Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEA099ADA0B11EF8DB41C8A762E951A.roa
File: BDEA099ADA0B11EF8DB41C8A762E951A.roa (raw, json)
Hash identifier: j3m2+72mG5pfxAMBaz1JiU66rK9Ej5J4f/ocGsqfIQs=
Subject key identifier: E9:5D:34:57:9C:7D:14:55:0A:A3:F7:66:E9:4A:5E:3B:65:E0:05:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEA099ADA0B11EF8DB41C8A762E951A.roa
Signing time: Fri 24 Jan 2025 04:29:04 +0000
ROA not before: Fri 24 Jan 2025 04:29:00 +0000
ROA not after: Sat 01 Mar 2025 04:29:00 +0000
asID: 44559
IP address blocks: 154.81.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82886 (0x143c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:29:00 2025 GMT
Not After : Mar 1 04:29:00 2025 GMT
Subject: CN=67931710-4c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:c9:92:b6:89:7f:d6:45:36:97:15:1e:62:
e6:84:e1:30:9f:f2:e2:54:df:bf:e6:74:81:c6:f8:
7a:ef:5f:5e:a4:64:6d:07:ac:c7:a4:9d:95:e8:3a:
87:6c:78:ce:67:ea:01:4c:f4:b6:88:4a:15:51:62:
cc:e3:c3:f7:3b:15:e8:60:62:40:f3:64:4b:e3:c9:
7c:d8:46:09:aa:45:63:46:5d:f6:9a:66:bb:11:91:
cf:a8:a9:11:a3:f4:e3:9c:f1:73:c8:0c:4d:70:ad:
50:89:35:08:dd:3d:29:06:c4:7e:83:08:7f:0c:68:
34:4c:e1:f6:39:9c:a9:d0:95:f0:c1:78:33:ab:e2:
69:1e:bf:d3:f5:6a:08:96:02:d3:07:9f:fe:a9:f0:
66:e9:d6:e9:63:d3:d5:93:a8:a1:b6:ac:19:83:6f:
7c:49:e1:32:28:71:0d:bd:12:ce:ab:9c:a3:bf:f4:
70:58:7e:58:2a:90:bb:30:95:64:47:95:96:c5:84:
7e:d1:4d:87:bd:82:83:72:28:b0:c1:c4:26:40:dc:
4b:62:c3:06:fd:08:aa:f5:e0:4b:b8:22:79:df:73:
9f:98:7f:58:fd:e0:6e:25:e7:c7:49:f7:8e:48:bd:
05:d8:ae:b7:28:79:f8:01:18:0c:52:e6:1b:a9:e8:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5D:34:57:9C:7D:14:55:0A:A3:F7:66:E9:4A:5E:3B:65:E0:05:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDEA099ADA0B11EF8DB41C8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.42.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:22:48:67:cc:f0:a2:72:02:e6:b6:64:5f:fc:6a:8d:af:62:
ff:50:4c:f4:c1:05:35:bf:a0:8b:e7:e9:a4:31:13:08:64:00:
3e:78:eb:0a:31:55:9a:bc:f1:05:6c:74:55:4f:da:d1:d4:7b:
b4:28:0b:7d:96:8c:60:ef:ab:3d:85:d9:d8:a3:87:ee:ef:5d:
8c:8a:d4:e9:73:e3:c3:a2:e6:60:33:e0:d9:02:f9:ec:95:d8:
7b:a1:f5:57:61:16:9c:ab:e3:3c:1b:e0:05:e4:18:bf:34:c5:
db:00:1e:a1:6e:4b:83:07:b8:ac:4f:ad:68:5c:6e:c2:15:cd:
99:df:0b:21:06:4e:c5:53:6a:96:de:0b:45:4f:7b:ae:cb:53:
9c:69:e3:2e:e3:85:c5:b9:88:21:7a:b9:d0:67:2e:ac:e8:21:
80:79:21:7d:98:16:af:a8:85:cf:54:4a:ac:02:39:20:a1:69:
98:24:98:d2:3d:30:42:59:64:69:5e:c0:2c:61:f2:9d:7b:9e:
35:33:11:0e:2c:6b:2c:43:17:da:f3:92:cf:fe:e8:f8:58:58:
a4:16:88:17:ce:d2:be:2d:53:14:9f:d9:73:45:bd:82:24:bd:
cb:83:82:9f:22:28:3c:f2:9a:1d:a4:2f:c7:84:cf:b5:15:89:
99:9d:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:31 2025 by rpki-client