Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2290AAADA0611EFB0D57A6A762E951A.roa
File: D2290AAADA0611EFB0D57A6A762E951A.roa (raw, json)
Hash identifier: kisRmTB698EOhXBTMo7ZxB2g6CMBUV1tKwOwWPQP72o=
Subject key identifier: 3E:46:73:05:A7:2B:9C:9D:0F:B4:A7:5E:F3:88:5A:37:A5:8D:6F:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2290AAADA0611EFB0D57A6A762E951A.roa
Signing time: Fri 24 Jan 2025 03:53:50 +0000
ROA not before: Fri 24 Jan 2025 03:53:46 +0000
ROA not after: Sat 01 Mar 2025 03:53:46 +0000
asID: 44559
IP address blocks: 154.81.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82858 (0x143aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 03:53:46 2025 GMT
Not After : Mar 1 03:53:46 2025 GMT
Subject: CN=67930ece-5356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:e4:34:81:38:78:5b:eb:f9:47:8c:d7:f3:
b2:33:c8:61:af:29:5f:b2:3a:39:94:a5:f0:6c:0e:
3f:f1:36:05:6b:65:56:e2:a0:93:9d:4c:7c:c6:8b:
95:33:13:2b:7a:75:f9:d5:33:07:73:ce:2b:cf:6d:
f2:b0:f4:a2:66:fd:1c:e0:06:e1:75:f5:58:79:fc:
2e:ab:24:9c:4d:7e:fb:d7:da:03:91:c9:54:1f:71:
e9:45:4a:cb:0d:e2:d1:36:36:80:50:4e:2d:87:4c:
bb:6f:0b:da:4f:29:c2:75:f7:d8:4c:74:02:fe:6c:
ec:9c:af:b9:d6:df:17:ea:98:00:3b:21:f8:d9:50:
64:cc:87:47:5a:42:20:32:4f:81:8e:e0:a3:91:ba:
da:76:3b:11:23:7b:a4:26:41:23:02:88:e3:93:93:
3b:51:5e:f2:fc:fa:4c:6d:07:22:24:26:76:5a:97:
ba:01:c9:2a:93:68:ac:c8:9f:93:b0:6b:e1:a8:c0:
62:16:3d:ee:46:61:25:dc:31:17:14:4b:b4:70:ae:
b5:c4:57:ac:14:c4:98:ec:2f:4c:b6:57:f4:76:4b:
bd:2b:19:09:cf:3e:38:31:72:36:a6:8a:06:7d:d3:
6c:a5:a8:ea:3e:56:5e:f0:2f:e9:84:3f:c6:a2:83:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:46:73:05:A7:2B:9C:9D:0F:B4:A7:5E:F3:88:5A:37:A5:8D:6F:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2290AAADA0611EFB0D57A6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.192.0/24
Signature Algorithm: sha256WithRSAEncryption
92:33:6c:2e:47:ab:25:69:03:11:b9:f3:59:86:13:ec:f5:b5:
54:0f:98:de:e0:34:7e:1f:16:75:ff:1e:23:49:9b:57:21:c1:
dd:36:88:1a:04:29:67:ae:6a:d4:ed:12:76:e8:1c:a8:26:2f:
b0:ae:e6:ad:64:bc:ec:ff:6f:c8:f9:23:04:60:1a:31:8b:30:
10:67:52:45:88:e6:e6:8f:f5:bc:4d:ef:86:07:4a:1c:5f:69:
38:93:81:9f:1f:51:e7:0c:ce:7e:75:b5:1c:b9:f0:e2:9e:86:
48:66:d6:25:1c:48:c5:19:5b:7b:10:f0:13:46:9c:16:ef:cb:
60:69:24:b8:74:b0:03:4e:55:b9:b3:e8:5d:ed:40:95:eb:22:
fa:36:b3:25:41:42:b5:fb:ea:6e:57:2b:df:f8:57:5f:1c:8e:
bd:5d:6d:72:49:3c:29:78:7f:46:06:2c:fc:53:a3:18:1f:b3:
b6:ca:e2:a7:c6:5b:08:f7:0a:68:34:b8:d1:b4:90:90:11:db:
25:1d:d7:73:3c:09:0c:0d:64:e9:df:d3:be:8e:6b:0c:78:1b:
ea:2b:ed:34:f6:3d:83:86:60:6f:43:14:0a:b8:8e:46:af:87:
24:5e:61:9c:00:26:72:f0:96:b1:dc:85:65:43:54:87:72:66:
0d:77:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:13 2025 by rpki-client