Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF3DE3ECF5F11EFB6221D50762E951A.roa
File: ABF3DE3ECF5F11EFB6221D50762E951A.roa (raw, json)
Hash identifier: mnR4NSXUqRMJ1DSiyDBhaZXyGovx699g1y6EMdz8/qw=
Subject key identifier: 03:8E:C7:2D:CD:77:E4:9D:1F:43:F7:3E:98:CE:5D:06:58:2B:9A:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A05
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF3DE3ECF5F11EFB6221D50762E951A.roa
Signing time: Fri 10 Jan 2025 14:32:09 +0000
ROA not before: Fri 10 Jan 2025 14:32:05 +0000
ROA not after: Fri 12 Dec 2025 14:32:05 +0000
asID: 984
IP address blocks: 154.81.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80389 (0x13a05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:32:05 2025 GMT
Not After : Dec 12 14:32:05 2025 GMT
Subject: CN=67812f68-e1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:e8:c0:13:0d:70:c9:b2:c8:11:67:ba:55:
24:0c:59:ed:8e:a3:a8:c5:bb:c8:58:ec:94:b2:3b:
41:2f:03:82:16:41:69:68:bd:a7:2a:8e:8c:13:6a:
7d:12:0a:81:3b:9d:de:7a:e5:2f:d8:5e:b8:2e:66:
e3:e8:d6:3c:56:d2:62:3d:10:34:77:ae:e9:fa:b6:
15:3d:19:b2:0d:e1:be:23:14:92:71:cb:9a:6d:a5:
44:04:3b:5a:df:2e:25:29:81:e6:73:d5:6e:ec:05:
bd:68:f6:79:5f:f4:f9:01:2e:34:4a:56:bf:af:84:
4a:2c:de:3b:f2:14:c7:f2:15:08:b9:87:04:7f:cb:
04:3b:a7:12:e6:1a:07:aa:55:95:d5:9b:a2:0e:ff:
cf:ce:82:eb:23:e8:29:12:67:99:15:da:cc:2a:59:
c1:79:22:02:9c:fd:e2:c3:70:10:a5:ab:45:16:a2:
8c:38:55:e6:ff:d7:a3:67:42:44:fc:8f:67:6c:0f:
80:ae:46:9e:28:d9:e7:77:8a:bc:74:33:0a:76:37:
fa:84:fe:b7:4c:90:e8:d1:43:2d:88:8a:7c:79:de:
f0:cf:77:af:ae:7e:58:be:be:fb:3d:1a:8c:ca:ad:
07:ee:a9:de:e9:10:6f:3b:de:3f:2c:fe:2e:b6:eb:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:C7:2D:CD:77:E4:9D:1F:43:F7:3E:98:CE:5D:06:58:2B:9A:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABF3DE3ECF5F11EFB6221D50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4c:ab:af:98:23:b1:d2:2a:fd:7c:43:99:5b:87:b9:4b:87:
ed:db:7c:43:61:9a:f8:e1:dc:b9:8e:14:b3:05:47:37:ac:72:
d3:75:fc:e9:1e:f4:aa:e2:e0:bc:7c:b7:7a:88:f2:37:35:dd:
aa:7c:32:40:49:92:cb:d2:8d:a5:d8:a1:c4:31:f6:20:94:4d:
18:21:a4:45:b4:1b:7a:13:a0:9d:33:90:de:63:86:c4:4b:39:
28:fe:7b:97:e8:79:a6:da:f4:83:3e:c6:bd:43:a0:d1:46:67:
4d:85:1f:e4:b3:4b:b8:a2:20:eb:4b:4c:5b:c4:19:ce:04:b6:
34:42:65:5a:82:5e:0a:6f:91:ca:52:42:45:8d:26:bb:ef:ac:
ad:1e:e0:78:35:64:5e:93:42:b2:79:55:c8:e6:49:38:20:b0:
1d:53:08:3a:be:34:5b:6a:aa:82:7b:bc:fa:d2:be:d2:ea:0e:
de:89:3e:14:ac:bd:c1:56:f1:45:82:d2:34:b8:7a:9f:7f:b1:
54:3b:a7:99:9e:a6:86:3a:a6:8f:9c:4c:b1:38:ca:13:aa:6d:
a5:cf:f3:d4:d6:9b:8b:7d:0f:db:df:54:24:44:26:b3:16:1c:
6b:05:46:cf:91:c6:d4:7e:a5:cb:ed:ad:70:fb:09:99:20:b1:
e7:5f:95:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:02 2025 by rpki-client