Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F61ACEDA5D11EF9E1820B1762E951A.roa
File: C9F61ACEDA5D11EF9E1820B1762E951A.roa (raw, json)
Hash identifier: zoAbMSgkzT8pJZpQr6HiYH8ONkXmntZGNnLHSns4MtA=
Subject key identifier: 9D:D8:B5:33:FB:53:68:91:D8:D8:B7:3A:8A:FD:FC:68:92:9C:B9:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014804
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F61ACEDA5D11EF9E1820B1762E951A.roa
Signing time: Fri 24 Jan 2025 14:16:23 +0000
ROA not before: Fri 24 Jan 2025 14:16:19 +0000
ROA not after: Sat 01 Mar 2025 14:16:19 +0000
asID: 44559
IP address blocks: 154.81.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83972 (0x14804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:16:19 2025 GMT
Not After : Mar 1 14:16:19 2025 GMT
Subject: CN=6793a0b7-7414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:47:3e:42:2e:9d:b1:91:ad:b9:6c:a8:5c:
e7:20:b9:d2:03:8a:df:d7:97:f7:0b:cc:11:e5:b4:
c2:96:3a:64:05:19:20:94:1f:27:7a:1c:a0:dc:a9:
f6:23:65:ef:16:ef:73:11:fd:82:55:b7:42:3e:b3:
fd:f4:8c:7d:ec:a7:e9:3b:4b:dd:6a:8e:ad:af:88:
e2:bd:f2:58:c6:34:77:6c:60:9e:db:5d:ae:0c:5d:
75:9f:6a:1a:4c:36:f8:50:1c:bf:61:9d:f2:4d:02:
14:06:e1:91:b6:ec:bd:3b:13:e8:86:b9:a0:70:f4:
75:a2:51:0e:55:18:84:35:e3:01:7f:86:83:25:ce:
5a:c7:0e:3f:10:31:9e:27:ad:ca:07:42:5e:10:2b:
87:34:49:7f:0d:fa:a4:5c:6e:d1:c1:19:e7:dd:5f:
2a:97:ca:af:56:ff:83:1f:8a:57:95:f4:76:4d:7e:
c8:a8:b7:f1:cd:79:37:ef:1a:ee:e6:2a:57:35:e7:
b2:d2:fb:0d:b4:09:ff:8f:3e:ba:50:7e:c5:2a:90:
c9:92:1d:93:be:c6:29:8a:a1:da:04:17:32:7b:bf:
ba:e0:83:84:d8:ea:0d:c7:96:67:b9:02:1b:db:07:
c5:e9:e9:79:f4:f2:19:26:25:73:dd:77:42:b9:5b:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:B5:33:FB:53:68:91:D8:D8:B7:3A:8A:FD:FC:68:92:9C:B9:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9F61ACEDA5D11EF9E1820B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.42.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:55:30:4a:bf:6a:ff:6b:08:40:0c:df:20:5f:2e:6c:6d:fd:
e6:74:d7:65:a8:84:ae:9b:fd:dd:c8:76:d0:59:57:3e:d0:d2:
fd:f4:c5:8d:02:26:e2:4e:dd:1d:75:3d:d4:4b:3b:ed:06:13:
79:c8:0d:f5:6e:cc:bc:77:6e:d2:bd:a7:ad:9d:9d:b6:b7:08:
7b:73:58:cf:64:d9:ab:33:78:5b:1e:db:aa:8f:6c:cd:b5:d2:
51:d7:b9:b8:01:66:06:12:89:a7:d9:71:c8:db:cc:9a:1f:a7:
4c:7a:b2:9c:51:93:bd:2c:cc:16:c4:ce:f7:da:3a:d6:3d:d4:
f5:ec:a0:b1:d8:71:0f:ef:82:8d:c6:2c:9b:a2:e6:70:d7:d0:
7d:1c:e9:ad:5f:5c:35:c4:3d:96:22:eb:bf:07:ea:f8:88:64:
dd:6e:4b:12:a5:fe:08:0d:67:31:c2:14:00:4a:21:87:81:96:
d1:6e:a7:8f:2e:78:a9:7d:df:0f:32:29:e7:3f:63:1c:00:54:
8c:f3:de:87:f2:79:73:3c:67:86:53:72:d7:50:6e:de:bc:7c:
7a:10:4a:3e:3e:b3:ca:43:3a:9d:d0:3c:51:f2:07:c2:2b:14:
99:33:f5:04:30:88:68:73:af:06:0c:f0:79:46:ba:44:7e:37:
f4:b7:1d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:10:37 2025 by rpki-client