Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B618F322DA5E11EFAB2CB5B7762E951A.roa
File: B618F322DA5E11EFAB2CB5B7762E951A.roa (raw, json)
Hash identifier: rPI/pRy+fyi7ZobcU5xNGjltu1CzDxdn/fIKl/ZZ2nI=
Subject key identifier: 2D:0C:35:BA:F8:5E:B5:6D:9D:04:EF:02:40:57:72:E5:CA:5E:24:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014817
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B618F322DA5E11EFAB2CB5B7762E951A.roa
Signing time: Fri 24 Jan 2025 14:22:59 +0000
ROA not before: Fri 24 Jan 2025 14:22:55 +0000
ROA not after: Sat 01 Mar 2025 14:22:55 +0000
asID: 44559
IP address blocks: 154.81.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83991 (0x14817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:22:55 2025 GMT
Not After : Mar 1 14:22:55 2025 GMT
Subject: CN=6793a243-22ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:28:52:cd:00:6f:a9:2f:4b:0d:7e:dd:90:
97:29:53:97:e9:10:a4:3c:30:99:72:fd:c5:37:50:
e8:9f:54:fc:21:4d:fe:bf:22:a9:7c:6c:12:9d:cd:
41:fe:e3:6d:17:83:e7:da:8e:52:60:07:d1:5c:21:
52:f9:e6:c0:ca:d0:b8:f4:f8:22:52:7e:65:2b:8c:
f3:f4:c0:31:dc:4a:09:d8:eb:69:90:aa:80:83:bc:
2b:bc:aa:88:b9:02:1b:a8:8c:22:ef:60:f3:81:af:
cc:b0:64:eb:64:62:b4:a9:e2:b6:ca:eb:17:da:a0:
75:55:6a:61:c5:60:4f:2a:e7:39:d2:16:c0:f9:af:
36:ce:69:23:b1:14:a8:33:c9:5b:05:0b:76:9a:f6:
98:f5:c4:72:65:99:41:75:09:4d:7f:fc:49:fb:a4:
46:62:ac:57:2f:dc:25:fa:c7:f0:58:56:44:42:53:
6a:81:ae:d6:0e:05:3c:7c:a5:f5:42:fc:1f:e5:a0:
62:cb:77:c3:1f:98:bb:63:75:93:6f:14:63:00:06:
19:54:34:07:53:25:27:27:da:cc:ff:01:48:9f:b6:
c5:07:0b:1c:84:6d:6f:39:c5:ff:0b:67:10:d4:d3:
47:91:eb:6a:37:11:45:36:aa:0c:f9:c8:2e:cd:31:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:35:BA:F8:5E:B5:6D:9D:04:EF:02:40:57:72:E5:CA:5E:24:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B618F322DA5E11EFAB2CB5B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.45.0/24
Signature Algorithm: sha256WithRSAEncryption
69:12:71:72:aa:94:a9:77:19:96:93:a6:5c:c5:df:a8:77:3b:
1c:9b:02:f0:ea:57:dc:f5:c9:9a:44:0e:a4:1b:51:73:0c:e5:
41:23:80:a5:61:2f:09:e8:44:22:3f:58:8a:34:7c:f5:e6:4d:
58:46:0e:70:d3:38:cd:13:be:da:b7:bc:b8:9a:9b:a4:59:fa:
f9:5a:84:a7:50:3f:75:5c:bf:60:3c:0b:1c:fa:d3:2d:1e:f6:
40:60:4e:f0:9e:5c:81:33:98:c9:f3:a7:b4:d4:fc:18:af:a2:
ca:4f:2b:b3:71:b6:c6:ea:80:38:62:35:e8:38:78:c7:13:36:
6d:c3:28:65:d8:55:2a:23:5b:3a:68:37:c7:51:b5:57:cd:1d:
ef:32:ea:63:72:cd:2c:2d:6f:92:72:d6:33:ed:d7:85:92:b3:
71:9a:86:b9:4f:6d:71:b1:bd:e0:b5:13:c2:7e:88:54:3a:90:
37:e7:a0:ee:ee:80:6a:9c:19:84:24:9e:5f:02:de:91:d0:1a:
84:8b:cd:53:45:58:9e:be:65:2f:07:8a:fe:87:cf:fe:02:53:
82:d7:11:9d:8f:e2:03:5d:90:23:3c:39:a8:f6:b2:65:78:67:
20:fb:ed:00:a8:69:09:b9:db:d1:9f:96:d6:48:a9:a6:6c:80:
a4:a2:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:30:41 2025 by rpki-client