Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301D663EDD6C11EF8C3A6457762E951A.roa
File: 301D663EDD6C11EF8C3A6457762E951A.roa (raw, json)
Hash identifier: BCVU7s42SFdXJYCYKASSnDKNkQkFRHxJLoCXjgqkZhs=
Subject key identifier: DD:28:F1:92:BA:CF:F5:9E:8E:6D:82:C8:67:4E:CF:1F:94:5E:CB:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301D663EDD6C11EF8C3A6457762E951A.roa
Signing time: Tue 28 Jan 2025 11:37:01 +0000
ROA not before: Tue 28 Jan 2025 11:36:57 +0000
ROA not after: Wed 12 Feb 2025 11:36:57 +0000
asID: 5065
IP address blocks: 154.94.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85222 (0x14ce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:36:57 2025 GMT
Not After : Feb 12 11:36:57 2025 GMT
Subject: CN=6798c15c-98ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:3a:71:a5:92:5e:59:7e:52:14:ec:91:7a:
4a:28:bc:66:5d:73:4c:f4:a4:c1:60:2b:4b:98:7d:
a9:c8:6a:a9:9f:8d:f3:b3:b3:b4:48:31:8d:16:d2:
0e:d8:68:ff:22:3e:ba:30:b1:db:a4:e6:03:11:9b:
a7:3f:18:ae:6c:cc:84:dc:f2:d6:6a:f8:79:28:0b:
1c:74:78:89:d7:2b:25:77:9c:78:1c:a5:00:74:21:
a6:79:96:37:5d:84:dc:7c:f7:dc:87:df:a0:be:a7:
99:03:c1:c7:48:10:d6:62:62:f5:2f:d6:47:79:52:
6d:5d:98:52:9d:05:c9:ec:b3:2f:a8:60:2a:c9:f6:
ad:69:f0:3f:cf:eb:54:85:d7:4c:57:b9:92:91:67:
c7:1c:99:6b:92:91:03:9c:cf:d9:55:58:e4:a4:3e:
fe:e0:7e:26:8e:42:b7:d7:51:77:47:47:66:09:c5:
9e:7e:be:73:de:d9:2f:11:28:fa:3c:3f:50:34:71:
d5:e2:11:8c:61:bd:13:95:2b:91:fd:22:18:12:95:
6c:82:b3:5a:57:9d:24:1d:cb:f8:31:94:29:a8:47:
bd:73:3e:a2:37:b4:4f:dd:b5:09:aa:9f:e9:55:85:
0b:9e:81:3d:cc:1a:9c:ac:62:36:c7:52:fa:be:bd:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:F1:92:BA:CF:F5:9E:8E:6D:82:C8:67:4E:CF:1F:94:5E:CB:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301D663EDD6C11EF8C3A6457762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.50.0/24
Signature Algorithm: sha256WithRSAEncryption
46:96:c8:14:1c:e5:cc:4c:5c:d9:33:08:89:b3:bb:2e:49:7c:
26:b5:81:ce:8c:6a:8c:03:4f:9d:1a:27:68:b5:24:33:43:0c:
0c:a3:ec:9e:d6:df:ea:84:7a:d1:e3:99:96:a3:4c:37:cb:91:
80:89:38:2f:c3:0d:b7:96:62:a0:25:80:f9:24:30:1b:83:67:
9e:7d:52:8a:42:d7:ec:23:b4:76:6b:69:72:ad:8b:19:15:59:
98:cd:5d:76:fc:28:b4:e1:19:9a:5d:97:91:ef:35:96:ce:d0:
70:74:13:4c:00:e0:9d:6e:fc:2a:55:77:f4:b9:7c:cb:95:2c:
9d:3e:f0:da:4a:76:c0:9b:fe:a9:9e:7d:26:6f:60:85:68:b5:
b5:56:d7:70:28:02:a6:d6:24:03:6a:2a:7e:93:2d:dd:66:31:
f4:7f:b3:30:6e:80:9c:0f:8c:ac:1b:a4:99:7c:e4:1b:2a:b2:
e2:5d:de:42:05:8e:f1:55:0d:b1:18:56:b7:f1:54:1f:2c:bd:
af:b8:1d:e5:7e:ef:5c:89:83:7e:ff:59:c9:39:13:30:35:89:
0f:e5:c4:bf:fa:df:91:85:31:df:48:37:86:9c:16:82:82:df:
27:98:fe:87:9d:c9:7c:f9:23:f3:51:15:5e:df:1e:f2:44:3a:
38:d1:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:51 2025 by rpki-client