Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43116FE4DB2111EF8D82AE5B762E951A.roa
File: 43116FE4DB2111EF8D82AE5B762E951A.roa (raw, json)
Hash identifier: Td8OAukRqWUBlaUliUTbOilN8oNQBW/5lgA7P5ofxGo=
Subject key identifier: 6B:B1:D8:8A:3F:90:8F:23:00:B0:ED:A3:80:AD:51:A5:E7:C4:B0:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014993
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43116FE4DB2111EF8D82AE5B762E951A.roa
Signing time: Sat 25 Jan 2025 13:35:38 +0000
ROA not before: Sat 25 Jan 2025 13:35:34 +0000
ROA not after: Mon 03 Mar 2025 13:35:34 +0000
asID: 48031
IP address blocks: 154.223.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84371 (0x14993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:35:34 2025 GMT
Not After : Mar 3 13:35:34 2025 GMT
Subject: CN=6794e8aa-6146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:1e:5b:55:ec:ac:34:7d:08:fc:5b:b8:89:
70:59:02:37:48:1c:e5:d4:4f:90:8b:9e:a6:e6:7d:
dc:ae:db:ac:84:05:f5:04:70:62:dc:24:1b:e0:ab:
7c:54:48:50:97:35:bc:cb:20:39:e2:d8:69:0c:b1:
90:76:85:ac:3a:b1:13:f2:95:c6:65:16:96:34:32:
e5:24:00:e1:4b:f1:19:0a:fc:72:e0:eb:10:19:d8:
2d:aa:ff:fe:5a:5a:93:5a:2f:29:4b:8a:60:ca:34:
67:fe:df:89:d9:8d:dc:13:d3:36:db:93:b4:f3:7a:
77:b9:8c:04:ab:30:53:10:7b:62:15:6b:79:31:a6:
96:b0:57:e0:30:8e:42:ae:01:06:71:c3:35:ee:20:
fa:08:dd:64:b3:2c:f8:a9:19:f5:78:96:43:32:81:
21:69:84:9b:31:e0:c7:d2:c9:9a:9f:10:ac:14:c1:
d7:b0:13:ca:7f:b0:06:da:1f:f8:09:72:03:11:5a:
8d:f1:e7:bb:78:97:f2:b1:e3:1b:92:6b:0c:e7:42:
3d:87:b6:0d:14:59:12:f7:9c:07:a5:41:62:ba:b4:
ff:78:f7:56:80:ad:ab:a1:cc:dc:a7:4b:4a:26:3b:
a7:59:f3:99:19:40:12:0b:9f:37:83:74:f2:25:67:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B1:D8:8A:3F:90:8F:23:00:B0:ED:A3:80:AD:51:A5:E7:C4:B0:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43116FE4DB2111EF8D82AE5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.81.0/24
Signature Algorithm: sha256WithRSAEncryption
10:84:16:68:b2:9d:ee:41:d3:5e:97:a8:82:af:2b:37:c5:fa:
23:14:c5:18:f9:6e:22:c1:60:84:92:24:b1:f9:11:80:01:4c:
66:c8:05:ae:4f:56:47:ba:9d:66:0d:f8:20:b1:73:e7:ca:22:
77:41:b1:3a:c7:d4:3d:ab:a6:c6:d5:2f:6a:95:e9:cd:a3:93:
d5:90:5f:bd:ac:0c:bd:ac:8e:08:b3:8c:09:fa:e2:7b:9e:65:
5b:80:f6:b7:37:cf:24:69:e4:b8:f0:79:0a:5e:3c:33:31:37:
d1:20:aa:d7:93:ea:05:af:9b:21:3b:47:91:b8:a7:8b:95:ba:
6b:60:5a:18:1d:a4:45:35:67:c1:64:7d:68:8c:5a:66:bc:01:
c6:b9:80:a2:3a:d5:e5:65:b1:ae:bf:9b:33:ab:59:60:70:22:
df:e5:ee:57:15:6e:2f:7f:7e:62:57:fa:ff:a4:a9:5f:f4:54:
0c:96:71:ed:e4:55:65:1d:22:26:6c:6c:60:89:73:9e:6c:1a:
8f:09:49:92:e1:cd:f1:1b:f9:94:54:2f:f7:72:aa:1b:6d:66:
73:94:9a:f7:17:d0:e2:0b:5f:56:6b:fc:10:c4:6f:b9:db:1c:
62:24:e1:4c:f8:6a:9f:c6:2e:0e:c7:7b:69:9b:5a:ef:0a:20:
a6:0c:ca:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:14:37 2025 by rpki-client