Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05DE7DD2062911F0A90EEF60762E951A.roa
File: 05DE7DD2062911F0A90EEF60762E951A.roa (raw, json)
Hash identifier: OwQllYqOKP4oJweYskovzs96nXahzLiYE9l2gJJ2qq4=
Subject key identifier: 36:5E:A0:D1:2A:A2:83:DD:90:61:0D:0E:29:8C:AA:E8:4B:E3:8B:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017555
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05DE7DD2062911F0A90EEF60762E951A.roa
Signing time: Fri 21 Mar 2025 07:49:31 +0000
ROA not before: Fri 21 Mar 2025 07:49:27 +0000
ROA not after: Mon 28 Apr 2025 07:49:27 +0000
asID: 25160
IP address blocks: 154.81.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95573 (0x17555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 21 07:49:27 2025 GMT
Not After : Apr 28 07:49:27 2025 GMT
Subject: CN=67dd1a0b-91f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ff:f1:61:a0:2a:4c:32:59:9c:49:7f:dc:46:
cb:2c:c6:56:63:84:61:ed:ea:ff:0f:6e:8e:27:cf:
62:4d:55:a2:94:00:05:51:e4:7b:7c:b7:d0:8b:1a:
3b:1e:7a:42:8f:85:64:71:fe:6b:cb:27:74:0b:51:
18:51:83:40:74:1a:89:fd:e0:e6:22:d1:c4:5b:45:
ed:53:c4:ab:c8:99:11:0f:c8:3f:78:30:e1:81:31:
6e:70:d7:89:b9:ab:ae:17:f9:88:b6:88:b1:9a:55:
55:9f:6b:aa:ed:4c:02:35:33:07:ea:a1:c9:15:f5:
77:f0:33:33:4b:c5:f5:7e:55:c0:1c:95:ee:e1:c0:
4e:b3:44:d8:6e:b0:ae:66:6a:7a:5f:27:58:b7:d2:
28:4e:aa:e7:de:2c:a8:ba:ef:4e:a9:91:6f:57:8c:
f3:5d:88:a9:bb:fd:05:76:d7:b2:38:0b:29:35:2b:
3b:b0:6a:64:c3:53:b7:f6:dd:41:24:a9:da:ee:1c:
37:87:50:db:be:49:33:3a:37:69:69:4f:b1:43:4f:
8b:f0:84:7f:09:98:5f:0b:8e:71:72:db:db:ba:f7:
b5:73:f0:53:33:49:5d:f7:60:e1:e8:ff:c1:9b:99:
d9:75:f9:a3:f3:9b:95:34:1b:22:6f:06:58:7a:d7:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5E:A0:D1:2A:A2:83:DD:90:61:0D:0E:29:8C:AA:E8:4B:E3:8B:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05DE7DD2062911F0A90EEF60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ef:08:21:c1:e2:94:5a:68:3d:03:cc:ef:9f:4f:00:2a:4e:
43:2c:1c:e4:07:d2:e9:45:b3:73:de:e4:35:a9:5a:92:21:fa:
79:ac:ec:43:3a:a1:c2:25:34:52:a9:32:28:6c:c7:cd:10:e2:
34:51:59:93:8e:76:54:71:b3:55:bb:44:df:dc:22:bf:13:2f:
ec:a7:5a:c3:da:23:4a:76:be:12:b0:d8:0d:ad:e9:5e:d6:ec:
19:52:31:9e:49:ee:2f:9f:0c:4b:75:2f:01:08:fa:ce:11:1d:
f2:b8:43:41:2d:a4:0a:35:75:05:af:2e:87:1f:42:2d:91:6f:
7a:48:a2:0b:f9:29:9f:29:06:6c:47:b1:87:83:d1:8f:b4:31:
11:50:10:ce:8a:2b:64:ec:73:e5:d2:9f:2e:86:b9:38:ec:50:
59:cf:37:9c:81:3b:67:74:31:e6:d4:e9:8e:f0:9f:ff:fc:14:
8e:8b:01:06:f6:58:f6:79:90:62:a7:8a:24:19:67:b1:ea:8c:
62:53:29:a7:b7:29:d4:3f:a7:19:46:93:29:df:68:42:81:b3:
9b:47:c6:7f:cd:22:96:33:fb:7c:ac:e2:6c:25:d0:fd:80:71:
8c:39:f7:0e:61:e5:94:78:03:e0:b0:f9:aa:37:a8:25:b2:6c:
f4:e5:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:02 2025 by rpki-client