Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E268074DD6F11EFAE52E66B762E951A.roa
File: 2E268074DD6F11EFAE52E66B762E951A.roa (raw, json)
Hash identifier: t27v4B/DiszQtWLNLBMP4O+u+AorOHNG9N5ZQidOZpg=
Subject key identifier: 42:81:52:A9:8E:52:3E:E6:C6:73:A2:19:45:96:DF:90:65:12:E3:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E268074DD6F11EFAE52E66B762E951A.roa
Signing time: Tue 28 Jan 2025 11:58:26 +0000
ROA not before: Tue 28 Jan 2025 11:58:22 +0000
ROA not after: Wed 12 Feb 2025 11:58:22 +0000
asID: 5065
IP address blocks: 154.94.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85240 (0x14cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:58:22 2025 GMT
Not After : Feb 12 11:58:22 2025 GMT
Subject: CN=6798c662-5e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:0e:97:67:0e:f5:20:c9:92:bb:92:4a:1d:
1e:bc:34:8e:52:47:99:eb:c0:9c:bf:46:13:20:4b:
7a:6c:ca:ea:f3:30:a4:44:50:f8:e8:a2:2c:5a:96:
48:fd:1d:5b:53:5b:d6:6e:d9:40:eb:1f:5d:0d:98:
2c:97:44:f7:81:b7:af:93:e5:07:c9:2e:ba:1e:ab:
e1:53:b2:1b:e7:4f:fb:c2:8c:7b:f6:50:44:7d:3c:
79:52:24:b3:87:9a:48:1b:af:20:52:fc:30:ee:be:
3a:e3:6e:1d:8a:97:2f:ad:60:25:c5:90:0f:ea:3d:
e8:f5:bc:fa:e6:fe:ab:c2:58:fd:4a:0b:87:37:d4:
b1:87:7a:8f:15:a8:88:e0:5c:14:ed:ca:0b:4d:b1:
bc:e3:93:a6:78:b1:80:d4:59:1e:2f:ef:a5:c9:35:
33:97:12:be:f8:79:8b:95:d8:77:23:f9:8b:97:5d:
10:e9:50:67:b1:02:0e:a0:c6:57:22:aa:6a:e2:80:
19:88:6c:da:75:8a:a9:51:85:c8:ce:5b:0e:59:2a:
49:71:25:3b:11:5b:19:49:71:cb:68:d4:10:8f:6f:
4e:8b:5b:0f:05:6f:98:f5:a4:88:17:08:75:5b:7e:
7d:d1:82:96:9f:8a:93:a7:1a:ff:57:e8:7d:aa:4c:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:52:A9:8E:52:3E:E6:C6:73:A2:19:45:96:DF:90:65:12:E3:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E268074DD6F11EFAE52E66B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.46.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:de:84:86:e0:84:25:ac:e6:64:b4:81:22:9b:42:d1:b7:dc:
bd:bf:80:d4:00:f1:ea:b6:17:26:a8:37:ae:4f:7b:27:d7:90:
bf:9c:44:4e:9b:b8:0a:6b:57:2b:6a:45:ad:37:c6:ee:f9:09:
9a:cd:fa:b8:a3:69:7e:30:59:d0:ba:4d:74:d4:27:d4:f9:8e:
38:6e:90:a6:16:2f:a1:8b:12:96:d6:45:b1:a5:a7:c6:5a:74:
4a:f9:60:c4:de:c1:e0:bb:7a:dd:55:fd:bc:6f:81:94:65:af:
c4:35:6e:1a:ac:ff:a6:29:6a:35:e9:62:93:7b:b0:02:76:d1:
50:11:9c:fc:7c:1c:88:45:d0:f1:c7:e0:f2:5f:26:9a:82:11:
25:e0:ce:a4:c1:3b:85:d6:27:cc:ac:78:ef:05:a6:99:c9:d9:
c4:ab:01:bd:a7:03:28:ea:1d:8c:3e:77:57:f9:84:5f:be:30:
2f:0c:9f:41:61:a5:de:c2:b1:f2:bd:36:06:38:fb:d7:1e:2b:
7c:f1:f7:8b:05:97:30:cf:7c:95:1c:bd:17:7c:19:1c:6a:8d:
5a:63:47:75:3e:8c:2a:1d:98:83:8d:bc:1c:24:22:71:92:93:
2c:0c:08:98:ca:2e:48:6e:8c:2d:a3:12:6f:33:57:0c:ef:ce:
3a:9a:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:08 2025 by rpki-client