Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD7381A8DA4311EFA8A70780762E951A.roa
File: AD7381A8DA4311EFA8A70780762E951A.roa (raw, json)
Hash identifier: 4+MhaSHdgDwp0phabU+s71U2NgiIxJ/DfvFAZu3dtgQ=
Subject key identifier: 5A:E0:9F:80:18:D8:93:06:AC:1F:75:DE:48:A0:6A:72:8D:26:55:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD7381A8DA4311EFA8A70780762E951A.roa
Signing time: Fri 24 Jan 2025 11:09:28 +0000
ROA not before: Fri 24 Jan 2025 11:09:24 +0000
ROA not after: Wed 05 Mar 2025 11:09:24 +0000
asID: 48031
IP address blocks: 154.215.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83436 (0x145ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:09:24 2025 GMT
Not After : Mar 5 11:09:24 2025 GMT
Subject: CN=679374e8-5204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:af:47:69:58:f1:a6:aa:cb:4e:cf:e2:70:
eb:02:88:78:d3:8b:12:77:e8:da:92:b3:4b:a6:50:
83:27:0a:17:b3:85:b0:46:53:98:22:3e:61:cf:42:
8e:9d:0e:d5:a1:13:e9:87:45:6a:77:58:7b:95:ab:
2d:28:17:a7:2b:a2:fb:db:63:8c:5f:f8:c9:fd:e6:
68:b8:eb:27:91:06:d0:26:88:86:f0:2e:76:fa:97:
b3:e6:39:6e:4f:8b:e6:fa:40:ce:c8:d7:fa:38:8a:
e0:51:a3:86:a6:a7:ff:6c:6b:b0:65:58:ac:f6:20:
f8:2e:58:6f:9f:81:33:db:1e:09:bc:29:37:7a:07:
72:f9:0e:93:42:41:49:70:5d:8d:7d:b7:22:41:03:
24:7a:06:8e:b5:b1:ee:53:fe:06:9d:1f:4e:00:47:
a8:00:af:75:7a:4d:58:21:00:80:af:25:cc:0c:ce:
4f:29:d4:c3:d3:25:16:0d:1f:e7:a1:ce:f3:bf:cf:
a6:b6:28:98:8f:95:5c:7d:f9:27:1e:21:4f:e3:d6:
2b:31:fb:49:6b:7f:bf:06:f9:7a:dd:f6:76:38:75:
4c:c1:02:be:47:d4:42:fa:7a:6f:5d:1a:b6:c3:c9:
36:44:19:a9:03:4a:70:e4:69:51:72:23:cc:1b:5c:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:9F:80:18:D8:93:06:AC:1F:75:DE:48:A0:6A:72:8D:26:55:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD7381A8DA4311EFA8A70780762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:37:2c:44:fa:62:52:ff:1a:4e:b2:50:e0:58:c9:cb:a5:4c:
e0:a6:06:d4:89:53:ee:cf:5f:9e:2f:c6:af:80:bf:2c:1d:05:
b7:2a:d7:51:43:cd:6a:a6:80:ed:c4:88:f4:f4:03:cc:4e:dc:
95:81:d8:9b:d7:93:ea:34:23:11:a3:88:4b:df:f9:35:e4:3f:
07:ad:a2:76:34:ae:69:a5:67:90:10:63:4f:83:a9:eb:35:29:
76:18:f9:ed:7f:77:56:8f:e2:94:24:99:64:29:2e:6f:49:24:
39:da:bf:ba:88:27:a8:1a:66:af:f2:41:76:44:98:68:44:e2:
51:b3:68:1d:2d:3a:de:aa:4f:d2:ba:70:cd:9c:3f:bf:89:9a:
2a:fa:ce:06:a6:27:a9:50:3e:9e:49:7e:28:c6:02:41:30:fe:
bc:68:62:c4:ed:fa:b5:97:48:87:e3:44:14:8b:0d:1c:05:c8:
9f:82:d7:42:bf:61:92:96:78:8b:22:07:d7:6b:14:bd:c8:ef:
52:b1:7b:30:42:b4:34:71:f2:8a:57:1d:b1:a4:6f:00:1a:55:
83:c9:1b:f3:9e:63:5d:0a:b8:e5:1b:6b:20:f7:9b:6a:55:bc:
dc:fa:60:9a:a1:b8:6e:a9:02:cc:ab:1d:09:5c:b6:a6:ad:d4:
b9:f4:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:51:36 2025 by rpki-client