Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B75224D2D911EFA73AE2BA762E951A.roa
File: 16B75224D2D911EFA73AE2BA762E951A.roa (raw, json)
Hash identifier: eDq3GVkKwZfLtF+aZIa8Rp/6rnK2OQt7JTLDs2uFKNg=
Subject key identifier: 2C:51:BF:21:F4:E2:A4:49:55:B2:55:17:87:60:69:31:07:3E:41:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B75224D2D911EFA73AE2BA762E951A.roa
Signing time: Wed 15 Jan 2025 00:38:50 +0000
ROA not before: Wed 15 Jan 2025 00:00:47 +0000
ROA not after: Fri 12 Dec 2025 00:00:47 +0000
asID: 984
IP address blocks: 154.81.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80719 (0x13b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 00:00:47 2025 GMT
Not After : Dec 12 00:00:47 2025 GMT
Subject: CN=6787039a-7ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:29:2d:44:9b:e0:c1:32:bc:02:77:a4:5f:
75:49:01:9b:ae:62:c5:0a:3d:cd:03:be:90:3c:eb:
cd:b0:7d:17:b3:34:b3:8d:d9:2c:2c:09:38:ee:88:
fb:eb:34:3d:42:83:1c:4f:91:31:9f:58:3b:27:9b:
16:b5:dc:5b:59:a2:bc:ca:7d:9e:b0:c4:11:a6:2d:
4c:e3:94:e9:89:f8:5f:3f:e9:c1:61:18:3a:bc:d4:
4b:79:0f:dd:e0:70:2b:4a:8f:b6:e1:3b:55:8a:5d:
77:f3:df:94:e5:1c:ec:d8:cd:54:b7:6e:c0:00:44:
6f:ad:f1:90:92:f2:96:b9:92:ab:c0:26:96:a0:21:
87:2d:26:fa:c4:7e:d8:66:38:9d:34:04:40:88:24:
76:dd:b9:38:0b:a2:5e:c0:3b:46:6e:6e:45:51:e6:
ee:52:38:d5:0b:4e:81:ac:a0:fc:75:b2:84:8f:f8:
14:e8:d0:ef:23:d4:cd:a2:4e:24:03:99:62:ac:f5:
c6:71:54:0b:3f:e9:76:7e:dd:b4:08:78:b9:4b:2d:
bf:b8:36:65:97:66:c3:8f:73:ce:45:6f:b1:b0:21:
31:7c:a4:af:ec:c3:a7:d5:b6:50:e8:78:c1:65:df:
61:5c:d1:3c:3b:6f:c5:95:40:38:47:96:38:ab:6d:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:BF:21:F4:E2:A4:49:55:B2:55:17:87:60:69:31:07:3E:41:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B75224D2D911EFA73AE2BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.170.0/24
Signature Algorithm: sha256WithRSAEncryption
35:31:c0:54:da:92:33:5a:5c:d5:75:be:db:74:83:c7:b8:6e:
12:d1:77:2b:72:c5:ca:52:71:13:8d:3b:fe:5c:c7:a5:88:76:
9f:67:e3:31:b9:3e:5a:40:b2:aa:3c:ee:e5:ff:0a:f2:e0:c2:
35:22:1e:33:00:f0:a7:64:44:8e:57:52:60:c7:10:f2:aa:0e:
f5:76:17:03:92:75:07:c5:f5:04:47:98:55:06:29:83:9b:2e:
68:6f:36:bf:f9:03:76:4f:90:5b:83:07:69:14:ef:61:45:c3:
a3:18:73:07:5a:86:e9:4d:4c:c8:fb:8f:50:79:05:e4:10:c3:
a0:bb:ee:0c:3b:e3:43:56:34:32:f9:7a:fd:5c:b8:00:00:ed:
8f:ec:be:ab:e1:03:18:ae:db:20:f9:8c:66:de:f7:ef:e0:12:
eb:2c:55:dc:e2:6c:a9:61:51:68:52:b6:90:a5:22:1d:a1:bc:
ec:47:1b:c6:bf:78:5d:c6:da:d2:82:e3:e0:c1:dc:8d:20:e4:
58:16:6d:26:5b:72:2b:74:2a:9f:ad:32:d3:91:9a:33:d4:8f:
af:ae:c4:d3:a9:45:7a:d6:21:07:a4:85:09:c4:f2:be:b2:9c:
c3:90:1a:31:5b:00:4b:3e:60:ea:7a:ae:e6:36:3a:b1:73:91:
7d:f6:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:19 2025 by rpki-client