Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24091116CF3111EFB117E9AC762E951A.roa
File: 24091116CF3111EFB117E9AC762E951A.roa (raw, json)
Hash identifier: lQrU2kHtuFtEDPbGJ6PggciJR9sHfob0ggW1NzW78ww=
Subject key identifier: D8:2A:7B:50:5A:56:1E:64:DE:17:3B:BF:90:CE:83:6B:4D:BA:8D:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24091116CF3111EFB117E9AC762E951A.roa
Signing time: Fri 10 Jan 2025 08:59:04 +0000
ROA not before: Fri 10 Jan 2025 08:59:00 +0000
ROA not after: Fri 07 Feb 2025 08:59:00 +0000
asID: 21859
IP address blocks: 154.94.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80329 (0x139c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 08:59:00 2025 GMT
Not After : Feb 7 08:59:00 2025 GMT
Subject: CN=6780e158-0472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:bb:6e:eb:e5:95:5d:f0:13:6a:7c:e5:bf:
ec:93:0a:3a:4e:01:5e:ca:92:2b:0a:45:8f:99:f3:
0b:1d:a7:e3:ba:70:de:45:5b:78:6a:65:d2:e7:9a:
11:3e:0f:15:18:2f:e3:15:43:28:fc:61:ee:c3:43:
de:88:71:76:0a:92:dc:73:9c:d7:ce:62:ac:af:cd:
b2:11:ba:9f:37:31:ff:cd:5e:94:85:7b:36:49:a9:
fe:8f:c5:d2:d4:70:24:ad:49:5e:36:1b:0a:ac:0f:
a6:89:58:02:3d:49:b2:06:c6:c9:b8:d3:1c:70:42:
48:16:dc:ab:23:1d:63:74:97:01:df:28:cc:b2:ab:
46:1b:df:f7:f3:f3:fc:c3:b6:d9:e7:52:d5:10:88:
13:7c:9d:5c:0c:ed:d0:25:09:26:9c:e5:b6:21:80:
de:fe:df:16:e6:b7:85:fd:65:8b:89:6b:30:38:9d:
be:96:e6:4a:4d:f7:b4:d8:47:44:6a:42:fc:ff:fa:
34:d7:4c:1d:9c:6e:0f:6c:fa:d6:48:76:94:49:a3:
f0:6c:a5:67:09:4a:fa:41:88:ab:6f:92:80:05:40:
25:57:eb:08:61:1b:4b:73:98:0e:4c:02:1a:7f:db:
51:50:0c:04:8c:c9:22:41:cb:c7:46:47:2e:ea:96:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:7B:50:5A:56:1E:64:DE:17:3B:BF:90:CE:83:6B:4D:BA:8D:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24091116CF3111EFB117E9AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:10:6e:e3:a4:e2:bf:52:ea:27:33:da:4e:70:cc:3c:13:15:
56:55:1f:23:87:d1:f8:2d:e2:cf:6f:70:81:4f:70:a8:04:13:
a9:75:2c:24:10:5f:d6:bf:75:5c:b5:49:54:da:df:46:f8:d8:
38:9c:fe:04:7a:aa:14:03:4e:60:5b:38:92:c8:ee:06:4c:8c:
08:d3:7e:a1:1f:94:4f:02:b2:79:02:52:36:ac:23:49:11:ee:
4a:8a:89:37:f2:93:ac:4a:e2:51:ce:3c:ea:58:f8:f3:35:33:
ed:0e:35:de:91:1f:6a:7b:b6:db:c2:bf:f0:35:ab:e3:14:bc:
8b:82:5c:21:c6:5e:04:45:e2:e9:72:85:76:cc:1d:cb:70:7f:
09:e0:34:b7:d8:a2:9c:09:b0:46:87:21:72:de:d8:d7:3d:74:
a2:90:b5:e8:56:4a:55:75:a8:98:ff:ee:61:b0:f4:7a:c2:86:
ed:ab:1a:04:cc:aa:c6:68:3a:7b:88:7a:fb:d2:a3:86:68:81:
b9:2f:06:fb:d7:45:a9:9c:88:c9:fa:af:ff:9f:e8:c4:2a:8c:
64:99:dd:f4:cd:74:31:57:a1:ba:b2:c0:ab:76:e9:44:60:32:
02:64:0c:39:08:c8:99:36:44:38:81:49:59:7f:bf:ab:83:fe:
26:6c:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:50 2025 by rpki-client