Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12A1D228CF6311EFA93FBC65762E951A.roa
File: 12A1D228CF6311EFA93FBC65762E951A.roa (raw, json)
Hash identifier: mefegaAPIrkDca77j5acr2qkIs+e7v7L+XM+qQwAtQg=
Subject key identifier: D6:97:43:7E:50:F2:D2:9F:40:89:24:61:D7:35:C0:5C:3B:BD:E8:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12A1D228CF6311EFA93FBC65762E951A.roa
Signing time: Fri 10 Jan 2025 14:56:29 +0000
ROA not before: Fri 10 Jan 2025 14:56:26 +0000
ROA not after: Fri 12 Dec 2025 14:56:26 +0000
asID: 984
IP address blocks: 154.81.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80415 (0x13a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:56:26 2025 GMT
Not After : Dec 12 14:56:26 2025 GMT
Subject: CN=6781351d-2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:c9:64:b4:b2:6b:09:31:c6:3d:3c:36:d6:
7d:9d:ca:04:de:49:20:4f:e4:8f:b4:c1:c0:ff:f2:
85:05:80:2e:eb:be:8c:75:90:02:42:49:d8:2e:ca:
8b:c3:c8:02:70:24:7c:b2:77:57:a0:ca:41:3f:e5:
c1:02:01:93:39:17:c0:20:1a:26:cc:3c:b0:61:7e:
e3:64:64:2a:38:04:91:d3:82:ad:1e:47:7a:78:c2:
25:70:36:f8:f3:a5:a3:48:d0:4b:7d:e6:19:b8:24:
e4:9f:57:5b:8d:47:26:6d:05:7b:6c:50:01:c6:a0:
2a:33:6b:3a:03:3e:73:a0:bc:0e:a7:94:e6:8b:9f:
ee:58:df:bf:15:da:22:42:bf:d0:ec:7d:80:68:58:
2e:af:69:86:09:eb:c7:95:9a:49:6a:d5:c9:ee:b3:
24:fb:b8:af:e1:0b:48:07:2a:fb:bc:cd:41:7f:a2:
fd:f3:e8:5c:c8:ec:78:30:db:bb:76:94:f5:da:46:
97:7d:33:a2:65:16:4c:6d:1f:47:6a:5d:14:3d:3b:
cf:6f:dd:c2:e9:93:e3:a9:64:99:eb:2b:a5:9f:67:
39:38:04:91:eb:9a:0b:7c:0c:f2:d9:8f:78:89:63:
e3:1f:eb:2f:c7:3e:77:2f:d2:11:2f:2d:62:e1:79:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:43:7E:50:F2:D2:9F:40:89:24:61:D7:35:C0:5C:3B:BD:E8:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12A1D228CF6311EFA93FBC65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.147.0/24
Signature Algorithm: sha256WithRSAEncryption
69:71:9f:56:88:08:cc:e5:70:02:1f:9b:dd:b3:a1:3e:4e:72:
1a:b3:a7:89:ed:84:c7:cb:5e:1c:3d:28:7a:f5:47:ee:15:bf:
9d:27:78:75:c2:cb:12:c3:86:0f:b6:14:cf:61:d3:7d:eb:b3:
3e:2c:f0:61:de:92:d8:63:8b:01:61:45:fa:73:f2:5a:78:dd:
1d:92:d1:b4:52:14:d1:33:91:95:d1:6a:01:00:af:b9:e5:e1:
97:33:c4:e2:f5:df:f4:73:10:5f:64:b7:14:2b:aa:ad:0a:d6:
e3:ab:b3:c1:6a:47:98:81:e4:2d:37:4b:9a:93:cb:a6:fb:d5:
12:ba:69:98:f8:cb:c9:b0:f0:0a:a8:85:77:67:df:ab:35:4e:
19:36:88:f0:c0:2b:b6:63:43:9e:ee:65:4f:05:17:7f:78:66:
c6:72:6c:cb:f4:6d:7d:bf:40:f6:35:4a:14:96:14:39:b1:1e:
c1:c9:0a:b5:5e:aa:73:59:ea:75:8b:e0:6f:64:77:33:b3:42:
9d:29:8c:25:ae:bd:06:b8:42:23:9e:2b:bb:97:09:ac:fc:5c:
98:28:91:a8:6e:ac:d2:a4:a5:cf:0b:e8:c6:99:0c:d9:93:e8:
13:c1:31:49:4f:7b:a2:80:ed:49:6c:3e:8a:dd:6a:a2:26:a0:
a5:d1:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:49 2025 by rpki-client