Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34617BF0DD6B11EFB1A49850762E951A.roa
File: 34617BF0DD6B11EFB1A49850762E951A.roa (raw, json)
Hash identifier: QdpLeEr0Jnu7Hl9hfFVrRUGlXF5m618rHKjgsd0BdY0=
Subject key identifier: 3C:30:A4:B4:57:37:12:54:6E:D3:CF:EF:50:A1:1B:D0:70:9A:2F:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34617BF0DD6B11EFB1A49850762E951A.roa
Signing time: Tue 28 Jan 2025 11:29:58 +0000
ROA not before: Tue 28 Jan 2025 11:29:54 +0000
ROA not after: Wed 12 Feb 2025 11:29:54 +0000
asID: 39600
IP address blocks: 154.94.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85216 (0x14ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:29:54 2025 GMT
Not After : Feb 12 11:29:54 2025 GMT
Subject: CN=6798bfb6-ff8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:65:94:fb:e0:2c:ce:d8:98:cf:8b:60:0f:
32:48:85:b3:9c:81:a6:6d:87:1e:4b:3a:c6:63:f2:
02:12:2b:60:a4:2f:cc:9b:49:28:64:b2:cd:06:03:
c8:e7:06:b3:a3:68:b0:99:be:51:2d:fd:0c:84:b4:
c3:78:0d:d4:f3:80:5f:36:99:35:ea:54:e8:63:ea:
c3:53:ec:b0:2a:d5:e5:56:61:cc:43:8c:d4:b3:74:
a2:01:f2:5b:fd:5c:6b:66:51:95:24:50:50:8e:f7:
ad:eb:a2:1c:b1:84:b0:ee:1f:70:1b:ed:e4:a8:44:
b2:dc:d9:5a:ea:39:4f:89:11:3c:3b:e1:7c:01:1a:
2a:11:33:ce:e7:c1:86:40:df:c0:aa:56:54:e6:0b:
5a:01:95:24:f6:c0:8d:fd:28:e7:59:d9:07:9f:f0:
28:78:c3:48:9e:63:05:5e:3c:d8:ec:98:2d:b0:b9:
7a:ba:b9:6c:c7:7d:74:aa:69:8c:81:b5:0c:c2:06:
89:f6:fc:43:f1:12:d3:de:d8:ca:07:32:e2:30:74:
3f:0c:d7:27:eb:5d:b3:a9:ef:c9:f3:e6:0e:cd:38:
37:a4:f1:a8:28:98:19:77:3f:42:b9:35:91:b2:fd:
e1:63:7a:21:51:21:36:2e:bc:3f:d9:d4:3b:58:f5:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:30:A4:B4:57:37:12:54:6E:D3:CF:EF:50:A1:1B:D0:70:9A:2F:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34617BF0DD6B11EFB1A49850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.51.0/24
Signature Algorithm: sha256WithRSAEncryption
14:24:b0:b1:64:6a:2b:99:aa:32:70:48:87:13:21:f7:cd:ed:
c2:c2:86:62:f6:01:2c:8d:ae:8f:93:2e:58:84:c4:21:fe:db:
32:a2:93:94:29:0e:4c:a7:20:06:79:76:3e:54:f4:f2:b5:d1:
6f:5d:5d:64:82:03:b4:ed:9d:93:26:f6:2f:f9:6b:1f:f5:91:
35:8a:4e:91:b5:52:d4:b0:ee:b0:c5:ec:bb:14:9c:53:41:26:
ba:81:86:26:47:b0:6d:8e:b0:18:58:02:6c:db:82:57:09:8d:
7d:1f:92:12:a8:b1:70:ac:58:f2:a8:24:d0:2b:35:d4:10:09:
17:90:33:d8:e1:1f:37:e4:9b:2c:57:84:4d:1d:2c:4a:5c:bf:
d3:96:f3:dc:5b:81:03:cb:60:c0:d0:75:86:64:7d:cc:78:5f:
a5:52:25:6c:ce:fa:ac:1c:5a:8f:7c:f6:49:ed:19:89:68:46:
ea:fc:fc:8c:ff:c9:38:a2:1d:8e:60:b9:21:5a:96:be:04:87:
23:a7:20:8d:c3:1b:67:9e:d2:9d:8e:12:c1:26:53:ac:b4:6d:
a1:f9:54:0a:19:a5:a0:21:6c:d7:4d:49:65:c0:be:16:90:c5:
db:ab:ce:8c:b4:f2:0a:bb:92:50:25:35:0e:d6:c1:eb:3a:40:
c1:84:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:41:16 2025 by rpki-client