Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/045A7830CF6F11EFA3E9D2AF762E951A.roa
File: 045A7830CF6F11EFA3E9D2AF762E951A.roa (raw, json)
Hash identifier: Yw/4MtUf6ThjWO4yIvF2ulGJLflyeirxqHdHxuXt7Oo=
Subject key identifier: 3B:A5:7A:3D:F7:03:78:DD:FF:8F:0E:0E:79:FF:4E:50:29:7E:65:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/045A7830CF6F11EFA3E9D2AF762E951A.roa
Signing time: Fri 10 Jan 2025 16:21:59 +0000
ROA not before: Fri 10 Jan 2025 16:21:56 +0000
ROA not after: Fri 12 Dec 2025 16:21:56 +0000
asID: 984
IP address blocks: 154.81.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80468 (0x13a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:21:56 2025 GMT
Not After : Dec 12 16:21:56 2025 GMT
Subject: CN=67814927-d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:20:ee:74:07:bf:96:fd:cf:c9:2c:e7:dd:
7b:a6:1f:6d:7c:26:a5:b7:ff:a7:a4:2d:f2:e4:52:
87:02:e8:58:67:56:90:b5:ba:6e:8f:3c:26:59:bd:
4b:49:dd:d7:50:eb:c0:53:db:b2:71:06:ce:86:10:
d5:55:93:e4:e1:2a:00:e6:92:f5:1e:c7:82:87:0b:
73:04:91:a0:7a:ee:5f:49:b0:56:ec:bc:4f:84:6c:
f4:de:25:4c:f2:66:a8:d6:bf:ae:3d:35:fc:f8:38:
66:8c:c0:00:76:dd:a5:34:16:30:c8:94:3b:15:22:
69:11:b2:78:f4:4e:3b:ca:ee:cb:c6:0a:ba:37:4e:
31:be:79:28:ed:80:92:51:33:7b:d3:5a:88:20:ba:
2f:e4:bd:13:a7:7b:69:6b:33:dd:55:19:1c:87:24:
18:66:a0:34:58:6e:ff:c3:9a:a0:b4:6d:25:61:9a:
21:60:c6:dd:9a:0d:4b:4e:08:84:ed:d6:c5:9b:f3:
7a:81:e4:09:b8:c0:fe:ff:4e:4c:2d:56:c4:be:7e:
d5:1d:47:c0:1a:f0:8f:ac:15:bd:2e:85:e4:62:22:
5b:63:f2:fc:f0:b5:ab:74:bd:b4:cf:ee:a3:0c:bd:
17:8b:b3:30:51:6f:39:a1:61:17:88:d7:ab:35:c3:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A5:7A:3D:F7:03:78:DD:FF:8F:0E:0E:79:FF:4E:50:29:7E:65:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/045A7830CF6F11EFA3E9D2AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.161.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5d:34:99:60:01:e7:9b:b6:34:7b:c0:6c:92:c0:a7:c6:85:
96:3e:a8:f9:82:20:59:aa:96:87:0c:3a:28:06:09:4a:9d:0a:
a1:46:8a:0f:f6:1a:d1:9a:85:3d:b1:79:49:30:3d:5d:b3:4c:
e1:cf:f4:b0:b9:aa:ba:1f:ae:8b:3e:a6:c6:7e:34:77:8f:30:
78:ff:e0:59:1e:b5:5e:fe:c3:f9:71:79:8a:1e:28:9c:36:72:
af:e1:60:69:d5:07:39:63:d8:35:00:b9:d6:8d:63:c0:47:e8:
59:63:f6:11:f2:8e:52:7a:74:28:3c:48:d6:df:60:f6:3a:c4:
f0:ed:c5:a0:3a:c0:12:7e:0c:77:4f:24:99:3d:02:91:fd:7b:
06:92:83:e9:b0:86:60:00:e0:b0:5b:b6:4b:d8:89:a6:28:4c:
85:37:8f:fb:37:c0:50:e4:33:36:18:e2:3f:a4:1e:1a:28:41:
fc:38:28:57:c9:aa:29:c1:a0:84:fc:5f:61:ec:a3:c9:b2:74:
fa:4a:33:f8:2e:c6:68:f6:a7:fc:48:75:23:f2:2e:7c:33:2f:
c2:c4:56:56:05:bd:83:32:fe:1e:6a:29:96:d5:97:8a:1a:7b:
f3:d8:62:71:c3:ce:c2:5f:1e:b8:78:63:4f:6d:c4:9a:15:90:
93:34:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:06:50 2025 by rpki-client