Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D7F2152DD6A11EFBA52944B762E951A.roa
File: 3D7F2152DD6A11EFBA52944B762E951A.roa (raw, json)
Hash identifier: lC2t/wsLMtHNG+MpG89W35DcLtqlgtxJbBEtywtGeZw=
Subject key identifier: 7E:C2:15:F0:53:A9:44:59:CE:DD:22:C4:29:4B:A4:9C:7C:46:52:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CDA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D7F2152DD6A11EFBA52944B762E951A.roa
Signing time: Tue 28 Jan 2025 11:23:04 +0000
ROA not before: Tue 28 Jan 2025 11:23:00 +0000
ROA not after: Wed 12 Feb 2025 11:23:00 +0000
asID: 5065
IP address blocks: 154.94.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85210 (0x14cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:23:00 2025 GMT
Not After : Feb 12 11:23:00 2025 GMT
Subject: CN=6798be18-03cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:68:8f:3b:7d:ee:64:cd:5b:cd:d0:fd:a3:
6a:0a:0d:98:fd:47:cf:e7:26:58:b0:07:5c:5d:1c:
fe:a2:e0:87:ae:e0:70:ec:d1:a4:a7:74:52:a7:e2:
78:c1:ff:ba:6b:f2:8f:94:9b:d5:6d:a1:11:66:4f:
92:6a:05:7f:a7:da:5d:67:fc:87:82:c7:62:c6:a6:
c5:e5:26:5c:77:52:33:7c:df:e0:d5:33:31:5b:d2:
a1:44:a9:30:06:39:2e:06:c2:ff:aa:4f:2e:35:ff:
ea:34:e0:de:d5:2b:47:20:75:9c:15:ab:0e:74:5a:
51:69:c6:11:be:e4:51:ba:30:df:fa:54:57:5c:eb:
61:2a:6d:c2:20:07:b7:f7:88:92:11:1a:55:a0:44:
64:6f:87:d8:d8:0b:5c:0b:cd:69:a0:41:c2:e6:b7:
69:76:3b:ef:71:fb:b9:fe:fd:60:c2:5b:3f:b6:be:
93:d3:80:0c:03:8a:d9:7f:08:e3:e8:ec:fc:38:59:
53:a2:02:00:e0:63:b5:c0:60:6f:5d:be:cb:a2:d2:
51:a7:fa:b4:8b:ff:5a:fe:49:c6:87:16:ac:8d:a9:
78:fd:38:41:db:a4:78:0d:f0:73:a7:7c:ff:c5:c2:
27:71:ae:36:fd:86:65:9e:83:86:2b:e2:63:c7:d0:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C2:15:F0:53:A9:44:59:CE:DD:22:C4:29:4B:A4:9C:7C:46:52:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D7F2152DD6A11EFBA52944B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:45:d8:94:6e:a4:be:9c:5e:47:9d:25:1b:d4:27:fe:a1:bc:
71:3f:72:ef:62:f5:52:15:5f:3c:a2:4c:09:70:1e:82:4d:13:
b6:14:c3:3f:c4:9a:cc:73:a5:d4:ea:67:84:36:27:58:89:c9:
ac:63:33:b0:5a:58:59:36:26:ae:f7:92:2e:2b:48:04:53:2d:
0b:00:85:ee:57:b0:2e:26:50:60:ac:db:13:93:fc:d6:74:ca:
fa:3f:ac:94:15:0a:bb:d7:59:86:28:d8:c2:9e:dd:a3:d0:e8:
42:8e:8d:5c:04:dd:b9:06:78:04:64:fc:ef:e7:42:bd:48:6b:
46:16:36:90:b8:35:7b:ec:45:d3:e2:d8:bc:ad:dd:4c:de:90:
b0:90:4f:20:db:72:b4:0f:d3:b0:aa:12:74:bf:d4:7c:4e:0a:
ca:d9:c4:40:82:9c:fa:e1:4c:be:0a:a9:de:94:1d:de:78:69:
92:24:e9:52:64:21:3a:ac:8b:e1:c9:05:36:ac:65:0d:89:b2:
b9:8b:e5:69:a9:30:6f:f4:55:25:87:2d:12:a7:ce:2d:68:6e:
9b:5e:60:84:92:a2:9e:c9:ce:10:81:78:27:17:55:76:32:d4:
2c:9c:17:d1:c7:c1:92:26:3b:a2:cd:fd:d1:b9:d7:84:99:50:
a3:84:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:34 2025 by rpki-client