Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA732F16DA0D11EFA6F94597762E951A.roa
File: AA732F16DA0D11EFA6F94597762E951A.roa (raw, json)
Hash identifier: u4i5jIDetmeigydLqaXRUukpsfxQQ1E9KC+XnryUc+o=
Subject key identifier: D7:C1:D3:EC:A9:71:D5:7A:C1:A7:14:0B:16:DE:72:A3:0D:AB:DB:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA732F16DA0D11EFA6F94597762E951A.roa
Signing time: Fri 24 Jan 2025 04:42:50 +0000
ROA not before: Fri 24 Jan 2025 04:42:46 +0000
ROA not after: Sat 01 Mar 2025 04:42:46 +0000
asID: 44559
IP address blocks: 154.81.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82892 (0x143cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:42:46 2025 GMT
Not After : Mar 1 04:42:46 2025 GMT
Subject: CN=67931a4a-d90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:bf:eb:69:30:2c:fd:ae:ca:cf:fa:ed:bd:
44:ec:b8:11:b2:9f:5c:df:06:7d:06:9a:4f:2c:3d:
29:f8:c2:31:4c:84:c2:bf:14:87:d3:4a:28:58:76:
68:97:a9:06:2e:a6:b0:a4:32:ad:d7:68:6e:17:27:
60:98:ee:a9:89:bc:9f:19:ce:18:a2:2f:c8:a4:26:
4b:95:b5:41:fa:16:87:21:b6:9a:78:17:7a:4b:fb:
34:32:7f:84:dc:0c:cf:0f:61:65:5e:ac:d4:94:3b:
9e:f1:35:41:d4:62:c0:ec:72:5f:63:42:5c:d4:58:
64:69:ee:23:38:a8:eb:2e:d3:31:3f:7b:57:cd:dc:
b0:20:24:41:c6:a9:c4:54:61:d8:61:ce:31:9f:71:
30:39:2e:01:ac:c7:38:3b:df:4b:b5:77:b0:6d:96:
24:2b:12:83:97:f4:ae:45:a6:08:4b:23:ef:ed:ab:
e1:3f:cf:fd:35:43:3f:b5:1e:e3:bc:77:07:a4:2c:
3e:95:19:89:e8:09:72:d0:a5:92:b6:dc:1b:9d:3f:
ef:77:93:dc:11:d3:fd:97:d0:e5:2b:db:8b:6f:f8:
90:75:7c:eb:c2:b1:df:4f:f2:79:e2:ad:a9:9d:4d:
61:b0:b3:ee:ac:e5:91:9f:9d:ad:37:71:ae:1e:6a:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:D3:EC:A9:71:D5:7A:C1:A7:14:0B:16:DE:72:A3:0D:AB:DB:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA732F16DA0D11EFA6F94597762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.45.0/24
Signature Algorithm: sha256WithRSAEncryption
55:92:5b:13:43:94:e1:4c:11:82:93:46:49:9f:9a:21:64:d6:
27:36:8a:ba:fd:b5:4c:7e:c3:8b:58:80:0b:52:a8:63:48:f8:
04:47:a6:a4:37:5e:7e:2e:ab:e7:fd:21:59:35:9d:5b:74:9d:
37:4d:82:ea:79:84:f5:2a:13:59:f3:80:45:7c:15:da:65:77:
7f:0a:f3:d3:dc:02:28:47:8e:e0:d9:a5:63:3b:32:1f:4e:91:
cf:d0:8b:d0:d3:02:a8:c9:24:a2:46:a7:60:b4:29:3e:08:9e:
6e:bf:87:c0:e3:26:c6:76:76:e2:75:b7:48:35:8b:56:84:a7:
73:6e:28:c9:23:ff:ee:de:be:28:b7:b4:2d:30:44:ce:d6:9f:
dc:bf:9d:76:8f:8e:54:43:67:e9:fe:3f:16:92:fb:d4:61:56:
b4:19:85:99:13:38:cc:40:91:df:e4:c3:db:4c:97:c2:1a:32:
71:9c:03:56:73:db:f2:69:9b:78:88:86:eb:ce:37:f9:fa:e2:
57:5a:48:61:2f:e1:c7:34:dc:97:73:59:fb:0c:e4:ca:d3:fa:
56:f9:6c:d2:61:3a:90:07:1e:d5:d9:4d:47:75:7c:eb:8d:ef:
75:46:91:09:a5:24:00:f2:58:a9:a1:c0:fb:1b:f6:cf:de:27:
92:80:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:05:10 2025 by rpki-client