Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/381310B8CF3511EFBCC37748762E951A.roa
File: 381310B8CF3511EFBCC37748762E951A.roa (raw, json)
Hash identifier: ETFptXvTucGECmyY0GUpRiCSJlAqk98iB+3Q7gQZNF8=
Subject key identifier: 8F:58:6E:AB:9D:87:43:78:B0:A9:12:57:B0:13:6F:98:B4:59:CD:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/381310B8CF3511EFBCC37748762E951A.roa
Signing time: Fri 10 Jan 2025 09:28:15 +0000
ROA not before: Fri 10 Jan 2025 09:28:12 +0000
ROA not after: Fri 07 Feb 2025 09:28:12 +0000
asID: 5065
IP address blocks: 154.94.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80359 (0x139e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:28:12 2025 GMT
Not After : Feb 7 09:28:12 2025 GMT
Subject: CN=6780e82f-a90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:6d:61:c7:05:95:00:a9:8c:02:98:e1:0a:
a5:c3:44:8c:61:59:14:31:fa:30:07:22:f5:2d:95:
1c:75:a8:49:2e:73:de:39:c4:81:a0:2c:67:f7:1d:
42:c1:b6:77:1b:21:29:3d:fa:e6:dc:7a:8c:2e:41:
89:ba:db:b9:e3:d2:8b:bf:d8:b6:c0:80:d8:37:db:
a7:c4:82:c6:8d:77:e6:00:ed:19:9c:de:52:8d:6a:
68:86:9b:e9:54:bf:6c:17:ca:0a:95:3d:6a:b2:a4:
54:5d:b2:25:86:56:27:9d:87:10:40:cd:59:d9:91:
48:c0:cd:0d:35:3d:8d:de:c2:33:8a:07:bc:92:0c:
06:73:f1:f4:50:b2:8a:7c:a3:77:d3:87:0e:c0:38:
81:5f:ea:6e:42:f1:8f:b4:a2:04:dd:e2:f4:af:92:
a9:39:d9:ab:b9:e5:d1:ad:d4:bd:48:da:21:5a:16:
f3:ed:f5:b7:01:9a:56:84:c4:4d:3f:2f:7d:31:c4:
34:8b:49:65:ac:a5:d8:4c:ca:f9:be:fd:18:2e:fc:
87:bc:42:58:01:8b:93:7c:01:92:d7:cc:01:6b:86:
d8:4d:19:fa:fc:93:9d:70:a8:86:96:7b:e5:43:67:
1d:b4:a0:1f:37:8e:1e:8d:7d:bf:8b:9c:46:9f:d6:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:6E:AB:9D:87:43:78:B0:A9:12:57:B0:13:6F:98:B4:59:CD:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/381310B8CF3511EFBCC37748762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
55:60:fd:11:30:f9:7d:2c:d5:7b:35:30:24:8c:b2:ad:cc:50:
a9:31:a8:a3:66:b6:16:04:30:6f:cd:2b:88:db:96:d2:4f:c5:
40:7f:58:2c:4f:bb:7d:48:c3:a8:23:65:a9:44:7c:9f:21:70:
ba:6e:0c:b6:7a:8e:14:fd:f3:ff:9e:50:b9:d2:90:3a:82:31:
9e:a1:66:1d:cb:76:3a:c4:e3:34:3a:a6:27:ba:b8:05:89:e2:
c5:5e:fb:51:8f:75:10:76:6f:a7:f3:08:0d:cf:e0:e5:66:52:
de:43:63:b8:aa:bf:41:f2:62:2d:66:34:3e:00:ab:f5:72:d1:
e2:bb:17:da:59:2e:f4:ea:fc:f0:5a:c3:24:ac:6a:56:e3:ac:
93:08:c6:38:f4:eb:99:ff:36:9f:2e:11:8a:2a:21:9d:8a:5e:
45:1d:6c:f9:da:b3:b3:e4:1b:5b:a3:e6:d1:46:e5:76:c2:ab:
ba:a0:35:b3:0c:9a:88:cf:2e:63:d1:0c:7e:4d:63:ad:ad:26:
d1:ec:13:cf:52:95:58:b1:10:dc:0a:ab:2c:27:dd:b2:e9:29:
f9:ba:39:91:eb:50:75:47:c2:4a:3a:9d:62:70:d4:51:d1:e7:
ec:23:7b:c4:10:e5:c2:de:8e:ff:fe:54:d8:85:81:2f:36:d3:
73:19:a1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:26 2025 by rpki-client