
Signing time: Fri 24 Jan 2025 04:18:09 +0000
ROA not before: Fri 24 Jan 2025 04:18:05 +0000
ROA not after: Sat 01 Mar 2025 04:18:05 +0000
asID: 44559
IP address blocks: 154.81.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82878 (0x143be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:18:05 2025 GMT
Not After : Mar 1 04:18:05 2025 GMT
Subject: CN=67931481-ed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:62:4a:d6:2f:53:26:3f:28:ff:25:bd:4f:
ad:c8:86:94:23:5b:63:cc:00:b6:65:36:6f:e8:be:
59:00:54:3f:ef:8d:99:1c:ae:1f:71:c8:5f:7f:55:
75:a8:77:54:cb:7a:51:d3:b5:f3:0d:16:cf:31:1b:
d2:3d:57:a1:0a:d3:97:95:5f:3c:9c:cf:b1:19:ab:
3c:ec:27:0a:7a:ec:ac:8d:68:81:9e:e5:59:94:0b:
55:4c:d4:3a:20:a4:54:06:35:c7:1f:d7:47:50:ef:
0e:3f:8c:e8:0c:58:58:cc:1b:67:b1:9f:f7:e4:54:
1d:24:c0:52:74:1c:97:b6:81:9d:64:cd:15:41:e5:
92:b9:53:ff:22:84:64:38:f8:6c:ce:d0:93:97:30:
89:a6:a3:cc:71:ea:82:b2:6a:5b:e2:dc:42:fd:87:
4d:7a:5f:ee:2b:7c:3c:67:4a:48:27:98:40:66:68:
70:fd:e4:65:09:4c:16:97:c8:f6:71:fe:24:03:7a:
42:d5:be:ab:b5:c8:89:21:cf:6c:fa:f3:05:48:6b:
6b:9a:8b:6a:91:b3:e1:19:95:e9:69:a6:b3:47:59:
c6:fe:5f:a0:5c:54:cf:1c:ac:32:ed:e0:d4:e8:d6:
3d:ab:85:13:34:54:d0:d3:34:e6:a1:89:33:b5:33:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:44:12:09:5D:63:78:C6:83:78:4A:8F:36:D1:76:BC:8C:86:0B:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C5477CDA0A11EF94300C81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.55.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7f:e2:11:ee:06:78:36:99:a1:1c:4c:fc:62:09:4c:a1:c3:
9a:a5:7c:12:9c:d4:57:dd:e5:21:0d:38:ac:9c:bb:fc:e3:09:
be:40:40:5b:12:71:ba:53:fc:8f:e9:93:fd:97:48:51:94:6a:
f0:f7:68:8c:09:71:71:c5:ee:03:76:04:23:67:a8:c5:0f:f1:
6b:2b:ae:78:ca:cf:be:5f:ce:69:6f:8a:29:68:e9:af:76:a7:
09:f9:82:24:92:d6:ab:fd:94:44:b2:92:13:e5:64:2d:07:34:
16:3a:12:ed:4f:db:dc:80:4b:40:7c:19:8a:de:07:bb:56:af:
a6:89:f0:f9:9e:28:4c:0a:8a:21:3f:00:47:94:31:54:36:d7:
80:4a:54:77:4f:f5:83:05:7b:38:04:03:09:3c:f7:20:05:fe:
8b:eb:92:d9:b6:07:9d:10:5d:30:78:8a:e7:81:ed:e4:04:91:
cc:8a:79:26:ac:e8:e6:d7:78:f5:73:d3:bd:22:eb:ca:21:c8:
b1:6a:df:70:aa:9d:da:61:19:ac:c6:48:7a:4e:40:09:63:7f:
19:52:2b:5a:a1:dc:01:31:b6:0a:00:44:fc:8e:f9:2f:c2:48:
5d:4a:86:a2:d6:87:0f:de:62:ea:87:a0:ec:b4:13:3e:16:a8:
59:d7:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:23 2025 by rpki-client