Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81438D40D3D511EF8F865096762E951A.roa
File: 81438D40D3D511EF8F865096762E951A.roa (raw, json)
Hash identifier: uc4dfUNdKRgaVlqfCN7KMwvj4o+hloeFY0U7XzHXmBY=
Subject key identifier: C9:54:1D:52:6C:DF:07:42:BF:8B:DB:2F:DC:EC:F9:41:23:08:AB:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81438D40D3D511EF8F865096762E951A.roa
Signing time: Thu 16 Jan 2025 06:45:42 +0000
ROA not before: Thu 16 Jan 2025 06:45:38 +0000
ROA not after: Wed 19 Feb 2025 06:45:38 +0000
asID: 7018
IP address blocks: 154.197.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80830 (0x13bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 06:45:38 2025 GMT
Not After : Feb 19 06:45:38 2025 GMT
Subject: CN=6788ab16-6d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:ee:d2:05:cf:64:57:14:6c:ca:08:c3:35:
ef:44:f9:b0:08:1b:09:cd:f6:f7:82:a8:74:b8:6a:
c8:46:f0:cb:4b:15:36:ac:f8:b6:38:40:93:4e:6e:
ef:2b:f6:3c:ab:73:71:4d:cd:45:a9:a1:5a:84:d1:
50:5c:04:cd:66:de:8e:9f:3e:af:b7:08:03:7f:ca:
69:52:44:d0:61:5d:66:9b:9e:ee:a9:79:a1:1b:b4:
9a:17:84:9e:ff:a9:35:f8:8a:38:4a:bc:4c:af:62:
cd:ec:4b:f2:f3:d8:7d:0f:57:26:13:73:b9:1e:7d:
1c:8a:83:ee:31:25:ab:a1:38:41:73:fc:a7:43:bc:
17:c9:ff:89:e6:66:50:38:34:b3:b6:9a:94:f5:f3:
0e:97:57:1d:32:8a:c7:97:1c:15:0e:ad:e5:c7:fd:
f7:2b:c8:c7:fc:a0:d5:f6:d2:19:a6:cc:1b:2a:84:
ca:75:56:54:ac:fc:47:70:0d:6c:33:67:bd:0e:d9:
e3:3a:cb:d9:d8:70:57:da:fa:a8:34:63:b6:a8:f0:
ee:ba:86:da:50:51:70:d7:a7:7c:74:c7:71:50:83:
5d:4c:78:d7:f5:a0:f1:f5:a3:e7:fe:e4:a4:d4:62:
53:ac:99:ca:19:a3:22:0c:5d:ff:94:62:7a:43:4f:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:54:1D:52:6C:DF:07:42:BF:8B:DB:2F:DC:EC:F9:41:23:08:AB:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81438D40D3D511EF8F865096762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.30.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:7e:0a:cb:60:37:33:3f:d5:3b:b4:81:3b:e9:7a:10:52:75:
30:ab:6f:df:26:bb:74:ab:c6:d9:fe:31:39:f3:d5:6c:61:b6:
1c:b6:d6:99:6e:0c:cb:94:fd:7e:36:26:f6:66:8c:3a:cf:bf:
11:34:90:9a:db:54:7a:7a:ba:ee:2b:c0:d4:e9:23:52:fc:29:
6b:79:c7:cc:55:a9:f2:13:4d:df:8c:51:60:e2:ce:a6:24:c9:
69:56:cb:10:ce:e6:d5:b6:e1:e1:45:78:a8:d0:df:a0:73:e1:
00:93:79:e3:54:dd:a0:ca:3e:ab:7b:a7:d9:6a:99:54:f3:d9:
22:5e:a1:6f:ee:7c:71:39:36:e9:de:55:5d:d9:56:1b:18:ac:
26:80:cc:ef:6a:1e:8c:d3:e5:6b:85:76:75:41:3d:a2:a5:d1:
b3:f3:64:e7:19:a9:fb:19:16:61:bc:fd:25:5e:b4:ec:6a:c6:
c7:3d:cf:b1:18:3f:a3:fb:03:ed:07:47:f8:fb:b9:f4:ec:c6:
fc:aa:6e:80:77:6b:3e:47:d8:bb:0f:8e:d4:15:47:6c:df:6f:
fe:a3:35:d0:34:80:d9:75:ce:69:49:d4:13:42:90:37:dc:28:
f6:7a:e4:fe:53:a1:2b:53:6a:39:1b:9b:41:ab:25:25:a4:c1:
74:53:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:26 2025 by rpki-client