Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88634202DA0911EF837E887C762E951A.roa
File: 88634202DA0911EF837E887C762E951A.roa (raw, json)
Hash identifier: bP23AY1w4kWqEWjMIvDNybY+D18xrblPM1h+f5E2KoE=
Subject key identifier: 38:93:CF:84:54:8A:49:AF:95:01:E3:26:1F:8C:4A:4F:80:89:6C:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88634202DA0911EF837E887C762E951A.roa
Signing time: Fri 24 Jan 2025 04:13:15 +0000
ROA not before: Fri 24 Jan 2025 04:13:11 +0000
ROA not after: Sat 01 Mar 2025 04:13:11 +0000
asID: 44559
IP address blocks: 154.81.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82872 (0x143b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:13:11 2025 GMT
Not After : Mar 1 04:13:11 2025 GMT
Subject: CN=6793135b-f528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:06:6f:17:f4:d9:bc:4f:6e:2f:1b:95:a4:2e:
44:15:3d:ec:d9:e5:78:e8:d6:67:93:bc:f7:69:dc:
d3:2a:94:72:36:42:fb:88:ee:90:f6:cc:ba:a3:ba:
c6:35:3a:48:7d:6d:68:20:3b:8d:50:23:24:96:12:
4f:98:ea:29:b9:88:e5:30:be:ac:0d:a3:fe:f3:b4:
32:e6:7b:ba:95:69:c5:c7:30:1d:9d:99:02:53:81:
48:1c:68:89:c4:b9:8a:4d:5c:20:82:1e:2b:36:16:
35:01:ff:98:bc:f0:69:ba:fb:f4:74:4e:fe:3f:7b:
5c:c9:e4:76:82:6b:88:4a:fa:da:45:08:d3:cd:3e:
cc:93:85:01:50:5e:e1:c0:a4:de:d5:1d:e4:de:b4:
8c:7b:2e:2c:19:54:4e:dc:4c:08:13:60:3e:41:71:
91:02:82:1e:7b:c9:60:25:38:ea:e7:46:ce:bd:f3:
3d:d0:2b:c5:56:c2:4a:92:5c:37:da:67:5e:1d:fa:
8f:51:66:19:e9:6f:53:df:e3:62:2c:66:6a:d7:43:
53:f0:f9:b4:37:85:92:68:f6:c0:00:94:6c:cc:21:
dd:1f:1d:5e:70:62:b9:3a:4d:29:21:d9:a4:08:4b:
e5:6d:08:3f:f8:26:d3:bd:c7:9f:c5:18:89:2b:16:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:93:CF:84:54:8A:49:AF:95:01:E3:26:1F:8C:4A:4F:80:89:6C:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88634202DA0911EF837E887C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.199.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e5:12:1a:f8:ff:0d:7f:35:e4:3c:e3:23:89:7b:93:a3:05:
81:64:da:73:0d:df:6a:23:30:4d:d1:76:72:53:99:33:6e:a7:
2a:ae:32:73:8b:0e:45:3e:e1:f2:ac:07:cc:92:0a:80:cc:97:
b6:5b:be:75:1b:0d:a4:ca:3d:ff:60:de:d2:f6:e1:b6:f5:e9:
c5:93:da:7f:ae:d2:a3:d3:4c:db:60:45:cd:53:6d:13:e0:63:
dd:96:3b:2c:58:53:21:07:46:2d:e7:65:5d:fe:ab:23:04:31:
66:d3:6d:55:91:d1:c3:43:a2:04:05:9d:60:44:09:ab:b2:91:
4d:87:5a:c2:c6:70:15:b9:35:dd:c5:d9:bc:c6:76:be:70:48:
7b:91:0f:e7:89:e4:fd:d3:1b:56:30:a1:e1:2d:fc:bc:f5:8f:
8c:66:5f:88:19:39:bd:a4:28:cf:90:67:35:d4:b9:5c:4c:44:
5e:75:46:52:82:06:0d:72:8f:d4:d2:97:9e:41:a4:99:34:9c:
9e:50:ec:fe:3f:63:da:ee:00:3b:0b:20:ab:a5:00:c3:9a:ee:
70:a1:95:74:cd:62:63:c2:d6:c1:c1:99:53:6f:6f:42:6f:21:
77:1e:40:7f:13:af:41:aa:8d:01:d4:2d:d6:93:94:0e:64:e4:
0e:8f:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:10:40 2025 by rpki-client