Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/761EDE34DA5A11EFAEBBA69B762E951A.roa
File: 761EDE34DA5A11EFAEBBA69B762E951A.roa (raw, json)
Hash identifier: wi36fv2d8Hvc9zdz97n6ABrQ2phCvoKQEG2XBJU8KtQ=
Subject key identifier: C8:AC:D6:5A:6B:75:F2:B8:AE:8D:50:D5:2D:5F:35:61:BE:FB:69:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/761EDE34DA5A11EFAEBBA69B762E951A.roa
Signing time: Fri 24 Jan 2025 13:52:34 +0000
ROA not before: Fri 24 Jan 2025 13:52:30 +0000
ROA not after: Sat 01 Mar 2025 13:52:30 +0000
asID: 44559
IP address blocks: 154.81.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83903 (0x147bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:52:30 2025 GMT
Not After : Mar 1 13:52:30 2025 GMT
Subject: CN=67939b21-e733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:a2:29:11:90:69:d9:52:ce:e9:b1:56:00:
37:10:7d:a0:95:2e:8e:56:6e:f5:84:f9:3a:8a:13:
8d:c8:74:76:f7:6f:df:e3:0e:c8:f4:70:2f:7d:00:
8a:ec:78:a8:26:91:f2:10:98:b7:76:ec:63:c8:d4:
81:2c:c2:09:fa:a7:0b:56:50:c6:e1:6e:03:80:ea:
f0:a1:98:3f:23:25:77:ce:c8:d8:b7:fa:24:57:c1:
8e:bf:a7:3a:ae:c5:56:b7:d2:c8:be:bc:79:15:7f:
c7:3e:d9:ad:44:92:12:17:6b:af:4c:46:19:75:cd:
e9:04:73:c7:72:cf:b9:c6:ea:27:cd:42:73:3d:77:
b5:39:58:64:58:c5:14:80:d4:f4:bc:05:d0:97:f8:
a9:89:2e:c2:e7:3c:9e:b9:46:f2:2c:68:5e:85:0b:
7d:3f:ad:63:1a:af:a1:d2:54:d8:61:39:ab:98:9e:
f7:b7:c5:78:b7:ff:37:87:51:1a:c0:62:3c:4f:b2:
a5:88:2f:7f:2a:c1:f5:27:86:d7:96:26:bb:5f:1c:
f1:64:9a:3e:a8:87:ae:03:c2:0c:2d:28:df:be:e6:
ba:43:a9:44:64:d7:4b:08:65:7a:c5:42:53:4f:00:
93:5c:28:18:e0:92:a2:cc:8f:20:1c:b4:68:73:a2:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:D6:5A:6B:75:F2:B8:AE:8D:50:D5:2D:5F:35:61:BE:FB:69:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/761EDE34DA5A11EFAEBBA69B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.194.0/24
Signature Algorithm: sha256WithRSAEncryption
19:03:26:00:f9:c0:92:6f:53:88:e4:c2:f4:be:01:2c:87:94:
77:80:9a:ec:42:9b:25:be:62:4c:43:c1:44:19:68:5e:0b:e3:
c2:98:d4:65:07:2d:52:39:a4:13:22:0a:70:9b:7f:ea:ee:63:
15:31:c2:bc:c5:6e:23:69:20:b2:9a:93:0d:14:ce:e7:77:e0:
cb:84:0e:e1:4e:b2:8d:87:35:03:f5:a8:a8:6e:88:66:01:2f:
dc:82:73:8b:9a:82:61:c6:66:d3:ca:4a:5b:d8:2c:e6:4a:48:
d0:53:12:07:d0:ab:b7:9f:16:99:38:99:b0:f8:76:88:7c:b6:
30:10:0b:b9:3d:ce:17:01:5a:b8:92:75:c8:6d:69:84:70:41:
87:43:13:e4:5a:fe:4c:09:df:19:5f:24:57:45:1e:d7:a6:16:
42:b4:7b:9c:bf:31:df:9a:eb:9a:df:ab:b4:b8:de:fe:9f:b8:
84:39:b5:b3:15:27:72:13:5c:35:cf:6c:a7:10:96:23:6f:f2:
6e:38:b6:86:56:86:b7:eb:73:40:5c:8a:93:a0:66:dd:28:e9:
0a:e9:54:b3:4f:b3:d4:40:39:d0:e8:c1:d4:dd:bf:f0:c2:be:
b9:32:a9:8b:0a:ff:4a:40:f5:bc:1d:6b:c6:c1:09:4b:ea:2c:
15:c2:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:26 2025 by rpki-client