Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D55D1D0DA6111EFABE95C4A762E951A.roa
File: 5D55D1D0DA6111EFABE95C4A762E951A.roa (raw, json)
Hash identifier: 9Vm8XtX7PNsdh9Hy5C7d43Ldu1JLhuM/Z9y+g1JWJ3Q=
Subject key identifier: A9:38:4B:25:A2:80:64:76:9A:80:56:1F:63:08:EE:0D:E7:A4:3E:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014852
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D55D1D0DA6111EFABE95C4A762E951A.roa
Signing time: Fri 24 Jan 2025 14:41:58 +0000
ROA not before: Fri 24 Jan 2025 14:41:55 +0000
ROA not after: Sat 01 Mar 2025 14:41:55 +0000
asID: 44559
IP address blocks: 154.81.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84050 (0x14852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:41:55 2025 GMT
Not After : Mar 1 14:41:55 2025 GMT
Subject: CN=6793a6b6-216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:40:85:01:97:67:af:6a:ea:60:1d:a3:fc:
34:92:23:c1:cd:f6:ff:c1:85:20:8c:fb:63:15:f5:
b7:e7:1f:af:8c:83:6a:30:d0:33:4e:e1:c3:2c:10:
0f:b5:e3:3e:42:55:48:36:d3:f2:84:75:68:8e:9b:
4f:98:8d:90:92:51:ec:8d:f7:73:cc:48:9f:89:1d:
a2:4d:f9:d5:7b:6d:9a:d0:ca:a4:8e:ea:d9:e2:5d:
45:04:41:72:d2:e2:a4:3e:9d:18:c2:59:30:41:7d:
5f:05:f6:1c:65:c2:d2:9f:17:df:c6:4f:d9:fa:49:
04:d0:30:58:7b:7b:e2:b9:2e:db:e6:4d:b1:dc:42:
1b:7e:1f:b1:06:bf:c8:c4:f6:ae:59:26:25:81:ce:
7b:9e:15:32:46:10:db:0f:e2:88:ba:1e:3a:4a:7b:
74:74:cc:82:50:e7:ba:91:62:7f:1e:20:70:15:46:
a7:54:62:8d:91:34:5d:aa:90:12:cf:d2:f4:c9:d0:
ce:ad:ab:ef:8c:0e:62:65:73:e0:92:2c:01:2e:a8:
7b:37:68:8f:07:9c:63:61:1f:ce:c4:2d:ad:17:cc:
3b:e3:c9:7c:8d:3a:74:66:c2:65:eb:21:6d:30:b9:
93:c0:89:c9:55:eb:34:b1:bf:f4:fa:6d:08:88:6b:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:4B:25:A2:80:64:76:9A:80:56:1F:63:08:EE:0D:E7:A4:3E:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D55D1D0DA6111EFABE95C4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.192.0/21
Signature Algorithm: sha256WithRSAEncryption
19:79:f8:34:f5:db:76:47:7c:e9:d1:85:7f:ee:c8:0d:ab:1a:
2f:73:d5:f5:d4:28:a0:5d:9d:d4:6c:b5:a9:e4:2a:b0:31:95:
d7:98:6c:3e:04:72:4d:4d:50:f3:ff:e2:97:97:4d:61:9b:39:
98:ed:b9:81:34:02:e7:8a:7f:7d:4e:59:b6:a7:7e:58:37:ed:
63:f4:15:f6:79:54:11:70:af:c1:40:fc:ed:e6:7a:c5:b6:a9:
12:31:0e:39:b5:a5:df:7d:f2:27:75:17:26:f0:1f:af:c1:27:
ef:7b:eb:c7:a2:3c:cc:be:33:7d:20:23:a8:eb:64:8c:82:8d:
9f:63:13:5d:0a:71:90:68:2d:aa:7f:80:89:39:c7:97:1d:ba:
6f:7e:29:23:00:aa:a0:bc:4a:ab:eb:f5:64:04:82:7d:7f:a8:
54:63:e5:8d:d2:a8:75:c7:a8:b5:d9:ab:d7:5e:02:9c:89:4b:
1b:ef:6e:dd:f8:31:2c:ac:44:9c:5d:f8:bd:43:1e:33:97:e3:
7a:00:0e:71:2d:fe:a5:ac:cd:94:2a:e0:60:90:de:b7:1f:33:
b5:cf:4b:97:64:ec:09:52:c7:fd:78:a5:9d:fa:ce:cc:d0:4c:
c8:8a:fc:cc:c5:b3:c9:e3:3b:9d:1f:bd:fe:ca:1a:df:8c:c3:
fd:6a:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:31 2025 by rpki-client