Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01842DCDD6211EFB948F993762E951A.roa
File: B01842DCDD6211EFB948F993762E951A.roa (raw, json)
Hash identifier: tS2uI7phmWPOdtvHR9pl+O4UIlY1Arj/kSZH1UUyDxM=
Subject key identifier: 1C:55:56:EE:72:5D:CF:E8:F6:75:3D:34:66:30:ED:EC:E2:65:A3:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01842DCDD6211EFB948F993762E951A.roa
Signing time: Tue 28 Jan 2025 10:29:00 +0000
ROA not before: Tue 28 Jan 2025 10:28:57 +0000
ROA not after: Tue 11 Feb 2025 10:28:57 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85186 (0x14cc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:28:57 2025 GMT
Not After : Feb 11 10:28:57 2025 GMT
Subject: CN=6798b16c-467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:b2:17:50:f9:35:f8:f2:5f:f1:c2:89:94:
a1:fa:25:37:18:07:32:1f:f1:61:99:a2:d0:cc:86:
18:68:72:02:02:86:e3:bb:00:4f:21:3b:74:85:ee:
ca:3a:90:3d:d5:ad:bc:e4:6e:33:2f:8e:0a:8a:81:
93:30:40:4a:84:8a:32:71:70:8f:7c:2d:07:0d:40:
f3:89:cf:5c:77:eb:0a:97:d2:8e:b8:88:91:b1:ad:
7f:2d:1c:e0:aa:dd:65:da:88:4d:c2:a4:93:28:02:
65:19:83:36:02:78:85:6d:af:a4:85:f2:9c:ec:b8:
0b:3c:b9:fc:9b:ca:60:26:d3:b3:e1:18:34:9b:61:
f2:b7:59:b5:80:c0:c6:5f:1b:14:53:f9:9d:1e:b4:
3e:ec:67:7e:4b:1a:7f:7f:82:3f:fd:94:e0:06:b5:
66:02:3d:77:fe:f9:3d:4a:c0:d9:8e:2b:e4:91:0c:
a5:e7:94:d7:40:ec:18:ff:2d:81:ab:38:70:d4:d9:
c8:33:a4:3a:84:90:b8:a1:95:ce:e8:3d:27:f0:72:
81:f0:c0:95:d8:96:82:6f:81:d8:7b:87:95:4f:f0:
0b:ea:9f:21:14:cf:6c:fc:e3:a9:8b:d6:29:00:54:
c1:a4:6d:0b:ea:82:93:5d:9c:c3:6b:a8:43:9f:47:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:56:EE:72:5D:CF:E8:F6:75:3D:34:66:30:ED:EC:E2:65:A3:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01842DCDD6211EFB948F993762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3e:5a:41:a1:ae:49:3c:fd:93:f6:c1:af:60:71:eb:c4:d4:
42:f7:ba:10:c5:11:56:17:43:b9:d6:0a:16:28:8f:67:ae:cc:
b0:5e:03:14:99:4f:dc:ed:92:1a:5d:4b:fe:da:ab:bc:78:e0:
83:55:71:8a:84:4b:db:f3:17:0c:c7:9b:55:92:11:1e:77:e6:
9c:ba:c6:06:96:88:4c:c0:1d:78:68:5b:18:f2:66:55:21:bf:
a7:30:0f:06:a5:9e:1e:ce:b6:bd:97:08:28:22:4e:b1:8f:e6:
c2:72:7a:7c:cf:2d:c3:a5:b8:d1:e2:97:b2:33:ff:35:37:51:
53:b2:97:5d:4f:88:fd:8f:69:40:a7:c1:a1:e7:65:a7:37:e2:
a8:f8:59:f2:17:a5:1a:d6:3e:09:0c:1e:3d:69:68:56:3a:77:
a4:11:07:4e:7d:3c:99:59:9a:f0:a2:5c:e0:62:50:d5:a0:d8:
b4:5d:f0:b3:f3:b2:b6:3a:9b:ed:90:2d:17:64:52:8d:70:3a:
94:01:41:43:ef:49:5e:70:b6:10:d5:84:d8:d8:07:68:7e:79:
f4:88:ff:8b:0e:a7:ac:40:30:a8:df:d1:54:12:e4:2c:e1:7d:
f5:f0:c7:99:72:da:91:89:2d:77:38:f4:f3:eb:82:a7:05:9b:
32:46:53:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:12:59 2025 by rpki-client