Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08BAC90CF6C11EF94A7F5A2762E951A.roa
File: F08BAC90CF6C11EF94A7F5A2762E951A.roa (raw, json)
Hash identifier: jeR9i9w1rdWNTP/bDcOKOBaS4EyDuaU7CAb/OW1gOS8=
Subject key identifier: C5:D4:5B:74:D6:93:69:5C:C3:1D:84:20:A6:1D:BC:2B:54:0F:21:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08BAC90CF6C11EF94A7F5A2762E951A.roa
Signing time: Fri 10 Jan 2025 16:07:07 +0000
ROA not before: Fri 10 Jan 2025 16:07:03 +0000
ROA not after: Sun 12 Dec 2027 16:07:03 +0000
asID: 17561
IP address blocks: 154.81.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80452 (0x13a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:07:03 2025 GMT
Not After : Dec 12 16:07:03 2027 GMT
Subject: CN=678145ab-170c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:b6:f7:a3:79:83:28:7d:6a:80:32:66:32:
71:9a:6d:8c:83:67:1f:b3:01:77:9a:30:1c:9a:33:
be:3e:26:32:ae:06:ef:f8:3c:0e:a9:f1:34:e8:e9:
c4:1f:51:02:61:ae:81:4a:d5:2f:cc:42:c8:a3:df:
60:60:1a:02:c8:89:96:b4:47:68:87:e8:3d:bf:d6:
28:85:24:0e:71:86:07:ce:86:29:a3:bd:88:e6:03:
0c:89:a8:aa:fd:7e:37:27:c7:57:6c:cb:ce:e2:de:
63:7f:22:f0:6d:26:63:a8:6a:fd:31:2d:70:41:67:
9b:0d:17:58:a5:aa:2d:4a:1d:44:21:4a:98:61:d3:
4e:95:08:29:f3:c8:b3:1b:a0:08:79:70:60:17:bd:
c5:72:3f:b6:db:1f:32:db:e5:7f:9d:b7:2f:05:3b:
39:28:ae:24:c4:b2:62:41:a0:65:a0:c9:d0:80:89:
5f:6f:fd:d7:33:0a:e4:04:66:a4:a3:29:41:92:4b:
db:82:51:83:9d:45:5a:ff:80:f1:7e:62:03:e5:71:
41:36:5f:c5:14:47:17:4a:bc:50:35:a6:3f:a4:17:
4b:5d:50:43:5d:d0:88:fe:b6:a8:fc:60:69:fb:c4:
47:50:90:80:d5:52:46:b5:5a:79:53:da:69:a6:1a:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:5B:74:D6:93:69:5C:C3:1D:84:20:A6:1D:BC:2B:54:0F:21:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08BAC90CF6C11EF94A7F5A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.153.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2a:d6:8a:8b:06:d0:49:f4:bd:8f:37:31:a7:99:be:79:11:
d0:a9:d8:4e:43:ff:63:b6:dd:55:d7:b5:82:ba:04:89:8c:41:
bf:b8:ba:fc:d0:59:27:2e:f4:d0:01:56:c7:8e:38:8e:e2:e9:
8c:d3:94:b4:3a:46:ba:e8:46:4b:ef:25:0a:0c:96:8e:1f:6b:
be:5b:81:9d:f2:7a:5a:3e:3c:ca:c0:de:c3:ae:2c:86:60:d7:
46:ba:f5:fd:e9:1e:de:db:70:04:ef:e6:03:97:98:39:d1:ae:
26:1c:85:77:cc:d9:8b:e1:c1:21:23:7f:3c:90:fe:4e:6c:6c:
b5:97:c0:a3:a5:1d:15:80:91:b4:cf:37:b6:83:15:ae:83:ec:
eb:6c:79:b0:8d:4d:ea:4c:16:07:7f:cc:9d:10:6f:76:f7:b1:
49:2a:c3:d2:95:0f:fa:70:f8:97:ed:aa:51:2d:f6:0e:5f:47:
9d:2b:43:4b:55:cd:20:ca:21:22:b7:c5:35:70:7d:44:38:15:
76:83:50:36:28:fd:14:e9:bd:28:76:f0:56:83:d3:1b:14:6d:
ea:82:a3:9c:5e:b6:ec:33:ef:bf:4e:5f:1c:46:47:8c:6a:83:
c9:73:21:c4:a9:0d:b6:59:2e:14:d9:40:7f:14:04:3e:91:d8:
bd:29:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:15 2025 by rpki-client