Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E926E00DA0911EFBD899C78762E951A.roa
File: 3E926E00DA0911EFBD899C78762E951A.roa (raw, json)
Hash identifier: pqXVlZxiUV9/6TRcCBgytzSK1j4JUI9HqQWFxl2dgR0=
Subject key identifier: 27:05:E4:27:55:EB:5A:64:F4:15:39:11:07:75:23:A4:24:C5:BB:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E926E00DA0911EFBD899C78762E951A.roa
Signing time: Fri 24 Jan 2025 04:11:11 +0000
ROA not before: Fri 24 Jan 2025 04:11:07 +0000
ROA not after: Sat 01 Mar 2025 04:11:07 +0000
asID: 44559
IP address blocks: 154.81.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82870 (0x143b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:11:07 2025 GMT
Not After : Mar 1 04:11:07 2025 GMT
Subject: CN=679312df-953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:3f:23:be:e4:bf:a4:80:76:62:13:80:73:
f5:3b:6c:52:95:99:67:fc:62:4a:29:86:47:19:ae:
fa:e3:1b:22:a6:c6:e4:24:54:78:cd:b0:d9:dd:95:
c4:39:dc:99:12:4b:5c:95:e2:b6:27:9e:54:df:df:
6c:06:2b:f9:98:01:6b:31:c1:bc:71:f2:1a:47:b7:
c6:3b:24:ef:2d:7e:96:5d:05:f8:39:a5:a5:67:1d:
74:20:20:69:c7:6a:bd:b5:1e:92:6b:65:a1:28:fa:
b8:3c:19:3e:dc:61:a7:ee:df:a7:d6:53:92:7d:71:
ac:e0:42:04:e6:aa:12:1c:5b:fe:0d:62:b4:f4:f4:
a2:f6:5b:e4:3a:a3:2e:75:d8:c5:e7:ee:e2:95:30:
10:94:ef:a6:2f:70:0c:5b:d0:8b:85:10:26:8c:36:
eb:72:b5:64:0b:fa:77:90:08:a4:a3:c6:bc:cd:ec:
3c:af:d6:32:9a:fb:d5:4b:b1:1e:3d:25:be:ac:86:
68:11:41:4b:f5:78:5e:98:aa:f3:d9:1b:cd:0e:9c:
c9:ab:52:8d:cd:47:33:74:a4:1d:59:9a:22:43:9a:
d3:a2:4c:3a:82:c1:d0:18:27:4f:92:96:7b:6a:40:
a4:d3:be:9e:09:3b:60:d2:90:30:39:d8:ef:6e:d4:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:E4:27:55:EB:5A:64:F4:15:39:11:07:75:23:A4:24:C5:BB:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E926E00DA0911EFBD899C78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:17:7a:da:5f:9b:42:6f:68:ef:bb:cb:83:ee:f6:a2:fc:35:
4f:78:8e:58:41:43:00:82:de:1b:da:e7:6e:b4:41:4d:88:31:
9c:da:78:7b:1e:4c:2b:b9:37:30:46:ef:cc:0b:05:fa:d7:ea:
e0:7f:34:88:d2:83:24:65:07:3c:7a:ce:7c:3f:65:6b:54:9f:
28:55:1c:4f:ef:9b:99:57:d7:ad:d6:60:9d:c1:ad:ce:ce:32:
6c:bc:06:4d:1e:81:44:84:26:9c:b7:71:90:0f:83:35:1a:52:
be:3e:1c:20:82:c7:45:47:b1:b1:26:db:db:94:d8:05:f6:22:
6f:85:18:af:c7:55:82:b2:a5:b8:5c:c8:e7:20:24:9b:30:7d:
7e:5e:63:28:43:d0:1c:b1:6d:03:ae:01:3f:cc:32:b0:ad:27:
68:a1:80:d3:95:fc:01:78:9c:fc:aa:b2:b7:f6:b6:ce:4a:b6:
ef:f8:b9:49:8f:74:2b:d0:ed:05:9a:ed:8d:c6:0f:71:1d:bd:
f1:56:5b:29:01:0d:5a:23:43:db:ae:7a:99:ff:0b:c9:0d:de:
4c:86:53:bb:23:2d:f6:39:b0:46:5a:d1:03:06:1c:ed:96:6e:
5d:29:5b:16:ba:21:46:b2:ae:79:5b:e4:60:7a:96:49:fc:42:
02:4c:85:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:37 2025 by rpki-client