Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC09DF4DFE411EFB7557074762E951A.roa
File: 1AC09DF4DFE411EFB7557074762E951A.roa (raw, json)
Hash identifier: 83fVLj4lH9TbLX227mePHJKTO4pu2yZUlZ1F5Pajt9U=
Subject key identifier: 6D:1B:5C:A8:C9:67:61:B4:38:63:4E:24:8B:C8:0D:55:9F:93:54:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC09DF4DFE411EFB7557074762E951A.roa
Signing time: Fri 31 Jan 2025 15:00:27 +0000
ROA not before: Fri 31 Jan 2025 15:00:23 +0000
ROA not after: Tue 04 Feb 2025 15:00:23 +0000
asID: 5065
IP address blocks: 154.94.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85456 (0x14dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 4 15:00:23 2025 GMT
Subject: CN=679ce58b-ffd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:1f:29:d5:d3:42:59:d7:86:38:82:da:f4:
34:c5:ab:a8:cd:c1:b1:f4:a1:cb:80:1d:db:24:91:
ec:91:da:e7:35:55:9e:2f:c0:d4:e9:be:06:58:14:
67:79:ed:79:b2:0a:53:12:04:48:9b:d1:c1:50:0e:
f9:c8:25:c8:3c:29:43:23:6a:d1:65:d4:69:73:79:
b1:d4:94:6c:e1:6d:aa:66:5d:ea:7a:68:2d:e1:91:
57:53:ab:33:e2:e3:25:68:a3:b9:ab:4a:88:ca:01:
fc:9c:40:e5:fb:b3:48:39:24:74:f9:8f:10:fc:b0:
a5:85:ed:a0:eb:61:6e:70:ae:1c:62:fd:f7:ae:b1:
3c:9d:55:41:0f:7c:4b:40:f7:83:c9:5e:63:fc:35:
1b:b4:8d:a1:15:6c:64:97:2a:42:27:b1:e3:96:47:
c8:7c:b9:cc:06:c5:44:db:3c:42:4d:77:d1:3f:59:
db:3f:66:a3:6b:f8:86:ba:20:b2:cf:e4:5b:77:03:
d3:67:94:a8:4d:a6:44:02:6a:fe:65:24:63:b3:e9:
63:15:82:2e:66:9c:02:2a:bc:9a:96:63:3d:aa:28:
4a:be:c3:a4:23:54:dd:a0:0f:d1:3e:67:b3:74:9b:
c7:f7:21:d3:e3:b5:f1:f7:73:fb:20:e6:a4:e3:81:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1B:5C:A8:C9:67:61:B4:38:63:4E:24:8B:C8:0D:55:9F:93:54:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AC09DF4DFE411EFB7557074762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.248.0/21
Signature Algorithm: sha256WithRSAEncryption
06:81:9b:a9:6f:ba:36:49:3c:5f:54:3e:b4:a6:e9:a0:36:59:
65:c5:26:33:43:ad:91:1a:10:8a:69:08:13:93:72:b6:50:34:
6d:70:a0:83:b3:2a:9e:fb:e7:44:fb:82:a0:86:17:a1:66:6f:
94:ab:88:ba:e7:d3:bf:44:b1:50:63:e0:aa:a3:70:66:5a:91:
ba:b6:ef:8d:f7:9c:4d:1e:62:67:04:96:db:6f:9c:e6:48:7d:
db:23:2b:11:50:b5:fa:8e:4e:28:b1:cf:ae:f0:2b:30:ca:ea:
6d:5b:14:4a:12:59:0a:04:30:b4:da:20:cc:f9:96:42:55:73:
b5:a4:60:cb:54:b3:31:f5:bd:cd:51:d3:35:56:8d:62:dd:d7:
19:82:47:fc:68:db:f8:4c:61:71:e4:69:97:74:21:ac:d3:ee:
dc:ae:2a:4d:50:5e:d3:2a:ba:8b:7b:80:85:b2:52:eb:f5:b4:
c0:b7:96:c2:a5:80:40:a8:2e:16:32:aa:08:c1:63:91:67:09:
44:11:24:59:97:1a:4c:a7:32:cb:b7:a2:5c:b0:38:73:4b:0e:
68:96:5b:e6:c3:43:54:ee:3a:a3:c2:a7:33:3b:7b:d8:66:14:
30:af:51:e8:ec:9e:74:7d:4d:b7:46:1d:28:8c:50:70:c4:dc:
dc:a1:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:30 2025 by rpki-client