Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42EADD4CFD8C11EF8CDE8876762E951A.roa
File: 42EADD4CFD8C11EF8CDE8876762E951A.roa (raw, json)
Hash identifier: B6celV0bGiEQMwpFCTWdZkZT8FtJPERjJoKqbpthg1Y=
Subject key identifier: FD:F0:CA:30:0D:3A:4C:DF:46:19:FA:D2:3F:A7:A1:48:35:54:7E:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017331
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42EADD4CFD8C11EF8CDE8876762E951A.roa
Signing time: Mon 10 Mar 2025 08:47:13 +0000
ROA not before: Mon 10 Mar 2025 08:47:09 +0000
ROA not after: Mon 14 Apr 2025 08:47:09 +0000
asID: 17557
IP address blocks: 154.81.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95025 (0x17331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 10 08:47:09 2025 GMT
Not After : Apr 14 08:47:09 2025 GMT
Subject: CN=67cea711-1dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:aa:9c:13:bf:00:51:3c:08:85:21:01:61:
b9:b6:0d:c9:78:ff:7c:bf:e0:6d:81:5c:78:87:f3:
4e:d4:bb:e5:26:27:4e:96:ba:5d:a3:8d:c1:0c:ab:
88:51:7b:47:ee:9b:d3:28:60:ba:1e:46:93:a0:e6:
b6:1f:c1:4b:2c:2c:61:09:f5:f3:be:15:ab:55:bd:
79:a5:64:b4:d7:c3:9e:e7:fb:44:26:53:cf:92:79:
a8:9d:e6:bf:c7:27:93:99:78:bd:ad:7c:c0:df:d2:
9e:c7:64:47:0d:a4:54:77:2b:04:1b:fd:8f:7e:f1:
d6:4a:f8:31:24:a4:7e:28:c1:b0:e3:33:33:b5:b0:
2f:d5:53:c9:79:e4:fc:13:6a:1b:85:4a:62:13:dd:
0a:ef:af:73:6f:62:8f:b9:a6:ea:2d:92:37:d3:a3:
a5:f6:01:20:64:fd:29:9e:b4:90:70:89:26:da:8a:
4d:13:4a:c3:17:46:60:83:a3:77:70:86:75:bf:b1:
85:11:31:bb:b7:7b:20:75:88:a4:82:a1:03:3d:ac:
fb:61:af:9e:a1:42:c2:91:c4:7f:18:98:49:c3:68:
ec:82:73:46:41:36:74:dd:7e:32:4a:ae:0c:81:fa:
48:52:65:0d:87:bf:fa:c6:69:d4:de:99:25:09:44:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:CA:30:0D:3A:4C:DF:46:19:FA:D2:3F:A7:A1:48:35:54:7E:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42EADD4CFD8C11EF8CDE8876762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ed:bf:db:01:31:d2:1d:8d:05:7a:78:9a:9a:62:d0:4c:8c:
d7:dd:cf:50:27:be:13:69:d4:44:88:77:dd:30:7d:98:3b:4d:
8b:9d:18:78:bd:e9:4f:00:51:d8:46:62:7f:6d:92:9b:a8:87:
46:45:0e:7c:97:d5:a5:14:1f:98:d6:82:d2:aa:d5:9d:ba:84:
ee:5d:fe:d6:6e:f4:60:d6:2c:99:f9:d4:68:2a:72:d4:17:7f:
4b:73:30:71:4a:6c:0c:37:ea:58:7b:08:c5:08:91:0b:26:8f:
10:63:f1:9b:db:7d:1c:45:41:60:6a:2c:27:16:2f:11:99:73:
22:c6:99:3d:03:d9:8f:7e:a8:90:67:63:0c:b2:3d:29:cb:60:
13:ba:33:e3:91:fc:ee:1a:01:3e:58:3d:7c:1a:15:67:bd:e1:
9e:bb:22:07:d5:74:6d:fa:37:02:e4:ee:9b:a3:76:12:bd:0b:
5b:24:da:a7:95:14:60:a9:42:72:b0:24:82:57:2f:56:01:87:
59:69:ab:0e:40:ae:4d:13:73:9b:cf:6a:20:e2:bc:72:4b:39:
f4:9d:a1:51:dd:e6:63:75:9e:24:1d:a2:09:e3:5a:6a:76:46:
ea:5a:f1:77:71:9b:aa:be:87:36:d0:b6:5f:12:02:c1:14:d7:
a0:2b:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:26 2025 by rpki-client