Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CEA95D8DA3D11EFB3E00F53762E951A.roa
File: 0CEA95D8DA3D11EFB3E00F53762E951A.roa (raw, json)
Hash identifier: qK+IFFeUwkvkvASXV8X4etwTk2bEwNJtIKUl5m2w1ZY=
Subject key identifier: 6A:9B:B6:25:9B:71:1B:CD:5D:C7:07:C1:5A:C8:79:AF:EE:FF:08:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01457A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CEA95D8DA3D11EFB3E00F53762E951A.roa
Signing time: Fri 24 Jan 2025 10:22:02 +0000
ROA not before: Fri 24 Jan 2025 10:21:58 +0000
ROA not after: Tue 11 Mar 2025 10:21:58 +0000
asID: 138915
IP address blocks: 154.95.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83322 (0x1457a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:21:58 2025 GMT
Not After : Mar 11 10:21:58 2025 GMT
Subject: CN=679369ca-f7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:99:6a:3a:81:b3:6f:60:59:10:14:07:d1:57:
10:88:11:09:cd:22:46:89:f9:02:f5:78:96:b5:ae:
a0:47:da:2a:48:1d:0f:d8:4b:c0:3e:9f:f1:13:85:
70:c4:c5:ed:de:13:52:d3:06:0b:46:87:89:29:cc:
58:e4:7e:8b:57:6a:67:7c:33:75:ab:b4:04:1e:65:
8e:3f:6a:53:af:5b:a0:95:2a:19:75:4e:d8:c5:cd:
ca:5f:04:d0:c9:25:6e:3c:1c:f6:8b:45:c2:50:f7:
69:5c:21:f8:56:62:ec:43:76:45:e8:4c:15:3c:4f:
88:43:f1:e0:e2:81:22:b8:04:a7:3c:0b:0a:ff:d0:
6a:05:5f:91:00:41:6d:07:25:91:4c:18:07:ff:b6:
56:2c:a1:9f:3a:fb:17:b1:3b:78:79:c9:76:7d:ef:
da:8e:15:c3:e4:27:81:95:4d:42:dc:70:d4:91:4f:
13:5d:99:d3:ca:bd:d6:9e:ec:ab:85:ab:5e:2b:6e:
52:fb:f2:77:d0:94:54:20:db:8b:d0:80:87:9a:69:
0c:77:cc:7f:f9:9c:03:22:10:92:70:c9:ef:7e:8b:
86:2a:43:03:fd:82:78:1d:9e:39:ad:fd:ef:b2:c0:
f6:b8:eb:53:f2:2c:50:8c:4a:8e:7f:8b:b3:4d:ae:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:B6:25:9B:71:1B:CD:5D:C7:07:C1:5A:C8:79:AF:EE:FF:08:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CEA95D8DA3D11EFB3E00F53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.81.0/24
Signature Algorithm: sha256WithRSAEncryption
56:78:76:fb:ad:9b:a3:53:a9:8e:04:ab:25:60:cf:69:7b:4d:
11:7c:b2:f0:f3:cd:b1:11:71:a1:42:a8:af:06:75:63:36:e5:
37:a9:98:ff:c3:10:f4:4c:aa:7e:37:28:4b:4c:61:40:ae:ff:
f2:b7:fc:c8:dd:a4:22:22:e0:4f:bf:f3:47:ac:1c:de:49:b4:
b6:33:04:87:59:29:4b:5e:df:a9:70:e9:a5:16:30:b7:d0:10:
52:cf:5e:76:bf:47:d1:61:bd:b8:b5:18:48:9f:d8:ec:65:ac:
dc:62:fb:94:47:a4:3a:91:35:31:71:e3:2c:1f:32:c0:1e:a7:
18:49:b2:20:f6:ef:bb:b3:9a:ed:fb:c0:cd:8c:32:f6:33:06:
f5:68:75:7b:68:34:2e:94:58:78:5d:53:66:a2:8b:49:f1:ff:
38:5e:a0:f1:6b:6d:2b:e1:f3:fc:df:1d:36:fa:d8:39:f8:99:
b6:8c:f1:10:f0:00:75:6e:cc:9a:87:d7:42:59:b4:d2:29:46:
75:aa:59:b6:58:52:3d:1a:4e:0f:64:17:a8:68:f1:a5:85:6a:
c1:22:06:9b:31:d0:ca:e6:e8:59:32:ce:0f:52:3e:61:f0:8b:
75:7c:1f:5d:9a:ae:18:19:01:62:8a:0e:ee:92:38:10:9f:39:
fa:ee:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:48:41 2025 by rpki-client