Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F39F3A78DD6311EFBB8DA69C762E951A.roa
File: F39F3A78DD6311EFBB8DA69C762E951A.roa (raw, json)
Hash identifier: u3O6U76a3gpz4aa88kjQT2+8DwfwVnEckUhRfUvV93Y=
Subject key identifier: A0:72:8F:F7:2C:A0:E4:B6:DD:5F:14:01:56:1C:FB:21:2C:3B:6D:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F39F3A78DD6311EFBB8DA69C762E951A.roa
Signing time: Tue 28 Jan 2025 10:38:03 +0000
ROA not before: Tue 28 Jan 2025 10:37:59 +0000
ROA not after: Tue 11 Feb 2025 10:37:59 +0000
asID: 140869
IP address blocks: 154.81.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85194 (0x14cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:37:59 2025 GMT
Not After : Feb 11 10:37:59 2025 GMT
Subject: CN=6798b38b-fe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:d0:8e:80:1f:55:e9:76:56:b3:62:60:d7:
f1:54:79:86:ff:19:36:76:b5:56:51:8c:e1:95:c8:
6b:49:c4:fc:7c:cb:be:72:6f:ae:f7:30:bb:d0:8e:
87:c6:60:5e:6f:56:86:fd:39:f1:97:b8:ed:9d:74:
14:d7:83:54:e2:a9:a5:95:8b:f7:77:ef:ed:5a:a1:
50:33:46:1f:7f:52:45:54:54:76:f2:96:da:0b:58:
a5:7a:fd:12:5e:0b:15:fd:e5:85:dc:b3:8d:5f:ce:
6b:8b:6c:8e:90:6b:59:50:b6:f0:a3:f1:b4:e7:37:
b0:d4:52:1f:de:4f:17:c4:ad:17:1d:8c:46:45:cd:
2d:e5:b6:48:ee:f5:ec:b9:cf:dc:65:98:3e:2a:e7:
f4:c3:cb:e4:14:08:62:bd:29:bf:09:c0:0a:7a:06:
b7:3a:56:fe:8a:92:79:22:b7:6b:ba:7d:f9:9a:0f:
dc:7e:24:00:76:72:97:34:30:b2:7d:8c:e1:be:ac:
31:3d:c7:b4:b5:80:13:52:c7:c9:f7:a0:bd:32:0d:
01:06:f0:68:ef:b3:de:34:9b:4e:00:02:b7:d0:15:
60:67:f5:fb:14:eb:b2:76:a9:09:26:e4:3c:c7:3c:
ee:f9:4f:2b:a9:f8:d7:c6:ad:2d:74:69:c8:b4:1f:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:72:8F:F7:2C:A0:E4:B6:DD:5F:14:01:56:1C:FB:21:2C:3B:6D:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F39F3A78DD6311EFBB8DA69C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.36.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4e:58:16:44:44:c4:b9:3c:6c:17:87:b6:9e:62:c0:2e:9c:
8c:98:ed:d6:c6:0a:49:d9:20:0e:fc:00:81:44:72:a5:7a:17:
1c:da:40:c0:f8:69:b9:34:4f:04:05:23:5d:35:10:70:bd:ee:
5e:ba:64:68:57:fd:b2:ce:86:ca:53:8e:e9:f3:16:4a:b3:a1:
e8:d8:59:09:07:cb:7d:3a:6f:c8:35:54:4b:c9:8f:69:73:2d:
72:85:ed:65:65:7a:43:d0:7c:99:d1:36:7d:49:e0:4b:01:e3:
c9:b6:7f:12:17:eb:be:9d:38:2f:cb:50:31:96:e6:ac:00:bc:
83:de:89:29:cc:8c:06:1b:32:72:fc:ef:f9:3e:e1:de:5d:f1:
07:4a:11:af:56:2f:4b:b4:d5:2e:2f:06:2d:68:b3:f8:0d:b2:
98:ee:a3:0d:ac:fa:f3:ac:32:68:2e:72:44:59:ae:8c:27:f3:
6c:3d:bc:6e:57:b4:82:62:96:9f:71:f3:03:1c:c8:46:98:f0:
6a:5d:2b:fc:8a:d2:d5:dd:38:e5:23:31:e3:41:2d:08:cb:ef:
0d:47:9d:82:fe:53:d5:8a:e4:66:5b:3e:b1:a7:82:b1:2d:d9:
a9:1c:ee:77:e6:50:27:7e:09:e1:5a:5c:ec:ea:1d:15:9d:46:
e5:b3:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:51 2025 by rpki-client