Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A03D3DADC0611EF8CD96660762E951A.roa
File: 2A03D3DADC0611EF8CD96660762E951A.roa (raw, json)
Hash identifier: fqxy54J4eeE6IrKMH3br4NhtnuK6JiuFb+nyBZ4BimQ=
Subject key identifier: EA:F5:59:5A:FB:0E:DA:F1:3C:9E:B7:7D:EE:B3:D0:44:05:FE:51:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A03D3DADC0611EF8CD96660762E951A.roa
Signing time: Sun 26 Jan 2025 16:54:10 +0000
ROA not before: Sun 26 Jan 2025 16:54:07 +0000
ROA not after: Thu 20 Feb 2025 16:54:07 +0000
asID: 142062
IP address blocks: 154.86.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84736 (0x14b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 16:54:07 2025 GMT
Not After : Feb 20 16:54:07 2025 GMT
Subject: CN=679668b2-8dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:81:b4:8e:2f:16:21:0c:51:4a:00:b6:6f:
47:d6:21:36:c8:15:6d:12:7a:fd:b7:29:fe:b1:ac:
a1:ae:b3:49:66:55:3b:ad:d8:03:1e:80:39:67:ff:
e1:e7:97:66:e3:d2:d6:26:4e:8c:5f:6e:4d:03:d6:
46:78:55:91:37:43:34:fe:f1:5b:95:57:22:2f:e3:
ad:ca:9e:2c:c9:b3:21:77:64:21:58:2e:61:1a:57:
b6:5f:7c:42:a1:d4:cd:9d:9f:ce:23:3e:3c:c7:0f:
1b:9a:c4:c7:a3:f4:5c:91:77:5b:4e:3a:1d:23:a5:
bd:9f:05:91:20:ad:43:65:b6:41:b3:86:08:39:b9:
87:80:ed:c9:d4:18:8e:25:0c:6b:a0:bc:79:97:c9:
9e:81:b1:e2:41:84:77:cf:7c:2c:6e:ba:f2:35:0e:
0f:d6:46:8e:ac:84:f3:3c:5f:47:6f:84:97:6d:5c:
9b:a1:88:c0:cd:bd:41:af:2a:40:93:e6:74:c1:ef:
67:db:21:bc:ee:a3:af:74:cb:82:f0:29:ca:7c:95:
bc:d8:2f:29:8f:e9:d7:00:02:9e:ae:a3:a5:05:47:
7f:ea:3a:fe:30:bb:40:5c:a3:5d:7f:f5:3a:45:c4:
38:5c:f0:04:1f:aa:13:c5:bc:91:fd:65:a5:73:9b:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:59:5A:FB:0E:DA:F1:3C:9E:B7:7D:EE:B3:D0:44:05:FE:51:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A03D3DADC0611EF8CD96660762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.94.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0d:86:b9:f4:30:d4:8f:71:f4:fd:d9:9e:28:81:66:7a:13:
5a:b8:84:6d:fc:fa:ce:0d:65:d5:32:1a:b0:61:74:eb:79:e6:
cf:d9:9b:d0:0c:74:6a:e1:5b:9b:2c:47:97:44:bc:4b:f1:0a:
f9:c5:12:c7:f1:ed:36:b2:6f:9e:57:91:de:27:83:5a:8d:2d:
00:b1:00:73:99:a7:1f:ed:02:e5:d9:1d:cb:ad:ef:7d:d5:af:
bf:bb:f4:8f:53:bd:6b:b5:7d:08:5a:45:7a:d8:ef:90:38:19:
06:2e:03:bb:10:27:8d:e0:22:0e:8e:97:64:1c:bd:ed:49:68:
eb:08:13:e4:54:82:08:a7:a1:64:60:85:24:a1:94:f6:cd:dd:
7d:5a:3e:59:9b:c2:f0:a3:a2:18:d6:a9:b8:1d:e7:01:e5:3c:
a4:5d:b1:16:2d:2b:97:09:24:5f:d3:7b:1d:07:42:e4:ba:e7:
1f:6c:45:03:3d:c8:c4:fd:91:f8:bf:73:fc:8e:4d:38:c4:b0:
71:d1:e7:d3:0e:24:21:23:e1:83:05:27:de:e7:25:27:3f:b3:
99:51:6f:19:88:cc:bb:b7:73:db:50:8c:2f:a3:5a:d5:7d:da:
03:90:e9:96:07:05:dc:6a:c3:9d:c3:d4:9c:f1:57:f2:5b:77:
1b:8d:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:00:56 2025 by rpki-client