Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A63D72EADA0C11EFBDDE128F762E951A.roa
File: A63D72EADA0C11EFBDDE128F762E951A.roa (raw, json)
Hash identifier: Df0DwNehIPIubB/2R1Vvlrpk5m+/eYxqioJhN9zsZ+g=
Subject key identifier: 8E:C9:4A:2A:56:BC:37:BC:20:DE:B5:9F:40:FC:8B:A4:BE:3A:20:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A63D72EADA0C11EFBDDE128F762E951A.roa
Signing time: Fri 24 Jan 2025 04:35:34 +0000
ROA not before: Fri 24 Jan 2025 04:35:30 +0000
ROA not after: Sat 01 Mar 2025 04:35:30 +0000
asID: 44559
IP address blocks: 154.81.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82890 (0x143ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:35:30 2025 GMT
Not After : Mar 1 04:35:30 2025 GMT
Subject: CN=67931896-df28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:42:70:45:00:58:b6:d7:14:dc:f7:19:a7:
85:8d:54:87:ab:f0:c9:a7:f7:40:a3:1b:29:20:48:
ac:7d:f8:e6:76:1e:48:58:57:fc:0e:45:49:bc:70:
7f:c5:89:ee:52:35:83:aa:be:30:70:1f:bf:ac:35:
ce:c5:e7:a7:38:89:d7:51:d3:08:6f:42:e4:da:55:
56:1e:77:fd:28:76:4d:03:2e:73:4f:2f:17:38:d1:
01:cd:11:26:1b:ff:d6:e9:87:1d:e5:2f:5f:5b:75:
1a:c4:7c:fa:88:84:6e:52:71:e4:6a:20:08:12:af:
2e:d1:45:12:5c:33:eb:9b:72:87:28:4a:98:4b:ec:
53:5c:f4:2d:6d:87:36:a0:d8:e7:86:db:94:13:d4:
45:ab:f3:d1:d8:29:19:1a:dd:5b:79:12:a4:31:5a:
e1:0b:90:ad:ce:33:49:0e:01:58:f6:8d:73:1e:9f:
b3:c3:1a:99:e3:46:96:50:10:80:af:c5:84:17:d5:
10:3f:c1:e8:60:d3:30:f5:84:5d:d9:d5:c0:7e:f6:
30:bc:07:62:17:cb:f6:63:49:d3:28:50:bc:b3:b0:
e7:51:14:3e:f1:28:06:ae:8e:3c:a2:10:19:8f:15:
f9:5b:5a:d5:96:b2:c5:a5:88:79:fc:b5:86:13:82:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:4A:2A:56:BC:37:BC:20:DE:B5:9F:40:FC:8B:A4:BE:3A:20:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A63D72EADA0C11EFBDDE128F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
42:77:d8:f2:57:88:b2:67:2c:a1:dc:a8:75:0c:08:ea:3b:45:
53:2d:8c:a4:72:33:5f:8c:cc:dc:9f:4c:65:48:2b:14:1e:6d:
08:de:62:7d:c4:f3:e4:49:0b:00:c7:79:09:d4:33:8f:c7:88:
ef:91:08:2b:84:30:f0:17:03:e6:40:02:00:ae:4e:8e:25:af:
9f:b5:b5:3a:83:c7:31:86:cc:c1:8a:d9:d9:b3:f5:e5:a5:30:
98:ab:83:e3:8e:63:8a:08:77:98:f8:02:1b:ab:a9:4f:0b:3c:
37:42:2f:d1:73:f3:b3:26:29:93:2e:f4:67:15:db:99:2d:46:
ee:b1:62:3c:30:ac:e4:4c:78:fe:d4:49:b5:88:f9:16:c2:bd:
2f:6b:ee:7e:12:01:bc:90:9e:c9:1d:08:b7:98:6b:c7:2c:c7:
75:8b:6a:b8:6d:ab:45:0a:3a:c1:bd:31:c9:37:db:04:51:79:
81:3d:ea:9d:68:ed:3c:b9:29:5e:65:c6:95:0a:e4:b6:1a:a9:
0a:10:1c:c1:31:ca:15:af:b6:f2:b1:eb:ff:21:61:60:4c:e7:
83:ed:7b:b3:e6:49:11:48:57:87:32:a4:1c:40:b0:ad:1f:24:
5b:68:d8:14:15:19:dd:28:17:55:fa:f7:22:76:5e:f1:34:93:
38:c8:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:32 2025 by rpki-client