Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAF4A7ECF6311EF83EAD467762E951A.roa
File: 4FAF4A7ECF6311EF83EAD467762E951A.roa (raw, json)
Hash identifier: UB/AVCZRwDokfoO2O7FG5Yb/qW5L8C2twescUaUCtK8=
Subject key identifier: 13:22:6D:33:42:82:C8:5F:C2:6D:D6:24:35:6B:D2:E0:4E:97:A3:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAF4A7ECF6311EF83EAD467762E951A.roa
Signing time: Fri 10 Jan 2025 14:58:12 +0000
ROA not before: Fri 10 Jan 2025 14:58:08 +0000
ROA not after: Fri 12 Dec 2025 14:58:08 +0000
asID: 984
IP address blocks: 154.81.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80420 (0x13a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:58:08 2025 GMT
Not After : Dec 12 14:58:08 2025 GMT
Subject: CN=67813584-bcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:9d:08:af:49:93:28:6b:ad:cc:d9:e9:b1:
16:e7:a3:2e:0a:9d:d4:0e:72:d0:47:44:a7:d7:cd:
36:60:c6:05:13:4a:98:4a:18:90:0f:b8:f7:f1:f7:
a7:d6:9e:a4:42:18:23:fc:63:f4:cc:09:48:79:b5:
a8:46:99:1c:00:5f:69:b0:cf:7b:25:bc:47:c7:53:
58:ce:7f:3c:29:dd:63:d5:88:96:0b:21:ac:1e:96:
c7:99:1d:a4:21:8e:bf:29:1b:df:27:d1:c6:ae:ff:
65:89:4c:ee:73:13:0b:57:e3:a5:60:4d:a5:e8:b5:
f8:8e:52:f5:e8:17:07:98:19:ad:bc:fa:cd:47:26:
1c:c9:fc:76:46:ed:68:bd:c3:28:5b:c3:2d:4e:37:
36:e0:26:0c:ee:f7:f7:39:db:c6:96:67:e7:ee:4a:
51:27:11:82:d3:27:d4:e0:85:19:ad:8a:77:c9:6f:
d9:5d:70:e7:6c:bb:4a:03:3b:05:5a:5f:6e:e1:c4:
bf:21:37:cf:0f:45:58:72:d5:11:42:2f:7d:e5:9e:
a2:f4:3a:cd:69:e5:16:fa:89:6f:8a:9e:c5:de:35:
82:93:69:a1:d8:81:e1:b0:93:05:d2:4e:a5:9f:ec:
6d:04:02:50:75:7e:43:f2:1b:af:7b:bb:9d:ee:15:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:22:6D:33:42:82:C8:5F:C2:6D:D6:24:35:6B:D2:E0:4E:97:A3:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FAF4A7ECF6311EF83EAD467762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.148.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8b:96:9b:8d:d6:ca:db:2c:08:58:2a:c2:7a:1a:cc:25:f0:
ff:c2:14:d1:7d:a6:0c:29:d8:48:07:14:6c:b4:d2:5f:eb:1a:
84:91:58:53:a6:48:4c:34:33:c2:5a:0a:76:ce:0c:ef:f8:29:
1c:f3:f2:54:de:f5:ea:04:88:82:06:4c:f9:6b:2b:73:d9:d7:
13:d8:c7:0e:ca:a2:f3:05:13:e1:80:89:3d:c8:df:67:48:c9:
19:34:34:27:ec:1d:3f:3d:23:64:33:50:ae:4e:1a:b4:77:48:
57:6f:ad:64:02:16:54:c0:65:f5:f0:fe:74:93:97:76:65:fa:
d8:96:7f:11:a6:60:cd:02:5d:e3:4b:ce:1e:05:1d:ab:37:8f:
2e:f1:eb:e6:d0:6b:27:d6:3c:66:a7:40:ec:22:3e:be:45:8d:
35:b2:2d:0e:f3:35:8c:5b:4e:39:77:c3:94:c7:c9:e2:f9:48:
6d:00:af:7e:ac:f5:a5:08:12:fb:df:43:57:11:a3:01:72:31:
63:4f:4d:24:c7:a0:9b:48:7b:19:e1:0c:72:b2:1c:02:d4:9d:
f3:01:6e:4d:b1:a2:0c:1c:9d:0d:a0:df:76:64:a3:35:21:02:
8a:6d:b2:8c:6d:ab:13:4a:d9:04:4f:da:b0:b0:7f:39:8e:a1:
46:18:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:05 2025 by rpki-client