Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA3C5E0CF6211EF95D15565762E951A.roa
File: CEA3C5E0CF6211EF95D15565762E951A.roa (raw, json)
Hash identifier: QydTyGOP2QWo9rp07CTbZXI6m3xKBVdCdb1w+h/HMP8=
Subject key identifier: 06:5B:53:4E:70:DD:0F:38:21:30:0E:43:70:B0:4D:B4:44:17:AE:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA3C5E0CF6211EF95D15565762E951A.roa
Signing time: Fri 10 Jan 2025 14:54:35 +0000
ROA not before: Fri 10 Jan 2025 14:54:32 +0000
ROA not after: Sun 12 Dec 2027 14:54:32 +0000
asID: 17561
IP address blocks: 154.81.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80413 (0x13a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:54:32 2025 GMT
Not After : Dec 12 14:54:32 2027 GMT
Subject: CN=678134ab-8e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:2c:20:3f:ae:1d:b6:32:8a:1e:a6:7b:99:
bc:0b:38:ec:20:89:74:81:29:97:c7:da:cc:ae:d8:
bc:57:43:8a:50:05:ec:2b:9e:20:4e:a6:55:e0:08:
c9:d1:b7:86:15:82:df:f0:c9:2b:73:07:84:21:2d:
92:a5:b4:f6:de:88:94:26:01:00:89:f0:0f:d3:f2:
12:67:30:9c:a9:e3:4c:06:14:46:e2:7c:fc:cb:4e:
57:fc:44:3f:a0:75:dc:28:d7:64:36:85:3c:27:37:
9d:09:8a:2b:54:7f:7a:3c:46:36:1a:52:d0:bd:8f:
a9:04:2c:ca:96:64:6c:0f:fe:2d:06:b6:91:d0:71:
a5:73:2e:df:47:bf:aa:bf:52:f9:e6:68:4b:40:5e:
94:28:66:19:dd:ff:78:eb:09:67:2d:44:ad:7f:90:
1f:9b:1c:1f:8a:75:20:cc:55:b8:1e:99:e9:4c:02:
09:e3:4b:f2:7d:78:9b:fa:53:7c:6d:a8:3a:10:94:
80:aa:81:70:b5:55:3c:29:95:2a:0c:34:1a:bd:af:
fc:3c:8d:c3:d3:41:eb:bd:25:98:43:2e:35:52:f9:
f6:bf:a5:65:4c:e8:29:c0:95:b0:5c:47:80:53:f3:
cf:68:76:20:7a:85:d3:28:40:e2:8a:39:47:b3:96:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:53:4E:70:DD:0F:38:21:30:0E:43:70:B0:4D:B4:44:17:AE:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA3C5E0CF6211EF95D15565762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.146.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a7:1d:66:45:d2:45:16:90:d0:2e:82:6c:29:2b:bb:d3:dd:
2c:f3:07:a5:98:f9:3f:ae:fa:67:5a:21:f6:f3:21:87:16:f3:
55:27:d6:b6:96:e1:2c:51:fc:14:34:4c:da:98:8b:48:db:56:
27:be:f7:fa:9c:8d:08:64:73:ea:19:66:eb:cc:e7:53:ba:af:
7d:99:79:c9:4f:17:ba:cc:90:c9:e6:f8:03:3e:e0:61:f7:f8:
df:95:c3:e4:84:e3:35:8a:0d:d1:b5:0f:06:15:8c:18:c2:6b:
61:28:c5:b5:03:52:58:d2:81:29:04:ec:44:f1:58:47:d7:f7:
7d:a8:82:68:1d:a3:9a:2c:4e:ec:b4:3a:4d:fd:e3:7e:cb:d3:
cd:4b:97:53:78:4c:7e:1c:84:ff:1a:da:0a:a2:cc:34:fe:ef:
f9:d2:75:b3:35:d3:60:57:ed:7b:84:be:c4:a6:7b:08:13:e4:
75:c2:15:6d:2e:b4:d8:e1:c3:40:bc:5a:d2:b7:d0:a5:6c:ba:
8a:ae:dd:ee:72:72:a6:05:e2:d2:ca:4b:35:6c:7c:36:e1:c7:
62:48:ac:7b:b1:2d:4d:39:d0:4c:45:2f:68:4e:c5:dd:53:0a:
8b:c6:40:d3:03:2d:dd:4c:6c:a8:2c:18:86:09:12:7c:ea:e7:
0c:06:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:02:00 2025 by rpki-client