Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C26654DA5E11EF846E06B4762E951A.roa
File: 67C26654DA5E11EF846E06B4762E951A.roa (raw, json)
Hash identifier: NbxuDoVmiFVBGGEN0ZtgJF+YUW0CZwItCRO5EMH3TAs=
Subject key identifier: E7:42:1A:75:F6:AC:B3:CD:06:E2:13:28:EE:EB:ED:E8:FA:5F:86:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014811
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C26654DA5E11EF846E06B4762E951A.roa
Signing time: Fri 24 Jan 2025 14:20:48 +0000
ROA not before: Fri 24 Jan 2025 14:20:44 +0000
ROA not after: Sat 01 Mar 2025 14:20:44 +0000
asID: 44559
IP address blocks: 154.81.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83985 (0x14811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:20:44 2025 GMT
Not After : Mar 1 14:20:44 2025 GMT
Subject: CN=6793a1bf-ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:a8:be:d3:29:68:e6:64:07:0b:31:58:c0:
b1:4d:6c:32:38:41:26:5d:35:da:e7:65:3b:b8:59:
39:14:3a:d3:8d:20:9f:64:56:7c:97:b4:f1:49:06:
1d:52:18:a8:4a:cc:34:0c:08:b7:1e:24:b9:db:68:
da:88:8f:05:f5:21:db:55:65:e2:04:81:32:c6:f3:
c6:34:04:b4:78:ad:ba:9a:dc:85:00:e3:6c:52:e2:
c4:87:09:0f:03:a1:d3:f6:39:ed:df:29:9d:af:b6:
3f:93:13:15:03:b4:93:0a:34:bf:12:1d:fe:99:b5:
14:8d:0f:e3:c7:44:66:9a:c4:f9:fe:4a:d5:ba:29:
80:2d:cc:b5:3b:b7:6b:79:7b:a3:d5:01:71:91:20:
4a:11:80:06:f6:4a:28:97:51:f8:8f:6c:1a:1f:5d:
fa:d5:06:ed:62:98:af:98:45:76:17:86:8b:29:ac:
1e:7f:a0:34:89:da:a8:14:fa:5f:86:24:b4:7d:d2:
4d:3f:c0:63:21:f0:1a:df:10:66:53:f8:c6:7a:82:
08:df:d1:7b:19:38:47:60:46:74:12:d9:a8:90:e2:
e4:e0:7b:ba:26:d7:c0:4d:65:65:f3:95:0d:44:ce:
f6:9b:a4:a8:bb:13:a0:40:05:7f:a9:fc:00:c0:59:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:42:1A:75:F6:AC:B3:CD:06:E2:13:28:EE:EB:ED:E8:FA:5F:86:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67C26654DA5E11EF846E06B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:7a:9a:bc:61:e7:01:e5:57:92:13:e7:67:ba:fd:17:82:2e:
11:2c:57:cc:28:09:a0:9b:c5:8f:37:69:c9:a7:03:fe:81:4a:
f6:e5:d4:b4:be:8f:7a:fc:cf:d4:6c:7c:7b:c7:a9:db:d4:a8:
52:12:58:33:7a:ba:01:39:9c:94:9e:ea:a7:26:22:50:fc:b4:
7f:06:32:90:2d:ab:6b:44:c9:43:1f:99:17:8f:58:d7:d5:ce:
4e:ad:af:b6:47:ee:41:fa:47:e8:f1:ee:c3:57:80:a7:13:33:
3c:ba:3b:83:77:45:c5:0c:40:a6:58:7f:81:d8:1c:12:1d:32:
56:e4:fd:01:03:43:3e:5f:0b:50:3a:67:d9:86:55:b4:b0:0b:
9e:3e:8d:b4:d7:11:c2:d1:7e:f8:82:54:17:14:49:7b:f0:82:
49:44:25:d9:f5:1f:60:3f:e7:0e:69:e3:8b:a7:81:89:9a:e8:
25:a0:e1:d6:a1:f1:66:de:b5:09:cc:86:b0:2f:ce:2d:f6:c3:
3a:42:05:0b:63:8a:18:3f:2c:12:90:49:91:50:a1:8b:b5:c0:
9a:39:a3:90:7f:34:18:41:8c:29:eb:08:2f:b8:e9:68:ec:9c:
c6:c0:35:c8:e5:82:e5:89:4f:b6:c8:4d:97:7c:6d:ca:63:b3:
3c:00:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:23 2025 by rpki-client