Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CE4B42F44611EFA18DED71762E951A.roa
File: 09CE4B42F44611EFA18DED71762E951A.roa (raw, json)
Hash identifier: RuPv4zTPQbeexhY4gVkPYuCXDvPi32tjkA07z76a4Ic=
Subject key identifier: F0:E1:E5:07:60:53:7C:A7:DA:E6:44:A2:89:F0:92:DF:08:18:1C:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CE4B42F44611EFA18DED71762E951A.roa
Signing time: Wed 26 Feb 2025 13:31:52 +0000
ROA not before: Wed 26 Feb 2025 13:31:46 +0000
ROA not after: Sat 19 Feb 2028 13:31:46 +0000
asID: 17561
IP address blocks: 154.82.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91086 (0x163ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:31:46 2025 GMT
Not After : Feb 19 13:31:46 2028 GMT
Subject: CN=67bf17c8-f173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:f7:47:71:c4:b7:63:90:58:a7:fd:b1:92:
47:77:99:4f:7d:45:e8:56:cf:58:5b:3b:e2:af:a4:
41:eb:8b:16:58:9e:17:2b:e7:66:79:29:cb:80:ce:
dc:6d:d0:b5:d3:47:4c:35:e7:00:71:fe:dc:0a:79:
4a:02:45:a5:13:f8:c3:64:ee:3f:05:e1:d0:f2:99:
00:29:f3:6a:65:02:0c:11:e2:7a:80:2b:c2:9a:18:
92:23:6b:9a:2c:43:5e:29:da:a9:32:bc:26:e1:ef:
17:0e:b9:4e:c1:fc:79:30:57:4f:03:fa:5e:77:24:
dc:01:43:d1:44:56:87:62:75:38:ef:58:a7:c6:18:
f9:9f:ad:3f:af:c7:84:cf:57:a7:2e:26:b9:2f:2d:
b7:6c:f9:2f:56:6e:6c:f2:c3:06:54:c6:32:d3:db:
50:33:8f:8c:96:3f:48:b1:6b:a3:2b:48:c5:a0:02:
d2:5c:b6:83:82:94:a0:e0:5a:52:e2:97:ac:5e:72:
fc:7f:e6:36:f5:3c:a0:ce:d8:23:b5:64:83:5f:6b:
3c:1c:a6:8d:79:92:81:cc:7d:92:6d:79:c9:00:ee:
ee:13:26:64:b8:7f:99:cb:3a:ad:0f:48:21:13:53:
f7:46:50:24:c0:36:41:c0:d3:f9:84:c1:bb:13:2b:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E1:E5:07:60:53:7C:A7:DA:E6:44:A2:89:F0:92:DF:08:18:1C:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09CE4B42F44611EFA18DED71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.181.0/24
Signature Algorithm: sha256WithRSAEncryption
36:77:23:f1:be:8e:28:94:b3:e4:bf:5b:c1:76:6d:0b:b0:f8:
84:cb:67:30:e2:31:6b:73:85:93:15:7c:8f:06:d4:9d:2a:72:
bb:3f:8f:a0:93:66:27:ce:1f:08:b4:7f:c0:6a:1c:b9:4f:9a:
cc:df:ed:ce:fc:60:f0:de:40:26:55:33:e0:9e:eb:5e:c3:f0:
31:2c:f6:91:d3:50:66:67:ac:28:42:90:fc:24:d8:c8:35:24:
37:36:c2:bc:31:3f:75:3a:00:48:06:51:a3:b7:6d:11:56:37:
aa:db:91:2b:32:cb:f0:e6:1a:52:fe:6d:e3:09:f7:89:14:60:
1e:62:4b:36:67:0b:3f:e0:48:bf:d0:84:07:6f:f6:15:99:3c:
51:76:f5:aa:e4:1f:2d:6b:5b:e3:d7:c0:c2:b4:0f:3d:57:e6:
89:01:1a:49:bd:9f:72:95:10:2d:cc:4b:58:32:cb:05:c8:f3:
9a:d5:e2:21:fa:0c:66:fa:e7:90:a6:f9:b9:ea:d3:14:5f:1c:
cc:35:8b:c2:0c:0c:9b:46:dd:5f:39:f7:cf:5e:4e:4f:bb:cf:
56:51:66:ae:f4:79:5c:e8:ee:b7:69:52:f8:dd:98:c2:19:98:
92:74:fa:1f:35:ca:b8:c0:e5:5a:2f:39:cb:d0:80:12:6f:5f:
26:29:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:05 2025 by rpki-client