Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B455484CF6E11EF897C73AD762E951A.roa
File: 7B455484CF6E11EF897C73AD762E951A.roa (raw, json)
Hash identifier: kjqW7Ca6xRmumL1rKStnG8GcIBkGwf93L1QkqVijbzM=
Subject key identifier: 1E:7B:98:BF:46:8A:E5:C9:06:A6:0E:87:B4:8F:DA:C1:C6:19:AC:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B455484CF6E11EF897C73AD762E951A.roa
Signing time: Fri 10 Jan 2025 16:18:09 +0000
ROA not before: Fri 10 Jan 2025 16:18:06 +0000
ROA not after: Sun 12 Dec 2027 16:18:06 +0000
asID: 17561
IP address blocks: 154.81.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80464 (0x13a50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:18:06 2025 GMT
Not After : Dec 12 16:18:06 2027 GMT
Subject: CN=67814841-ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:b9:99:d3:65:bb:f8:f5:e2:2d:60:80:d1:
ac:41:ef:d3:8c:95:be:54:ca:bf:5e:ab:81:0f:14:
47:e3:42:bb:20:b2:0d:3f:ad:32:03:ca:bd:3b:7f:
6a:e0:26:8a:a4:36:93:e8:1b:f4:80:29:2e:a3:58:
a0:7a:e8:0c:5d:77:27:bd:15:6b:d9:f9:42:eb:70:
42:93:91:e9:78:be:e0:98:6a:a7:71:2e:1c:31:49:
21:d0:4c:f3:3e:3f:b8:64:1d:a9:aa:e8:75:94:a5:
61:5a:3a:91:e2:a3:14:d7:b4:e2:ee:6a:b1:72:7a:
21:c3:31:47:eb:15:21:8b:fb:54:0f:96:66:52:a5:
44:d2:50:ed:23:80:c8:97:ae:c6:64:85:ca:05:17:
b7:79:bb:4b:7d:8a:2e:85:6e:e1:45:a7:e2:24:92:
eb:5b:fc:01:41:d8:af:f9:01:38:1a:37:75:b6:16:
4c:4e:48:9d:3c:b0:78:2f:8e:2d:3e:e2:24:22:0d:
4f:6c:eb:e7:7c:c5:00:59:5a:19:2d:d4:20:47:6b:
62:d6:b3:90:d0:44:98:6f:5e:a3:52:25:66:13:8e:
b3:fc:8e:3a:41:e1:f4:28:40:77:dc:30:e0:77:95:
f6:f4:b4:1f:c8:83:e0:24:15:31:4d:ff:d4:e9:70:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:98:BF:46:8A:E5:C9:06:A6:0E:87:B4:8F:DA:C1:C6:19:AC:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B455484CF6E11EF897C73AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.159.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:36:d3:ad:f4:db:d0:47:5c:2c:44:a5:d1:99:f8:f8:46:af:
0d:b7:26:92:bb:64:a2:e9:ba:1a:55:4f:74:1a:c6:c7:cd:b5:
04:3a:34:cc:e0:75:c7:32:d4:e6:3b:49:5f:98:04:b0:db:77:
37:10:38:21:47:73:11:97:60:42:37:6f:22:3e:75:f9:38:c4:
9d:59:5b:42:18:ab:21:a5:fc:b6:a9:f0:81:87:4a:aa:a3:6b:
17:e1:32:53:48:73:9a:ae:08:8f:14:d8:1e:d4:2a:1a:98:ac:
cb:66:4d:ab:0b:d5:86:3e:b6:1d:e7:cc:29:bf:d0:9b:1b:8a:
ec:76:7f:b0:cc:76:ea:eb:6e:5c:ec:85:91:7b:28:45:db:e6:
c8:ef:68:46:b4:4a:08:49:53:6a:82:c5:0f:b7:17:74:20:50:
ed:bb:da:d1:c1:8e:b6:ec:3c:ee:5a:fc:91:89:f2:50:88:ed:
30:69:53:75:10:4b:47:9a:e9:3e:3c:45:ce:e1:d9:18:e4:bb:
7d:a7:62:f3:6a:e2:1c:0c:5f:ec:14:3f:84:83:67:cf:64:97:
58:bf:3b:33:6c:b8:8d:f2:dc:0a:23:32:cc:42:91:dd:fe:45:
6f:c0:be:00:a7:8f:35:92:91:51:bb:c5:72:00:50:cf:95:2a:
ce:a3:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:53:49 2025 by rpki-client