Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17F4567CDA3711EF867DB9A9762E951A.roa
File: 17F4567CDA3711EF867DB9A9762E951A.roa (raw, json)
Hash identifier: mblr0XBZp4Y/KRBSMPLygfqntl9xU2ehI5V1rEgmHps=
Subject key identifier: 4D:CF:BE:D5:22:B4:95:6A:B5:41:D9:39:F3:4D:4E:B5:E9:6F:5D:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014509
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17F4567CDA3711EF867DB9A9762E951A.roa
Signing time: Fri 24 Jan 2025 09:39:23 +0000
ROA not before: Fri 24 Jan 2025 09:39:19 +0000
ROA not after: Tue 11 Mar 2025 09:39:19 +0000
asID: 138915
IP address blocks: 154.95.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83209 (0x14509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:39:19 2025 GMT
Not After : Mar 11 09:39:19 2025 GMT
Subject: CN=67935fcb-796c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:bb:5d:51:5d:4c:63:2f:5c:9b:ba:57:b0:
60:33:e4:ba:d6:ca:58:23:1a:af:1e:a9:05:b7:9b:
a2:14:37:50:51:f7:e4:42:d9:cb:84:22:88:b8:c3:
a8:f7:56:aa:5f:e9:66:61:9e:33:39:70:27:3f:35:
cf:65:be:23:d5:8d:89:00:f8:9f:47:ce:c4:78:b2:
c1:7e:7b:39:a8:61:b2:aa:5b:6a:a5:72:5a:44:53:
5e:7b:68:4d:e1:71:05:56:28:14:57:07:50:bf:10:
cd:19:70:e1:70:9e:30:b7:9f:e6:76:7d:a3:06:82:
1f:c3:5f:16:3e:f6:e1:ce:59:5e:20:92:86:ad:80:
f0:e6:71:a5:ae:78:64:8f:81:38:39:e1:bf:55:ce:
39:c9:e6:51:d9:ca:6a:49:5a:78:ea:d6:1a:c1:70:
13:b6:91:02:e8:79:90:8d:35:53:df:ea:bc:b2:6f:
21:da:ef:ac:c1:21:84:ae:0c:68:4b:ae:7b:6d:ca:
fc:04:75:60:6b:76:0e:a7:50:11:e0:2f:5a:bc:5a:
7e:bc:4a:10:39:49:96:ac:4c:39:ca:16:4a:05:9e:
48:94:f8:3a:14:60:d7:20:d9:01:f9:80:ff:b2:98:
2f:be:22:a4:db:fe:eb:a1:96:ed:64:4b:43:93:e0:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:BE:D5:22:B4:95:6A:B5:41:D9:39:F3:4D:4E:B5:E9:6F:5D:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17F4567CDA3711EF867DB9A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:50:95:ec:19:9a:dc:ed:64:96:e5:a4:c2:0b:93:e8:b3:33:
32:1f:59:ce:83:cf:aa:0c:07:76:32:89:37:8c:73:c3:42:45:
34:46:44:51:4e:f6:ee:92:69:d2:3e:97:15:3e:56:44:31:b4:
12:55:4c:f1:90:bc:9f:28:57:a5:20:1c:d1:a7:32:5a:27:60:
fb:7d:d9:d9:3d:bd:75:14:8d:88:57:a1:d6:1e:f5:04:69:32:
62:bf:bd:31:56:8b:f0:d4:98:d7:75:2c:19:4f:f2:d0:23:1a:
a8:bb:eb:48:62:54:d3:6e:79:42:c6:1c:29:70:28:04:0c:fe:
6a:60:7f:87:c3:62:12:57:e6:d5:76:2b:d2:97:f5:42:6d:97:
67:3c:ce:1b:2c:62:97:82:25:46:cc:bd:e6:27:02:a7:69:72:
86:3e:a3:df:04:0d:44:b1:9f:8f:f6:db:b2:1e:39:66:00:c7:
01:f3:75:16:41:a7:e4:27:77:1f:9c:6f:14:11:18:69:d2:ab:
25:19:fb:8a:43:d8:de:0a:96:fc:8f:e6:09:c0:5b:a0:66:c9:
38:c1:6e:cb:1f:5e:aa:83:1c:6d:83:f8:9c:67:80:ed:36:4e:
e5:88:7b:7d:9c:78:2a:da:66:f6:4e:5a:d1:92:3e:19:91:c3:
7c:58:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:01 2025 by rpki-client