Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/590928A8FE4611EF8EB1625A762E951A.roa
File: 590928A8FE4611EF8EB1625A762E951A.roa (raw, json)
Hash identifier: qPZdX/TkNFHOwpF3Xg3mF7kKs77B650zaSJlGI+6v+c=
Subject key identifier: 7E:5C:3A:F8:F6:BE:A2:80:B2:47:39:F4:BF:0B:C2:A2:B1:E3:CA:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01734A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/590928A8FE4611EF8EB1625A762E951A.roa
Signing time: Tue 11 Mar 2025 06:59:17 +0000
ROA not before: Tue 11 Mar 2025 06:59:13 +0000
ROA not after: Fri 11 Apr 2025 06:59:13 +0000
asID: 211881
IP address blocks: 154.81.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95050 (0x1734a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 06:59:13 2025 GMT
Not After : Apr 11 06:59:13 2025 GMT
Subject: CN=67cfdf45-5558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:40:8a:ae:4a:c4:b6:6e:58:ab:0e:f8:16:
d1:b6:bc:98:37:a4:b3:01:91:fb:ae:3a:f0:6e:25:
3f:79:81:c1:eb:e7:16:a3:bb:db:7f:4e:ab:7b:ac:
9d:74:e7:d5:9d:91:71:a9:a4:3d:f6:1c:eb:5b:f4:
86:4e:3e:b4:73:39:3a:49:90:40:d3:b4:78:fe:ce:
a7:bf:39:a5:7d:26:a6:e0:44:a7:35:38:98:8c:10:
96:18:07:e9:73:c7:ec:fa:59:74:79:15:13:85:76:
2d:6f:cf:cb:a7:93:1f:bd:e2:b3:59:80:ce:21:6b:
f2:37:ff:14:1c:bc:80:ce:66:56:f8:db:c6:02:cd:
a7:8a:7a:38:3c:44:5c:76:3b:ce:70:28:7b:86:e7:
be:82:b8:f7:d1:18:31:49:fc:ec:1e:cd:ff:dc:cb:
33:1b:bf:45:08:8b:f9:1b:6e:6e:b8:4d:c4:c9:6d:
df:e8:c3:89:37:3b:08:5b:cb:9e:9e:6d:3a:b6:5c:
ea:c8:1d:e7:cd:de:68:a4:5b:cb:86:20:13:f8:e8:
5f:6d:f5:1b:9f:60:24:f2:9b:d6:2d:01:44:7f:85:
5b:5e:bd:d2:6d:d5:35:cd:73:de:88:b0:f1:a8:d6:
d9:64:e3:1a:12:fd:22:5a:54:a7:d0:06:1c:8a:c9:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:3A:F8:F6:BE:A2:80:B2:47:39:F4:BF:0B:C2:A2:B1:E3:CA:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/590928A8FE4611EF8EB1625A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.184.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ae:d2:c0:b6:91:9d:99:ae:91:c6:d1:4f:ae:c8:6b:9f:df:
86:56:6a:84:7d:1b:81:46:48:54:20:df:13:5a:f4:0d:0c:7f:
4a:af:90:18:f7:7d:7b:c1:9d:69:d5:3d:dd:a7:e6:16:23:d5:
85:97:69:ac:ee:cc:c7:62:3e:12:e0:26:0b:0b:b2:cf:a5:6e:
cd:2f:1e:e9:f4:50:d2:a6:b8:47:2d:61:55:fc:b2:6b:53:f2:
72:30:2f:22:6c:3f:ed:bd:24:17:56:34:55:56:95:88:41:ff:
fc:1e:fb:35:66:d8:f3:2d:e1:07:50:6a:8c:18:fa:f7:8e:47:
c8:47:43:7e:8b:ca:13:23:c4:a3:f2:31:7b:c9:9f:4c:64:42:
1a:a9:79:9c:cc:70:21:c4:52:24:3e:54:d7:6b:c7:7d:37:d0:
f8:2b:d7:8b:53:5e:18:46:f2:61:48:e4:52:2e:df:a1:ed:84:
dd:7e:2e:af:dd:d6:21:f0:dc:c5:aa:6d:0c:4c:44:12:14:db:
c7:84:cf:79:d5:c1:08:5b:40:6e:c5:40:f5:f1:c9:af:21:8a:
69:4a:89:93:7e:c5:fa:50:d0:5f:86:69:35:00:80:3e:33:0c:
5e:91:98:56:c0:22:99:56:9b:65:b1:68:65:76:a8:c5:96:b8:
e1:70:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:38 2025 by rpki-client