Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC666B0DA5D11EFB2ABE2AE762E951A.roa
File: 7BC666B0DA5D11EFB2ABE2AE762E951A.roa (raw, json)
Hash identifier: 5R7UjKlfm36iAxzI7GxRMRlNt+9URxDew6ZVQuA6WP8=
Subject key identifier: 78:5F:85:F0:73:1B:6C:88:15:AA:7B:8C:40:8D:B8:D3:BF:0F:75:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC666B0DA5D11EFB2ABE2AE762E951A.roa
Signing time: Fri 24 Jan 2025 14:14:12 +0000
ROA not before: Fri 24 Jan 2025 14:14:08 +0000
ROA not after: Sat 01 Mar 2025 14:14:08 +0000
asID: 44559
IP address blocks: 154.81.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83966 (0x147fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:14:08 2025 GMT
Not After : Mar 1 14:14:08 2025 GMT
Subject: CN=6793a033-fbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:83:0d:0f:d4:af:2c:61:40:4b:a2:f0:13:
7c:ce:82:9b:b3:a4:3f:c3:2f:00:a5:d4:40:12:92:
88:b8:75:ae:31:51:08:69:5d:6b:e0:19:aa:40:bf:
83:97:f9:13:19:57:28:23:67:b6:d3:51:c6:f5:b2:
01:bb:da:0f:8c:16:ad:d0:7e:15:0d:3b:4f:d5:f5:
bf:18:d8:3a:d3:57:a1:86:11:dd:10:84:bf:5a:08:
13:7d:9a:b3:54:ce:25:a4:8b:88:cc:3f:e4:be:69:
c4:a0:3d:f0:73:f2:f1:81:7b:63:97:51:d6:31:03:
82:1b:29:67:60:e7:50:ef:40:5b:60:a6:57:82:ba:
c3:22:e8:d1:7c:56:fe:c5:fb:11:66:c8:df:27:86:
e9:c6:f7:ef:2f:9a:f7:a5:14:88:26:a2:83:40:ce:
29:dc:e6:cf:c8:9f:4c:d2:71:c0:d3:62:e8:47:e1:
2f:f9:6c:75:56:56:a9:f3:dd:65:21:6e:2c:d9:f9:
5e:3c:c0:d6:ee:54:76:ee:ae:83:23:1c:51:9a:c6:
10:a2:42:83:ac:e3:e2:5f:74:7b:88:fd:bd:a0:50:
e9:28:c2:57:51:bc:d3:8e:7c:28:87:33:30:70:53:
98:42:b7:23:70:5d:9b:97:5a:c6:7b:7b:e8:c6:80:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5F:85:F0:73:1B:6C:88:15:AA:7B:8C:40:8D:B8:D3:BF:0F:75:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC666B0DA5D11EFB2ABE2AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8d:6d:75:e5:5e:9f:6e:f4:fe:8f:4d:88:c6:a2:7d:eb:03:
49:28:bd:35:34:95:4c:17:32:0c:8a:a5:43:89:4d:33:82:4a:
54:dc:da:18:cd:93:a3:16:fb:24:1f:2f:63:7c:3c:11:b8:a3:
72:5c:06:16:d0:0c:a6:de:40:03:cc:e6:6e:ad:9e:92:9b:a0:
04:b3:d8:54:7f:30:e5:b4:10:6b:fe:eb:8d:1e:bd:0f:44:3b:
3a:e5:ac:98:69:68:3b:84:53:3e:c7:81:d6:e5:9f:7e:68:18:
14:76:1c:58:91:12:9f:54:63:58:2e:14:a2:90:7e:05:a5:ca:
10:1e:76:80:13:04:56:21:23:f7:fa:b1:8d:5c:1e:99:71:a6:
e3:56:90:89:89:e6:6d:9c:19:af:e4:2a:e7:21:3d:88:27:12:
b5:38:89:80:f2:a1:76:53:ff:1b:f8:72:22:8d:f7:64:c2:cf:
5e:42:03:7c:01:0e:c4:59:e3:13:99:ff:fd:c5:77:c1:a7:1b:
6f:bd:8a:cc:9f:5d:27:05:5f:d3:09:99:12:e2:b2:f3:e8:7d:
b8:22:6d:13:c2:b7:34:3b:79:50:5f:7a:ff:b5:fc:9c:13:1c:
40:87:d4:4b:94:af:80:dc:a5:1e:00:22:1e:3e:7e:ba:3a:07:
e7:8a:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:35 2025 by rpki-client