Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EE6D46DA6111EFAD309F4E762E951A.roa
File: F8EE6D46DA6111EFAD309F4E762E951A.roa (raw, json)
Hash identifier: dL6Zx7UhtkSXoIHtKtv9ehZK3EdcYC5GvGOBqq8wZKc=
Subject key identifier: 3F:32:8A:D5:3E:B4:AB:F7:80:A6:A8:5A:1A:9F:E4:A4:D4:3B:2C:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01485F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EE6D46DA6111EFAD309F4E762E951A.roa
Signing time: Fri 24 Jan 2025 14:46:20 +0000
ROA not before: Fri 24 Jan 2025 14:46:16 +0000
ROA not after: Sat 01 Mar 2025 14:46:16 +0000
asID: 44559
IP address blocks: 154.81.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84063 (0x1485f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:46:16 2025 GMT
Not After : Mar 1 14:46:16 2025 GMT
Subject: CN=6793a7bb-8f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:19:54:4c:64:94:af:1f:5c:0e:16:96:8f:
12:fb:a7:be:31:1e:ed:1e:69:61:57:bc:fb:7b:8a:
ae:4d:17:85:fa:f4:f1:a7:3f:cd:e0:3e:59:11:18:
c3:33:77:0b:f4:a1:1a:6e:bd:99:9a:02:6b:9a:6e:
c3:4f:40:92:7e:1e:1c:cd:d3:6e:a7:1f:0d:3c:2c:
ba:9d:d3:bb:7c:02:83:0c:a6:6a:c5:5e:7c:eb:08:
fc:0a:66:e3:df:9e:2c:fd:6a:d6:df:a3:a2:19:49:
55:c1:e4:2a:7e:b2:e4:4b:11:26:9e:f9:b6:4d:fe:
eb:fd:af:8c:b0:ff:72:a5:72:f3:db:dc:c2:39:9d:
7b:d0:ea:c4:00:11:a7:23:da:e7:7b:c2:7f:7e:d8:
21:ef:0d:05:27:43:31:bc:ea:df:ca:20:9a:b7:03:
e1:55:63:a3:fb:54:5d:a8:5d:fe:95:f9:f6:b2:26:
64:a2:ce:d2:4f:b6:9a:a4:1a:d1:d0:9d:1a:73:40:
00:28:ae:20:54:56:b5:63:ab:88:77:da:5f:fa:ec:
f1:ac:d9:57:ff:ba:da:3c:12:1c:4e:a1:28:7f:6b:
c0:a7:75:a1:b9:56:1a:c8:90:67:de:ef:c5:5d:e4:
72:8d:0e:20:5c:33:ff:40:53:17:4f:a1:9a:ce:bc:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:32:8A:D5:3E:B4:AB:F7:80:A6:A8:5A:1A:9F:E4:A4:D4:3B:2C:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8EE6D46DA6111EFAD309F4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/21
Signature Algorithm: sha256WithRSAEncryption
24:4f:eb:f6:41:c1:82:62:47:55:18:9f:d1:96:1c:d3:4e:6f:
d7:f7:ed:df:b8:0b:eb:6c:8c:eb:e4:16:34:95:9a:9f:4f:22:
4e:c9:c5:57:f0:0a:69:d0:8c:0e:a2:ce:b7:2d:91:b6:4e:a3:
0a:f7:bd:a4:c7:df:8a:e0:cc:ed:78:6b:c2:5f:ac:5a:2b:ac:
7c:ac:d6:2d:2b:14:1a:8d:25:2a:4d:70:14:8c:be:b4:9c:15:
39:48:6c:9f:2e:ff:23:70:0e:01:fb:e3:e2:c1:6b:9d:7b:ca:
3f:7a:b8:ff:9d:62:a5:b4:8c:7e:86:f7:d2:43:3d:df:d3:db:
ba:2a:e4:89:8d:e8:90:02:bc:0a:7e:48:77:bd:60:be:f2:71:
41:ec:48:23:0a:df:47:27:98:dc:5d:20:b5:9c:96:a4:f4:7d:
c3:cb:b5:56:58:ae:ea:a4:6a:1e:cb:af:c8:56:82:8c:83:f0:
96:d5:e0:2f:61:cc:d8:ee:82:d5:1a:76:a8:09:99:f1:2b:d9:
d9:37:65:c7:61:52:82:69:d0:5e:e8:e7:13:db:61:a8:6d:64:
c6:b3:ff:e1:e6:cf:28:aa:d3:b1:10:df:a2:ad:19:73:fc:72:
09:8f:6b:f6:64:dc:93:08:22:80:54:5c:eb:5d:81:e5:94:05:
1f:b7:33:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:42:33 2025 by rpki-client