Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E591B0CCF5E11EFBD9F1347762E951A.roa
File: 2E591B0CCF5E11EFBD9F1347762E951A.roa (raw, json)
Hash identifier: 5ftscGPdvT4n9qi1fWR1yJymdZY0zm32Qp/bzXs11NM=
Subject key identifier: B6:48:89:22:BD:26:4F:55:CD:47:B9:06:CA:3D:D2:CA:C9:E6:25:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E591B0CCF5E11EFBD9F1347762E951A.roa
Signing time: Fri 10 Jan 2025 14:21:28 +0000
ROA not before: Fri 10 Jan 2025 14:21:24 +0000
ROA not after: Fri 12 Dec 2025 14:21:24 +0000
asID: 984
IP address blocks: 154.81.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80375 (0x139f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:21:24 2025 GMT
Not After : Dec 12 14:21:24 2025 GMT
Subject: CN=67812ce8-53d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:8c:7b:6d:38:51:9e:b9:67:22:f1:06:4e:
e8:23:36:6b:44:a0:dc:37:a8:dc:38:51:1d:2a:24:
0d:86:8e:1f:c7:24:e8:5f:7b:34:77:c4:ba:36:7f:
25:7b:51:c9:84:d2:e2:9e:3e:49:cf:1e:3e:51:12:
96:ac:e4:ee:b7:05:b4:b7:b7:55:4c:ea:68:40:d0:
88:0a:1f:00:de:e1:84:e7:6f:64:aa:21:5e:43:21:
b0:b7:7d:be:68:43:16:5c:5d:90:29:c1:8f:43:cf:
a0:8c:46:9a:fb:f0:98:6c:1c:36:1f:25:57:26:92:
08:ce:84:24:e6:e2:05:31:21:ba:2d:44:e3:fb:06:
b0:b4:5c:de:f9:a8:7e:54:0d:18:bf:54:b1:71:15:
bd:4b:41:ff:b3:61:2b:8b:5c:73:f4:87:c9:9c:9a:
be:ed:4f:b8:af:bd:b6:dd:da:53:cb:3f:b3:84:45:
a7:42:d4:01:85:a4:7e:95:a7:ff:37:79:be:d5:1f:
1a:0c:81:c2:76:b2:78:6a:80:11:90:ed:ba:f2:9d:
9f:cf:bc:f6:36:79:ef:fc:0a:d5:e6:29:a9:77:1b:
ef:bf:da:e1:38:90:45:60:39:08:69:20:86:90:ef:
49:4d:ac:0e:5f:2a:34:e0:02:5b:9a:44:c8:07:a9:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:48:89:22:BD:26:4F:55:CD:47:B9:06:CA:3D:D2:CA:C9:E6:25:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E591B0CCF5E11EFBD9F1347762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.9.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2b:2b:ba:b9:58:61:b5:9b:ce:c0:70:14:be:c9:c0:99:55:
4a:b3:eb:e7:c5:e2:9f:95:70:6b:97:31:45:c6:3a:ea:bb:56:
67:5c:74:c5:0e:5a:57:d9:ec:e1:64:5c:b5:91:ba:b7:c8:48:
5c:f5:59:2c:01:e0:a5:3e:c6:83:40:52:05:fd:58:a2:bc:6c:
40:8c:df:4f:fc:c5:aa:8d:82:15:8a:4a:c7:9d:04:e7:99:30:
2e:cc:4c:da:dd:ce:08:64:25:77:69:ae:8d:99:d8:34:a9:f8:
11:25:d1:5e:67:f1:21:d8:18:71:92:91:37:af:60:02:3c:58:
ce:db:db:51:78:62:79:a5:fd:28:ed:92:bf:02:91:66:e6:1a:
f5:75:ce:f4:78:ca:0a:0f:f6:1b:31:71:3e:6c:2b:ff:41:e2:
2d:08:3a:8e:21:cb:3f:67:29:26:63:7e:24:57:8d:c9:03:2f:
6e:a8:66:cb:24:9a:b9:62:00:e2:47:96:19:42:91:68:8c:a1:
1d:ee:c0:21:c6:d3:e4:70:2c:bd:cf:cf:7f:b3:e0:0f:00:b3:
7a:35:55:de:d3:96:21:83:47:59:54:27:d4:60:84:87:c5:34:
0c:96:99:7a:4d:ed:94:1a:81:91:59:16:5c:52:a0:bf:12:bd:
de:d5:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:25:15 2025 by rpki-client