Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D082004DA5C11EF8674ABA9762E951A.roa
File: 8D082004DA5C11EF8674ABA9762E951A.roa (raw, json)
Hash identifier: 8fkD2g2TqW0FeQziUmKn8koJx+9ZklcgoX/vXtAJars=
Subject key identifier: 72:CE:AD:E8:17:E6:AD:45:A1:C9:74:D0:C2:3E:98:6D:D3:7D:B9:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D082004DA5C11EF8674ABA9762E951A.roa
Signing time: Fri 24 Jan 2025 14:07:31 +0000
ROA not before: Fri 24 Jan 2025 14:07:27 +0000
ROA not after: Sat 01 Mar 2025 14:07:27 +0000
asID: 44559
IP address blocks: 154.81.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83946 (0x147ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:07:27 2025 GMT
Not After : Mar 1 14:07:27 2025 GMT
Subject: CN=67939ea3-e5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:02:bf:be:9e:2b:eb:91:87:c7:8d:92:cd:1a:
99:b7:5b:71:7e:d0:3e:29:37:0b:21:12:21:b8:65:
2f:11:15:aa:c9:ef:c1:65:a2:dd:ec:3c:fd:f1:c3:
8b:25:5f:05:fc:1d:cc:ce:3f:85:b5:bc:2b:b1:b3:
97:56:6d:d9:0c:9e:b3:43:ad:d7:27:a9:a8:50:bb:
43:e4:6e:d6:3c:52:f5:d8:29:9b:cf:15:2c:31:81:
7a:32:4d:e3:65:bc:25:08:81:04:16:66:c0:88:99:
b9:7a:12:b2:e0:e5:ca:b6:8d:b9:27:c3:8c:40:b2:
b8:e2:df:1c:0d:b8:a6:d8:01:16:fb:1a:f2:5a:14:
3c:a2:89:7a:91:3f:7a:3c:31:8f:9c:ec:41:ae:73:
7a:e3:72:df:94:9c:47:b0:80:97:da:28:65:7f:9f:
f3:f4:b4:59:9b:ae:ee:77:61:dd:78:7b:9b:74:6e:
67:91:de:81:7c:31:22:7f:06:ec:b7:15:3d:d4:8f:
a4:ca:d7:8f:2e:6c:bc:01:e2:ee:16:46:3d:35:18:
ba:43:a3:49:74:09:8c:c8:14:fc:c5:23:e6:50:5e:
0b:51:8c:f3:6b:ac:19:0a:6b:ce:36:95:68:f8:71:
00:0f:94:8c:53:96:87:7b:0b:b1:1a:c5:fa:d1:4d:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:AD:E8:17:E6:AD:45:A1:C9:74:D0:C2:3E:98:6D:D3:7D:B9:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D082004DA5C11EF8674ABA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.53.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0a:f2:5f:b5:00:dc:bd:e0:ab:54:29:ca:35:38:06:40:cd:
16:7d:49:71:36:31:67:f5:98:4f:2a:f0:b7:3b:31:ff:c7:4a:
38:fe:a7:dd:3b:7d:b5:08:be:76:39:aa:19:b5:e2:f0:87:78:
bd:bc:a6:99:3e:5e:ac:be:62:6c:a8:a5:68:9e:44:cf:43:02:
6b:52:40:6d:7e:df:e1:59:6d:f0:f6:b4:01:dd:27:b9:ce:41:
e2:15:8f:8a:26:16:1c:ce:8f:bd:9a:22:b9:3d:92:09:c5:24:
16:aa:8e:83:78:bd:e9:77:d3:32:43:23:4f:12:03:bd:08:84:
09:09:a6:6a:79:1f:0d:3b:6b:84:55:07:c1:79:3a:5d:20:2e:
dd:5d:7f:af:91:e6:13:d5:31:34:3f:ba:c0:16:f7:d2:bf:71:
9c:88:f0:62:31:56:72:b3:68:98:d7:6e:a0:28:4e:d0:59:24:
88:7b:d7:41:74:a3:cb:a1:60:06:55:d0:ec:7a:83:8e:d4:a0:
ca:f5:42:a5:c9:27:c2:b8:1c:dd:d7:96:53:53:3a:4f:b3:39:
f1:de:35:9c:98:51:a7:41:62:3a:80:5a:80:74:aa:32:39:e7:
08:c1:d8:69:55:72:3d:92:3a:89:10:5b:d3:5f:28:51:20:d0:
1f:9d:7b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:22 2025 by rpki-client