Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E54AEDCDA0B11EFBB1E3186762E951A.roa
File: 4E54AEDCDA0B11EFBB1E3186762E951A.roa (raw, json)
Hash identifier: AGQYWrObwKn3nQUkEFvPtef0NSm37sbzXQTjzblXA7M=
Subject key identifier: 1B:C8:59:3E:D8:DF:07:27:86:40:58:F3:95:6B:22:0B:C5:01:89:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E54AEDCDA0B11EFBB1E3186762E951A.roa
Signing time: Fri 24 Jan 2025 04:25:56 +0000
ROA not before: Fri 24 Jan 2025 04:25:53 +0000
ROA not after: Sat 01 Mar 2025 04:25:53 +0000
asID: 44559
IP address blocks: 154.81.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82884 (0x143c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:25:53 2025 GMT
Not After : Mar 1 04:25:53 2025 GMT
Subject: CN=67931654-61a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:d2:f2:48:c3:8a:13:26:d0:5b:71:6c:d4:
6c:d7:52:85:aa:da:1b:1e:02:1a:38:2b:4d:8f:ae:
bb:5e:ae:46:70:be:2a:6e:f4:46:2a:64:39:9b:ae:
a5:35:6f:ac:47:0e:3f:63:5c:25:4b:f7:9f:bc:4b:
c8:c4:95:b0:34:66:c5:90:aa:cc:61:6b:36:c9:13:
87:1e:cd:17:83:57:f6:e2:8b:78:ff:96:a3:c3:9a:
e4:4c:64:dd:c3:e7:44:d1:4d:92:1e:03:65:01:15:
b0:39:cc:22:cd:5d:de:44:dd:66:9f:49:3e:fa:50:
cf:61:5a:ad:b1:e4:55:96:59:2a:f2:57:3b:79:75:
bf:7f:e1:e4:c7:e4:3e:2f:84:0f:0c:a5:b4:ce:96:
b4:03:0e:8a:45:47:3e:55:19:eb:7b:27:8e:79:6c:
77:b0:20:e4:94:66:a3:db:2a:69:49:90:09:57:83:
08:56:ae:82:e8:67:03:ad:be:38:00:34:11:31:d6:
c6:ed:c1:83:7a:b9:2c:4c:24:b4:0e:d8:df:8d:e5:
41:c6:70:11:d5:73:22:9e:6e:0d:4e:89:0c:b2:23:
12:cc:a3:4c:df:70:ad:cb:26:3e:24:8d:4d:f8:2e:
31:de:23:12:10:18:4a:75:72:17:5b:96:b6:69:77:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C8:59:3E:D8:DF:07:27:86:40:58:F3:95:6B:22:0B:C5:01:89:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E54AEDCDA0B11EFBB1E3186762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:04:26:c9:1f:1a:04:06:54:e1:70:3f:a2:3c:e5:55:8a:4e:
f4:f7:00:ea:5c:eb:60:9b:c1:f1:3b:9e:cf:30:45:ed:dc:33:
11:51:6b:6f:7a:50:e6:c1:3a:2d:c8:69:33:bc:e2:f9:4e:6c:
76:ae:44:31:ac:d6:59:f7:ae:a0:75:f2:04:a3:a0:ec:8a:d8:
0d:c3:2d:ce:38:8a:13:b1:3a:aa:54:99:52:2f:b9:f1:15:82:
74:f8:15:86:20:33:b8:06:c1:55:0d:27:1a:7b:68:06:b3:89:
01:ef:5a:11:2e:bb:58:7a:9a:b1:ea:7d:47:89:47:46:72:2e:
34:f8:4b:78:c0:93:17:be:c0:f5:41:1f:89:2d:50:c4:3b:73:
a8:04:16:33:c7:df:27:1a:b1:16:de:f1:57:a2:f7:79:34:b4:
1b:f9:a3:f1:36:66:1b:5b:00:2a:f0:7f:80:79:3b:0f:d5:89:
9a:db:e3:bb:a0:a5:bd:a3:02:4b:eb:5f:16:c0:71:c0:53:2f:
0c:d1:a7:23:ca:85:93:51:e8:f0:32:64:e4:4a:70:92:47:b1:
9e:b6:27:4b:42:41:d2:ff:03:d2:c2:9e:b9:c3:11:b7:85:7f:
ac:5f:42:99:60:f1:16:86:f2:b6:36:3f:e5:24:34:6f:02:23:
53:49:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:36 2025 by rpki-client