Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF9DB51CDA1211EF88FA61B7762E951A.roa
File: DF9DB51CDA1211EF88FA61B7762E951A.roa (raw, json)
Hash identifier: /OUhr9gbNAFRJ8pZgLZ4zYdtA1KWT/yBiPbG8yCOgDk=
Subject key identifier: 2C:88:0C:31:A6:FE:B0:13:9D:FA:12:D0:2B:39:8B:DE:D1:5A:2B:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF9DB51CDA1211EF88FA61B7762E951A.roa
Signing time: Fri 24 Jan 2025 05:20:07 +0000
ROA not before: Fri 24 Jan 2025 05:20:02 +0000
ROA not after: Sat 01 Mar 2025 05:20:02 +0000
asID: 44559
IP address blocks: 154.81.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82894 (0x143ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 05:20:02 2025 GMT
Not After : Mar 1 05:20:02 2025 GMT
Subject: CN=67932307-dcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:b5:e1:d3:8e:e9:9f:87:cc:59:6d:38:3f:
31:c4:b4:d2:0d:8f:2c:4b:d4:cb:5f:bf:f0:4f:51:
c2:9f:4e:d6:c3:58:64:51:f9:91:0f:fc:e8:3f:37:
0c:0a:6f:2b:e4:7a:06:d0:ab:25:0b:4b:f0:6d:c1:
16:99:4d:88:ca:bf:d1:2b:38:15:20:7b:de:b0:b1:
32:4b:23:5a:2d:6f:3d:0d:6d:2b:5e:76:02:9c:27:
b2:4a:e7:03:e4:c5:6f:99:51:2e:20:63:8c:29:e9:
fd:ce:70:68:35:ed:86:80:e7:3f:f0:24:b5:01:3a:
bc:e9:5c:1d:63:a6:e6:8b:73:f9:87:bc:6d:ea:57:
86:be:07:ef:7b:cf:ce:04:a8:62:34:c3:5a:c0:9e:
bc:cc:89:a8:5d:e5:d0:5a:07:da:d4:69:f4:55:81:
f6:2c:56:4a:b2:a4:3b:62:c1:25:c2:11:bc:9c:94:
6c:15:7b:30:b8:a7:b5:d7:3a:31:ca:ba:9e:ff:51:
84:fd:3c:15:57:6d:51:7f:2b:eb:1e:36:26:00:bc:
c2:df:f0:cc:86:02:ec:7d:3f:c2:1c:65:e3:7e:86:
f4:a0:7c:bf:d8:0a:bb:58:e2:00:2a:24:be:36:f2:
05:00:52:f2:0e:dc:b6:aa:7f:c6:b5:2f:7c:b3:68:
e5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:88:0C:31:A6:FE:B0:13:9D:FA:12:D0:2B:39:8B:DE:D1:5A:2B:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF9DB51CDA1211EF88FA61B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.46.0/24
Signature Algorithm: sha256WithRSAEncryption
93:39:e9:61:b2:e8:af:8b:8e:a1:8e:84:8a:5d:c6:28:a1:ee:
3e:ae:5e:75:95:bd:37:3f:af:f8:b3:bf:b8:47:ab:a7:ed:92:
7f:9e:9d:52:5c:77:01:47:04:d4:0d:e4:88:a0:49:96:cb:32:
76:a1:54:0a:f2:4c:01:5e:c8:6c:a9:29:73:8f:97:eb:94:25:
2b:57:52:48:a4:12:33:7d:42:80:8c:7a:c1:f7:0a:70:16:c8:
13:ee:3d:00:b2:c2:a2:29:56:b0:5b:53:b2:ea:8d:5a:2a:4f:
1a:68:fc:ab:cb:3c:64:e3:66:46:79:47:9e:8f:ca:ba:48:04:
74:5e:9f:d1:8e:2d:6f:59:a4:81:0c:42:5e:c4:59:be:e4:b3:
9b:50:06:5b:22:7e:6c:0f:de:49:b4:f3:8c:b9:7d:92:f8:bf:
c3:32:74:3f:5c:2d:48:c1:fb:81:47:13:a3:39:d1:c1:c8:d6:
47:44:69:4b:5c:00:de:95:74:e2:61:d6:fa:ce:b1:6e:3d:f4:
25:c8:72:8d:9c:4a:66:5d:fe:53:2c:96:f7:7a:37:53:36:97:
71:2a:69:93:9b:ba:82:73:d6:cc:a1:f2:64:e1:76:7b:e9:24:
59:55:5d:ff:17:8f:f4:3f:c8:95:04:b2:00:73:94:ed:56:79:
9f:0a:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:53 2025 by rpki-client