Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A8891FCD2D911EFA10A07BD762E951A.roa
File: 5A8891FCD2D911EFA10A07BD762E951A.roa (raw, json)
Hash identifier: hg8gkjIcteRkaoeoRQn4zwQv0IfOsQw6CMpq3kLLrQ4=
Subject key identifier: 17:D2:C8:C8:DE:63:C0:47:A5:F6:15:21:D2:15:D1:53:60:53:2F:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A8891FCD2D911EFA10A07BD762E951A.roa
Signing time: Wed 15 Jan 2025 00:40:44 +0000
ROA not before: Wed 15 Jan 2025 00:00:40 +0000
ROA not after: Sun 12 Dec 2027 00:00:40 +0000
asID: 17561
IP address blocks: 154.81.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80721 (0x13b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 00:00:40 2025 GMT
Not After : Dec 12 00:00:40 2027 GMT
Subject: CN=6787040c-c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:e5:6c:1b:6f:1f:a2:69:f5:a6:5c:2f:3b:
55:2f:c6:ee:d0:73:0b:44:ab:2c:5c:78:21:7b:0f:
a5:6b:d7:cf:07:c3:48:f6:a4:82:bf:98:60:21:39:
08:75:b3:f5:4c:77:0b:53:85:58:82:43:b2:22:3a:
0a:c8:d7:0f:9d:60:4d:0d:e8:0f:2f:78:bb:71:99:
74:11:ee:fb:af:49:f8:80:8a:ef:73:30:b6:98:ee:
63:90:ab:d4:84:3e:d2:04:17:03:aa:b4:92:d9:72:
ed:a6:0f:62:6f:72:32:25:20:ac:54:1d:31:69:b6:
07:f2:26:bf:3e:c7:b3:ca:28:e0:44:4c:04:ef:be:
0b:e7:ed:98:00:9c:0e:67:e1:72:35:75:18:99:4e:
48:62:f8:01:c2:08:41:f2:47:9a:dc:3c:16:6a:e1:
bf:a3:a0:0f:cb:19:80:0d:d2:af:d3:65:27:c8:12:
76:7e:39:78:a8:8a:99:0c:17:bb:38:4a:88:49:8f:
88:b8:cb:70:e8:06:5b:40:86:bb:73:45:39:d5:0f:
b2:cc:91:6b:89:21:a0:66:f8:e5:9f:27:11:0a:9d:
52:00:f0:d8:f6:27:f4:70:09:fb:61:e7:c3:36:85:
ef:cc:9a:10:2b:5e:b4:4f:43:62:72:e4:00:4e:89:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D2:C8:C8:DE:63:C0:47:A5:F6:15:21:D2:15:D1:53:60:53:2F:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A8891FCD2D911EFA10A07BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.172.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:3e:8d:42:46:f4:06:0e:77:6d:c2:93:92:1e:b5:2d:ee:71:
be:64:b7:eb:b9:68:5f:11:fa:f1:3e:77:af:0f:3a:89:0b:a8:
44:12:e7:78:9e:ad:34:a4:d3:a4:7d:d3:df:b1:85:ef:53:ee:
3e:29:82:a1:77:fe:1d:bc:57:af:44:bd:bf:52:35:90:b2:e3:
ca:c6:bf:63:f2:51:4c:7e:1d:df:f8:87:9c:78:7d:7a:61:fa:
8f:a3:43:01:01:98:f6:f5:f6:7f:7f:8b:bd:4e:93:61:d5:02:
7b:01:56:16:40:c8:30:b3:9a:b9:f8:a7:9b:55:06:ed:e6:3a:
63:36:16:24:a2:84:7c:97:a7:3e:8a:91:d6:7e:e4:a4:0d:11:
fd:0b:d6:6a:42:f9:1d:64:89:c4:f4:2e:3e:c0:fa:0f:c8:17:
c4:ca:6a:71:fb:8e:7a:21:86:13:a2:8a:0a:24:8a:51:f9:78:
a0:6f:29:45:75:58:3f:03:64:53:e6:c9:39:c4:ad:ec:5c:7e:
71:6e:fa:e8:4a:e7:37:2b:1c:72:2b:0f:d0:13:c6:f6:ad:f2:
c8:8e:66:61:1f:48:7e:e8:46:d0:08:ac:85:fd:b7:1b:75:f7:
f5:5d:01:13:bb:77:87:2c:2d:4e:46:7c:7b:1c:ef:21:b4:50:
c2:66:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:17 2025 by rpki-client