Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1B4B1CCF6211EFBDCD7563762E951A.roa
File: 8C1B4B1CCF6211EFBDCD7563762E951A.roa (raw, json)
Hash identifier: V57S35BXaluMAh0+BhSNCody8ATBFtIIzBe2sg5KlIM=
Subject key identifier: 70:40:20:79:05:C0:7E:62:B5:72:0C:D8:FD:E8:3B:AD:7D:BD:E9:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1B4B1CCF6211EFBDCD7563762E951A.roa
Signing time: Fri 10 Jan 2025 14:52:44 +0000
ROA not before: Fri 10 Jan 2025 14:52:40 +0000
ROA not after: Fri 12 Dec 2025 14:52:40 +0000
asID: 984
IP address blocks: 154.81.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80411 (0x13a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:52:40 2025 GMT
Not After : Dec 12 14:52:40 2025 GMT
Subject: CN=6781343b-5565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:24:6e:a8:cf:16:40:e1:3f:b9:d8:e3:35:
84:fd:43:49:ee:f7:64:16:db:32:f1:5e:ef:42:7d:
dc:73:5c:2e:da:61:cf:ef:65:48:e5:4a:99:2e:7d:
09:d9:1a:99:b5:2d:ce:6a:88:9e:cb:d3:fb:09:ff:
05:87:e5:18:67:e1:27:94:15:88:52:ca:1c:4b:a1:
ab:de:4c:60:a7:26:c0:54:00:01:97:71:e1:ac:94:
97:91:34:3e:cd:8b:29:9c:f8:de:64:51:1c:0c:27:
80:a7:19:a6:e5:4d:97:e6:4e:0f:8f:51:cc:0c:3e:
e6:42:6c:90:fc:04:db:70:9d:c0:f9:31:fe:38:78:
71:54:4b:b1:d7:bc:65:42:ef:62:6e:fa:fb:72:8f:
38:3a:52:b6:2c:ea:47:01:a2:bf:55:fe:12:31:59:
74:06:f9:b7:8c:fe:9c:88:88:31:71:bc:56:54:2c:
9c:e8:c9:39:82:49:6d:9b:85:34:bb:f4:ad:3c:f8:
61:ca:50:58:80:a6:54:3b:4d:46:55:94:26:4b:97:
68:a8:f8:04:a6:de:6b:64:a4:60:80:24:b5:19:fa:
be:72:c7:c0:eb:87:cb:9a:aa:d0:62:12:75:5f:8c:
06:ee:22:c5:5e:11:45:32:b9:14:a6:f8:d1:67:bb:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:20:79:05:C0:7E:62:B5:72:0C:D8:FD:E8:3B:AD:7D:BD:E9:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C1B4B1CCF6211EFBDCD7563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1e:13:2d:bc:1c:a7:9f:91:b5:a1:a4:6c:61:a6:90:d5:38:
b5:3b:94:bb:bf:03:bd:96:37:99:87:24:a0:83:46:2f:29:ee:
44:95:98:b2:ac:3a:a8:94:ed:db:7f:a7:4f:7a:7a:1a:55:7e:
4d:1a:41:c2:06:b7:14:ef:3a:f2:23:ca:ae:26:c3:8d:fc:ca:
87:c5:0c:f9:8f:11:bc:39:3c:1e:3b:49:7d:6e:b4:e1:e0:92:
e7:69:cc:8d:8f:c0:ec:0e:db:29:ea:a1:eb:c2:a3:10:bc:bb:
63:ca:4a:71:97:13:b3:8e:8a:a4:bb:92:33:6d:6e:31:d9:2a:
33:b1:80:23:db:75:ea:84:3b:58:16:64:7e:48:37:74:f9:d0:
af:d1:06:2e:21:2e:cd:ca:49:62:62:5c:7e:5e:5c:94:17:e4:
3e:6a:4f:2d:98:90:92:3b:76:fd:6e:c8:bc:94:e5:de:40:47:
c1:46:d1:40:0f:4c:1b:a7:24:8a:9e:f3:74:e4:88:b4:e5:ed:
58:85:6f:88:71:e7:d8:e3:9e:59:b0:b6:25:99:6c:32:bc:f9:
56:1e:5d:60:e1:b0:b2:6a:12:df:d5:a3:4b:74:7a:fc:94:f6:
18:72:91:28:35:9d:94:9e:dc:c1:15:4a:14:c8:f9:c6:ed:6d:
7c:92:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:54 2025 by rpki-client