Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E11A5478DA0711EFA4DB6671762E951A.roa
File: E11A5478DA0711EFA4DB6671762E951A.roa (raw, json)
Hash identifier: j/OCIPMQ15OUR+VqNQLN8mgPndOKili3iR6DdGLCHV4=
Subject key identifier: B0:74:B8:AB:EE:CB:5F:5E:38:DA:37:9E:F5:12:0E:D8:13:C1:0F:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E11A5478DA0711EFA4DB6671762E951A.roa
Signing time: Fri 24 Jan 2025 04:01:25 +0000
ROA not before: Fri 24 Jan 2025 04:01:21 +0000
ROA not after: Sat 01 Mar 2025 04:01:21 +0000
asID: 44559
IP address blocks: 154.81.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82864 (0x143b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 04:01:21 2025 GMT
Not After : Mar 1 04:01:21 2025 GMT
Subject: CN=67931095-63ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:b4:fa:e1:f8:15:d6:f8:70:42:f3:d3:59:
59:77:e1:e1:2b:fa:45:d5:ab:cc:d2:f3:c9:c4:03:
8a:63:bf:a1:08:38:3d:61:fd:3c:6a:f3:62:b0:86:
54:fd:9e:fd:e4:7c:2c:93:0e:b1:ed:74:a6:3b:6f:
b8:c3:c0:b9:0d:97:24:65:85:25:3a:c5:3c:db:91:
6c:70:16:e4:e2:5e:56:9f:4f:67:32:69:78:8c:f6:
5a:36:92:07:50:83:e6:df:25:ee:34:33:5a:bb:43:
e6:d8:e3:b5:d2:e7:d4:50:23:4c:98:66:65:d5:36:
64:c3:eb:47:8b:cc:5a:f6:32:36:4a:a6:ab:4e:99:
0f:06:52:02:81:e9:ee:1a:d1:ad:2d:71:3c:98:41:
5c:6a:13:db:d0:8d:76:ff:59:b5:11:0f:23:71:31:
fd:f7:01:7a:f4:3d:c6:7e:e3:69:8a:59:fe:95:79:
cc:dd:2d:19:0a:ea:2a:8c:40:86:79:a6:aa:6b:ad:
76:6f:9a:36:8c:38:81:96:d2:67:e0:c6:fd:8d:61:
21:80:7e:40:0d:4d:4a:56:1b:04:66:36:bf:5d:5b:
ba:59:31:d5:ab:73:e0:30:65:3a:10:f0:46:41:94:
72:1b:a9:d1:15:36:21:bf:92:dc:50:69:03:03:83:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:74:B8:AB:EE:CB:5F:5E:38:DA:37:9E:F5:12:0E:D8:13:C1:0F:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E11A5478DA0711EFA4DB6671762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.195.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2f:91:ec:1d:40:1b:a6:e8:48:e6:a1:2a:ec:8a:14:8e:47:
dd:b6:ad:75:ae:2f:4b:ca:a9:88:1a:6d:12:0f:12:90:8b:9f:
4e:06:da:6b:bd:54:c7:b2:1f:ac:42:47:c2:fb:79:92:7e:07:
e6:f5:56:fa:c1:74:d8:53:3a:7b:c6:08:8d:50:ab:46:a0:89:
b0:ad:bb:ed:11:0f:3b:56:e7:be:e9:b2:ac:fb:4e:59:55:a4:
e5:2e:df:eb:df:b9:23:11:5d:e0:cf:f5:8d:12:9a:31:8b:92:
27:ef:8d:66:12:7f:3d:a2:0e:f3:b5:39:df:78:74:c7:f1:15:
d4:3e:21:ea:b8:ed:48:5a:dc:79:d4:50:36:56:2e:58:9b:81:
cb:5c:93:cf:1d:26:63:32:6c:4a:ce:92:28:db:bb:34:3f:ca:
6a:d2:aa:92:8c:0a:0b:c7:af:4b:cb:53:c0:82:f8:a1:a0:1a:
24:63:9a:9e:d6:6c:f7:04:50:d1:2e:c7:b9:b5:44:bf:ad:b5:
9b:ad:2b:58:20:19:b9:85:74:9b:59:b3:4b:43:15:11:2a:fc:
2f:bf:a6:39:49:1b:48:0d:84:c4:47:85:d9:84:1d:bd:f9:0e:
3e:6f:8f:ee:8a:dd:8b:a1:10:88:e7:fe:4b:a8:ce:1f:0a:47:
81:44:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:42 2025 by rpki-client