Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44B2BD8DCC211EFB3748158762E951A.roa
File: D44B2BD8DCC211EFB3748158762E951A.roa (raw, json)
Hash identifier: q5vSW7WHmUO9p07ppuxfFIYURibxS+3duwyqeSjX4uY=
Subject key identifier: 49:A2:F7:DD:A0:6F:51:3E:20:27:F8:48:B3:10:0C:73:A4:E6:DA:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44B2BD8DCC211EFB3748158762E951A.roa
Signing time: Mon 27 Jan 2025 15:24:41 +0000
ROA not before: Mon 27 Jan 2025 15:24:38 +0000
ROA not after: Sun 09 Feb 2025 15:24:38 +0000
asID: 5065
IP address blocks: 154.86.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85055 (0x14c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:24:38 2025 GMT
Not After : Feb 9 15:24:38 2025 GMT
Subject: CN=6797a539-1a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:19:03:71:1c:e0:01:ad:b8:24:bc:ba:f6:
48:e7:68:28:ae:b0:5f:2c:f7:e4:ff:58:22:91:d3:
db:1c:d0:12:46:2f:8a:e5:f7:48:f2:e7:63:99:0a:
52:f0:44:24:ef:42:bb:48:93:a5:9f:1c:cf:66:e9:
5a:ce:bc:53:01:1e:2d:23:a5:c4:af:12:23:0f:1c:
af:7f:c5:ef:09:68:2f:f1:94:22:d8:61:d1:95:07:
1e:ef:10:fa:50:2f:6b:97:62:97:bd:f9:e5:ef:3e:
c0:48:21:03:e0:38:67:eb:84:31:44:1a:ce:08:14:
59:65:18:28:e7:a8:d9:05:0e:f4:b7:76:76:21:b2:
36:6e:bb:84:00:e0:6c:d1:5e:a8:89:a0:1f:95:2b:
a9:db:ca:8e:8f:f9:6f:6f:9b:e9:4b:49:92:36:ce:
e1:f4:f8:bf:22:c4:83:8f:4b:45:77:2b:6c:30:35:
f4:23:4c:73:c0:ff:58:c4:10:7c:ed:f4:c7:a7:39:
85:c6:9f:10:af:8d:6b:bd:b4:e6:22:5b:1b:dd:af:
61:97:e7:24:33:e6:4e:f8:af:8f:3d:64:00:26:ef:
86:44:22:a5:e5:dc:f8:66:ef:82:c4:9b:68:c2:d8:
4e:6f:bb:13:ee:46:9b:fd:5d:93:fe:5a:7a:83:0e:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A2:F7:DD:A0:6F:51:3E:20:27:F8:48:B3:10:0C:73:A4:E6:DA:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D44B2BD8DCC211EFB3748158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:fa:2b:19:66:6f:f8:85:1b:fa:f3:29:3d:8e:74:78:9c:4b:
cf:b2:81:0b:f7:5d:94:a8:bb:6f:f1:75:e5:ae:3e:a7:ae:88:
aa:5e:4e:14:da:41:8d:eb:5e:f6:5f:53:9c:c4:4c:16:fc:3f:
85:49:0e:5a:d3:82:10:84:ae:90:ce:c8:26:aa:53:6e:51:39:
55:18:d9:d4:2f:2f:a7:12:e9:df:50:73:94:cd:1c:ce:cc:5a:
ea:93:3c:3c:8f:dd:f0:b9:73:c6:b1:f9:58:23:72:6b:cd:46:
f5:c1:93:c4:0b:a6:ff:89:09:09:73:02:6e:e0:82:da:e5:1e:
b4:5c:7f:2b:fb:e2:1e:a1:c6:5d:5e:d8:f3:95:0b:aa:4d:67:
d3:5b:db:51:30:36:31:f2:d6:6d:d0:c8:e2:b8:a8:7f:a5:6d:
88:c6:96:6d:47:99:6e:00:47:be:15:fa:07:9f:cc:35:fa:76:
e4:d4:fd:98:83:ec:e2:5b:53:1d:68:09:50:a1:29:84:7f:8f:
81:91:68:17:57:7f:79:7a:30:76:c4:b6:7a:2c:aa:77:20:d1:
1b:6f:e9:15:e9:0e:ce:fc:3e:94:ff:11:b8:13:e7:7d:c9:6a:
e9:9f:ff:19:f4:b9:07:e1:96:0a:a0:00:f4:77:ed:19:4f:70:
be:23:dc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:00 2025 by rpki-client