Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93268666CF6111EF84FFF65C762E951A.roa
File: 93268666CF6111EF84FFF65C762E951A.roa (raw, json)
Hash identifier: IiL6KuFTM0q04CWk9N9m+CqJF2Z0HBsL320othBO+rA=
Subject key identifier: F1:B1:1F:66:5D:CD:EF:71:6E:06:CB:FA:FE:6D:31:A9:99:62:17:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93268666CF6111EF84FFF65C762E951A.roa
Signing time: Fri 10 Jan 2025 14:45:46 +0000
ROA not before: Fri 10 Jan 2025 14:45:41 +0000
ROA not after: Fri 12 Dec 2025 14:45:41 +0000
asID: 984
IP address blocks: 154.81.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80403 (0x13a13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:45:41 2025 GMT
Not After : Dec 12 14:45:41 2025 GMT
Subject: CN=6781329a-872c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:c4:1b:09:dd:75:3d:32:b5:a2:ea:e3:98:
2f:25:4d:91:a6:89:fb:7d:f8:4d:c1:07:7d:61:13:
d3:00:5c:df:b0:26:a4:a3:0c:79:a3:f5:8e:3b:ba:
25:0b:50:21:82:94:a2:37:a1:8c:d1:08:a9:c1:14:
b2:4a:cb:b0:24:db:60:9d:01:ab:42:49:f9:a4:c4:
63:7e:a5:a0:f0:3d:cb:21:5e:89:3c:de:8c:66:e8:
51:81:96:75:ee:f3:6f:fe:b3:1c:30:25:0d:21:9c:
4e:7b:4a:a2:46:0c:3b:bb:20:00:b9:54:ee:e5:4b:
37:80:35:b1:a3:64:85:7d:db:41:1d:7d:1a:54:e3:
d0:88:98:85:ed:5f:50:90:33:1f:cd:dd:98:b8:21:
97:c3:36:33:c3:d0:77:2e:2b:b2:39:1c:14:be:f2:
ca:54:48:4d:a0:a9:8c:d0:0b:0f:4d:7d:15:96:eb:
88:d1:92:97:37:cd:47:1a:a4:91:d1:d4:cd:42:66:
ab:2e:fe:aa:0e:3a:45:e6:87:4d:2d:19:f9:79:3c:
85:a1:e2:54:46:cc:09:2b:fa:33:74:63:e2:d8:04:
2c:0e:2d:54:06:07:68:a6:f0:95:ee:10:7d:67:9f:
a4:3c:84:40:4a:6d:10:e8:fe:f3:6c:82:35:76:9c:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:1F:66:5D:CD:EF:71:6E:06:CB:FA:FE:6D:31:A9:99:62:17:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93268666CF6111EF84FFF65C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.141.0/24
Signature Algorithm: sha256WithRSAEncryption
39:8e:30:94:76:3f:52:cf:bf:c9:57:85:27:24:35:ac:5b:e9:
ce:2a:06:4b:09:ac:0b:7e:89:97:fb:37:94:c7:e6:7b:44:b8:
af:73:64:f0:c4:a7:41:1e:ae:d5:95:48:a9:5a:89:ed:17:37:
e4:aa:fe:d4:bb:3c:12:d4:1b:06:f4:7c:c9:b0:8f:a5:70:89:
30:78:b4:56:2f:e0:be:bd:b2:42:78:cb:90:e1:6f:3e:9d:74:
7d:88:6a:01:e4:8b:38:09:da:b5:8d:ea:a2:58:cd:35:c7:09:
05:11:bc:7b:d8:e1:7d:2c:a5:04:5e:c1:96:b3:63:8f:bc:de:
be:be:5a:89:c4:73:83:f7:f0:07:73:b2:25:8e:6f:b4:6e:3f:
15:43:2e:cc:63:6c:89:2a:1b:b6:79:6e:6b:24:31:1b:08:0a:
5d:5e:c7:3f:0e:07:17:a0:4b:bc:ef:3d:58:e9:7e:73:8d:db:
aa:dd:dd:ce:16:c5:c0:2b:a2:a5:e8:9c:70:44:9a:6a:91:c7:
f8:4e:77:c8:9f:3d:60:eb:67:69:67:99:2a:c7:79:0c:f3:c9:
6c:8e:2d:de:ce:1d:c6:54:9c:28:f8:c4:70:14:c9:2d:29:f6:
54:f4:1b:81:d4:b1:03:36:ff:78:f5:7d:a1:ff:1d:6f:5e:06:
fe:25:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:47 2025 by rpki-client