Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12783274C36011EFAA4F2780762E951A.roa
File: 12783274C36011EFAA4F2780762E951A.roa (raw, json)
Hash identifier: Cj3GDE9IhvAvi5wCpLio8qrweEzTT61cV/NR0ZKyTE8=
Subject key identifier: 59:E9:9B:E7:6B:CB:52:BC:77:32:60:88:AC:6B:1D:95:10:04:33:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01263E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12783274C36011EFAA4F2780762E951A.roa
Signing time: Thu 26 Dec 2024 08:04:47 +0000
ROA not before: Thu 26 Dec 2024 08:04:43 +0000
ROA not after: Tue 04 Mar 2025 08:04:43 +0000
asID: 138915
IP address blocks: 154.94.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75326 (0x1263e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:04:43 2024 GMT
Not After : Mar 4 08:04:43 2025 GMT
Subject: CN=676d0e1e-4043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:52:bd:ed:6a:55:5b:05:3b:33:ed:ef:80:
4f:d9:b9:aa:2b:21:5b:b9:f1:c0:65:10:0a:72:b3:
f8:ea:8a:c9:14:01:00:67:d8:5f:4c:6c:bf:c0:1e:
ef:89:3d:0d:6e:fc:e8:53:06:02:a6:fd:59:66:e8:
54:d7:30:2d:da:a9:fe:9f:de:92:14:41:27:55:ad:
1b:2a:85:bb:0d:ec:9d:ce:aa:06:a6:7e:2c:a9:99:
f4:a3:4d:2d:1a:70:2f:c8:0b:4f:a2:94:e3:86:34:
d1:16:d7:44:81:24:e4:f6:e5:08:f7:68:f2:71:17:
98:44:96:00:36:dd:63:50:c8:fe:4d:21:c8:06:bc:
53:db:bc:60:fd:c1:1d:22:cf:af:15:d1:e9:ec:91:
5e:75:de:d5:69:96:fe:da:95:ee:c0:45:b2:49:89:
5a:49:08:e0:40:c7:c0:cd:e6:11:e3:01:38:d1:a7:
3d:76:53:b4:a6:77:3b:e1:6d:0f:e6:9b:ac:a0:b6:
f4:de:2e:a2:84:a0:ba:39:c7:48:96:02:ca:e3:b8:
46:c7:25:cf:33:9f:02:1a:aa:5c:c5:73:00:d6:2a:
5f:c5:bf:b2:7c:6a:1d:6a:e1:64:9c:71:77:42:dd:
ce:6a:80:53:26:bf:d9:df:db:23:0a:d2:cf:b0:06:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E9:9B:E7:6B:CB:52:BC:77:32:60:88:AC:6B:1D:95:10:04:33:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12783274C36011EFAA4F2780762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a4:88:98:ac:23:ed:35:03:48:77:16:c9:2e:30:31:7c:a2:
4f:56:90:be:06:c9:49:97:37:72:40:45:a2:ef:2c:bd:96:ea:
48:ee:08:3c:a1:14:ef:36:a7:92:cd:d9:fa:4e:5f:5c:2d:ac:
d7:34:be:55:bd:ef:3b:a5:6f:28:db:ac:c0:d1:5a:0d:89:de:
94:ce:df:00:5e:a9:c4:bf:c8:42:76:43:21:92:f1:3a:92:0b:
89:59:18:2c:f0:e9:cb:01:0f:20:b7:f7:13:30:2b:61:7d:ed:
d0:37:e7:c7:6b:8c:98:2c:d3:cd:37:35:d7:64:81:5d:1d:6f:
74:28:12:fa:ef:66:77:07:c9:59:be:b1:1a:70:c3:73:f9:00:
d3:35:8c:5f:10:61:5c:76:4c:68:cc:14:fd:8a:dc:09:d0:4b:
6f:95:79:1f:64:94:fb:88:18:ce:96:b4:96:fd:b5:fb:10:bd:
6e:ee:e7:22:76:06:5f:86:3c:bd:7f:23:95:c3:61:3f:13:87:
a9:d0:4d:4e:81:fa:b4:7e:96:35:0c:32:9a:0c:27:b2:af:67:
8b:21:4c:f9:93:15:68:85:47:2a:5e:6a:d0:76:d1:41:f7:9b:
66:7a:cb:04:64:c7:b3:00:55:47:c1:ca:88:ad:34:fd:3a:95:
72:40:65:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:06 2025 by rpki-client