Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A81506ADB2011EFB6C91857762E951A.roa
File: 9A81506ADB2011EFB6C91857762E951A.roa (raw, json)
Hash identifier: mJElEUqmhSPSNFe4rqBt6VKQD7vtBt9Rt1Ft9ENhB5Y=
Subject key identifier: A6:4B:4D:FA:65:F7:5A:4C:38:DA:12:81:CA:A9:8C:5A:11:82:3A:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01498A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A81506ADB2011EFB6C91857762E951A.roa
Signing time: Sat 25 Jan 2025 13:30:55 +0000
ROA not before: Sat 25 Jan 2025 13:30:51 +0000
ROA not after: Mon 03 Mar 2025 13:30:51 +0000
asID: 48031
IP address blocks: 154.222.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84362 (0x1498a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:30:51 2025 GMT
Not After : Mar 3 13:30:51 2025 GMT
Subject: CN=6794e78f-5050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:b4:ae:b0:ae:76:47:31:11:b7:7b:cc:a2:
eb:a7:38:ea:97:68:4d:56:d0:16:e8:63:61:77:32:
75:17:a9:83:6c:62:33:9e:24:c9:7a:d3:33:25:48:
87:cc:4b:5c:47:df:22:b4:97:f3:0c:c7:3d:e0:fd:
66:dd:97:08:bd:9e:5d:10:31:49:90:ca:55:80:fa:
fb:e1:14:56:cc:93:f6:06:c6:d0:72:b9:f7:ee:41:
65:96:a2:64:78:24:6a:71:17:ef:dc:9f:6d:2f:f7:
9a:9a:d5:31:86:25:21:f7:ea:e8:bf:3d:69:20:5a:
6e:0b:e7:0c:e9:a1:21:46:74:e2:a7:21:d3:1f:ef:
67:ca:54:f4:b4:57:e4:0e:f4:cf:49:57:69:95:3e:
8c:ea:be:30:a4:68:43:3f:c7:49:d7:45:4c:86:aa:
40:e7:11:e7:ff:7a:39:5e:75:6f:a9:4b:70:c0:0b:
7d:64:d0:f0:f4:29:fd:ac:32:a3:18:a2:30:87:a9:
a2:7b:ed:80:05:57:cf:b1:94:d0:f9:a7:b8:53:f4:
5f:23:7a:21:8c:56:cf:7d:30:db:0e:a5:54:ae:ce:
42:f8:4e:bc:ac:73:cc:e8:09:f3:15:bc:ae:fb:31:
fe:fa:61:dc:34:43:93:18:1b:a7:83:49:7d:4c:ce:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4B:4D:FA:65:F7:5A:4C:38:DA:12:81:CA:A9:8C:5A:11:82:3A:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A81506ADB2011EFB6C91857762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.242.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a0:5b:58:bf:ae:56:6a:98:20:1a:69:6f:9e:de:99:83:84:
b0:54:15:5c:fd:72:4f:86:3c:2d:ac:77:33:75:7e:37:6b:ac:
bd:a6:b2:02:b8:19:92:9e:3c:cd:0b:21:47:3d:1b:a0:89:ee:
2c:4f:c2:8a:60:8b:30:08:eb:de:97:22:2d:7a:9f:0d:c1:9c:
98:9b:3f:23:62:8d:b7:0d:e5:8e:10:3c:b4:25:3e:f4:94:6b:
dd:e2:36:88:2a:60:06:5e:d2:bf:da:00:86:df:60:ea:0b:af:
45:1b:82:87:1d:23:80:b0:1f:c6:72:d3:20:78:86:85:7f:57:
e9:c9:00:62:a7:8a:84:76:81:a2:e8:4e:02:76:e9:18:8b:44:
bb:41:af:5a:36:ef:51:f9:92:bf:9c:cb:cc:08:1a:5f:45:df:
fa:ee:77:25:e3:6a:12:89:ae:27:0c:30:0b:07:de:06:25:b4:
25:63:90:eb:e4:76:92:15:22:19:31:cf:66:7b:02:5c:cc:8e:
55:23:37:b4:2b:4a:25:bf:56:3e:60:31:6b:7e:68:25:66:c9:
7c:2c:33:4e:e9:e9:3a:50:e2:50:d5:b9:26:ac:09:8c:17:de:
88:66:eb:68:ad:7b:ee:66:31:36:59:de:17:c0:3c:cd:42:9d:
05:a5:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:01:35 2025 by rpki-client