Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D4B2272DD6011EFB6CE2982762E951A.roa
File: 2D4B2272DD6011EFB6CE2982762E951A.roa (raw, json)
Hash identifier: DLCLWmjCOkQ9qyQzYQhCYzeXYiereGZMKDUZXuzQhus=
Subject key identifier: 9C:D9:C8:D2:25:03:A1:6A:1D:B0:AA:BA:B6:F8:0C:6D:2C:F3:F9:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D4B2272DD6011EFB6CE2982762E951A.roa
Signing time: Tue 28 Jan 2025 10:11:02 +0000
ROA not before: Tue 28 Jan 2025 10:10:58 +0000
ROA not after: Sun 09 Feb 2025 10:10:58 +0000
asID: 39600
IP address blocks: 154.95.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85178 (0x14cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:10:58 2025 GMT
Not After : Feb 9 10:10:58 2025 GMT
Subject: CN=6798ad36-8b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:be:f7:6b:5e:bb:6e:36:c7:63:60:70:d7:
fb:e4:2e:f9:3c:ec:25:86:a4:e2:03:43:8f:84:88:
70:40:d3:36:b2:80:e4:f9:8a:1a:56:ca:5a:d0:fa:
e0:eb:85:bc:60:81:7a:da:35:8f:06:5d:52:be:4c:
34:d7:3e:59:36:45:ce:5a:ac:12:f6:32:60:99:d8:
19:3f:4c:9e:92:b3:38:04:cb:af:ce:dc:00:16:c9:
9a:09:69:1d:3e:a5:7d:b2:b6:cc:3a:03:15:2b:21:
24:ac:ff:d5:78:a9:d1:25:8a:fb:43:98:21:56:37:
6b:b5:ed:b3:c7:a9:4a:bb:28:b8:5e:52:df:7c:46:
6d:c9:bc:59:f1:3f:b0:9d:6f:b8:e7:59:e2:91:a3:
20:b5:61:d6:1e:b5:2d:f2:c4:16:6c:31:26:dc:0c:
be:a5:5a:78:9e:c3:9f:be:cd:6d:1a:12:e6:23:a1:
8e:7c:b8:e6:3a:a4:b1:40:e7:ce:f0:68:10:ea:11:
46:8f:91:f1:a2:6a:87:64:34:50:4a:8f:93:18:a5:
a3:a5:7a:27:da:69:1c:78:6b:09:f4:30:ea:8d:4a:
59:30:cd:35:17:c2:da:c5:ac:9b:36:df:4f:20:9f:
b9:fe:58:47:45:b1:5c:28:78:62:3b:c6:8b:b1:11:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D9:C8:D2:25:03:A1:6A:1D:B0:AA:BA:B6:F8:0C:6D:2C:F3:F9:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D4B2272DD6011EFB6CE2982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.40.0/21
Signature Algorithm: sha256WithRSAEncryption
94:7e:c4:46:02:81:37:ca:7f:1d:06:99:8d:c1:fa:65:18:ba:
18:16:8c:4f:c8:44:4b:ca:a1:af:c6:ff:a9:a7:b1:77:d5:19:
55:54:c5:ae:b7:7c:81:85:e9:01:e1:2e:24:25:cf:dd:70:93:
3b:44:b2:69:76:53:a6:1f:76:6b:37:d8:19:92:c8:6c:67:f1:
53:6c:2e:f4:44:dc:fb:30:73:9b:4e:d6:86:86:9b:ea:73:00:
95:3f:73:33:bd:2d:0f:7c:94:c8:b9:5b:be:29:c5:38:27:f9:
42:5b:08:bf:31:d3:86:20:c2:2f:9d:b9:fb:80:3a:f5:4c:71:
17:9a:5f:92:30:80:3a:ab:a4:20:ea:66:5f:77:39:a4:b8:0b:
35:c8:8a:94:16:aa:89:10:03:18:2b:6b:67:30:70:34:cf:f0:
1c:33:73:b3:f1:77:a1:7d:fa:1d:b2:a5:a7:fb:f7:cf:5a:1f:
aa:3e:1b:38:59:63:54:dd:cf:5d:6f:21:93:55:77:46:31:3f:
d1:64:41:b3:a8:5f:97:c2:f3:f9:96:36:d7:3d:f0:34:16:62:
41:2e:12:28:c2:f7:ce:04:27:65:35:dc:a5:45:49:67:60:91:
6b:4c:20:4e:f8:4e:a5:db:8b:63:76:ad:ab:7e:8a:04:3e:48:
2a:74:a1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:06:13 2025 by rpki-client