Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF46FE7ED2D911EFA6E88542762E951A.roa
File: DF46FE7ED2D911EFA6E88542762E951A.roa (raw, json)
Hash identifier: lDG4iol/O5Aim6D6uE4L8om627jIGNlfQyf1dN1FhRI=
Subject key identifier: AD:BB:0D:78:96:E0:AC:8A:A5:56:2E:DB:EB:30:14:2C:D4:C3:EB:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF46FE7ED2D911EFA6E88542762E951A.roa
Signing time: Wed 15 Jan 2025 00:44:27 +0000
ROA not before: Wed 15 Jan 2025 00:00:23 +0000
ROA not after: Fri 12 Dec 2025 00:00:23 +0000
asID: 984
IP address blocks: 154.81.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80725 (0x13b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 00:00:23 2025 GMT
Not After : Dec 12 00:00:23 2025 GMT
Subject: CN=678704eb-1e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:ed:91:75:4d:0c:75:26:b4:2f:e7:1f:5c:
55:72:6a:89:d4:64:3d:5f:94:de:18:b0:65:fd:6f:
ed:89:19:39:bf:e2:22:22:cf:d1:e9:f9:31:78:0d:
93:4c:56:38:6f:90:06:0e:2d:e5:ea:70:b3:84:6a:
13:83:7b:6b:b1:ff:c8:c0:b3:c1:c0:53:6f:d5:39:
1b:25:ca:ed:85:3f:e1:4b:b6:9c:93:4c:ad:91:39:
30:ef:d8:19:b3:31:7d:bc:01:8d:72:39:5d:8e:95:
27:1a:66:18:bb:e2:84:51:e3:52:4e:89:27:b3:0a:
fa:ff:bc:5a:44:68:fd:20:ee:f5:fa:2b:3a:ea:4e:
03:0a:bb:7a:aa:ac:50:7e:5d:ab:f5:b4:84:0b:50:
4a:e2:72:15:a8:57:c1:95:18:dd:29:19:17:c9:4f:
6b:68:16:26:ed:67:fa:ac:c6:08:51:36:dc:ea:62:
11:42:f9:b1:39:b2:19:2a:aa:4f:b8:cf:c8:a2:5c:
c0:60:74:68:7b:8e:d7:95:dc:a9:90:d8:2f:ca:94:
2f:a4:f4:af:3e:eb:44:ce:5c:cf:45:a9:18:ea:a2:
68:77:8d:57:09:86:ed:53:e6:7f:3f:43:ce:83:4c:
fc:79:d3:a8:d8:a2:82:0a:fa:c4:17:b1:d0:fb:53:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:0D:78:96:E0:AC:8A:A5:56:2E:DB:EB:30:14:2C:D4:C3:EB:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF46FE7ED2D911EFA6E88542762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.175.0/24
Signature Algorithm: sha256WithRSAEncryption
79:71:2d:25:fb:e8:80:6e:02:b7:4a:cd:25:8b:54:4e:32:f9:
0a:d7:6a:48:7f:0e:17:cf:d0:66:d5:b9:67:b0:ff:36:ca:29:
a8:b7:cd:0c:af:3d:37:b5:75:1d:cb:5d:6a:12:fc:6f:04:78:
18:29:83:8b:53:46:54:50:9e:cd:50:33:73:31:8d:9f:eb:b2:
45:43:fd:18:59:fc:ed:f1:0f:96:3e:c8:1d:ca:2a:25:b0:15:
9e:78:e9:10:d5:5a:95:bb:5f:46:f0:3e:18:e6:38:2c:06:ba:
a3:6d:61:b4:5b:62:c6:10:29:29:4f:35:b3:c2:31:57:a1:ff:
09:e2:1c:1f:91:80:36:9e:41:0d:af:d3:96:12:71:9a:b9:d8:
e6:de:b8:d3:d0:5d:61:fa:4b:20:f5:2b:f6:ac:5b:69:57:a2:
8a:b4:17:79:91:ca:84:1d:73:73:96:f6:96:13:5c:dc:3c:0b:
8d:6e:a8:2d:5e:6b:36:3c:80:34:d3:ac:09:1a:3c:fd:a0:6e:
19:3c:40:ac:d9:86:a4:39:39:a0:db:c2:5f:b9:4e:f8:f6:f9:
03:c9:be:e2:18:45:5c:4a:da:ff:97:f8:cc:15:d9:a5:1d:5e:
d9:58:cc:98:6d:dd:15:d2:8c:e9:16:83:00:c7:f4:11:cd:b4:
a3:b6:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:26:11 2025 by rpki-client