Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA7826CDA3C11EF98E7834C762E951A.roa
File: 3EA7826CDA3C11EF98E7834C762E951A.roa (raw, json)
Hash identifier: l5xbgWGcQDKNCX78LI0HKXaCiEcPkQFRaLEwsU+cVGk=
Subject key identifier: 4B:D1:A5:E8:2D:A2:42:79:F1:A9:EC:6A:AC:E1:B5:D5:25:1F:95:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014569
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA7826CDA3C11EF98E7834C762E951A.roa
Signing time: Fri 24 Jan 2025 10:16:16 +0000
ROA not before: Fri 24 Jan 2025 10:16:12 +0000
ROA not after: Tue 11 Mar 2025 10:16:12 +0000
asID: 138915
IP address blocks: 154.95.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83305 (0x14569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:16:12 2025 GMT
Not After : Mar 11 10:16:12 2025 GMT
Subject: CN=6793686f-6878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:e1:6f:1b:e7:d2:4c:6a:3b:fa:e5:6d:3d:
79:66:a3:09:c9:7c:68:24:9c:36:dc:d3:a1:db:80:
f8:4b:41:0d:ce:aa:a8:31:a8:99:7d:7b:12:4c:f1:
c3:ff:76:fe:44:db:9a:2d:3f:2b:85:9b:d5:ff:5f:
5a:e5:f7:ac:84:14:87:fd:8a:28:da:33:7b:ec:6f:
61:08:12:4e:82:cc:74:82:5a:d5:10:b6:89:ba:db:
15:2e:68:42:23:c1:e7:fa:b1:a4:ad:9c:8c:39:c4:
c3:c8:10:8b:a8:ba:9a:4e:19:52:e4:ca:6e:cb:c1:
79:fb:7b:bb:15:50:4f:db:3c:db:cf:8c:45:d2:1a:
8a:a9:fd:ad:db:00:84:37:85:9d:b3:30:fa:11:cc:
54:7b:93:7d:74:42:7b:b6:84:4c:63:83:29:20:8f:
80:1e:9e:f4:4e:4c:22:94:14:fe:24:7e:1a:cf:a6:
d3:a2:8a:67:c0:13:e1:db:37:92:63:8f:57:27:ce:
f3:3c:8b:a4:f5:4f:0a:fa:55:e8:c2:b9:f7:1d:56:
1a:54:b5:21:f1:f4:5d:80:38:b9:21:94:c5:98:02:
90:56:4e:d8:b8:7c:30:52:8e:4f:88:fa:26:eb:40:
67:1b:5b:ba:5c:f9:af:8a:5e:95:c2:ba:65:cf:7a:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:A5:E8:2D:A2:42:79:F1:A9:EC:6A:AC:E1:B5:D5:25:1F:95:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EA7826CDA3C11EF98E7834C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:be:ba:47:cd:e9:01:35:e2:99:10:b6:47:51:16:4b:4a:62:
bd:70:5e:90:2e:dc:d9:35:6a:df:c3:4a:03:e8:cf:9e:e4:93:
97:dc:38:3b:7d:7a:21:48:57:39:5f:47:9a:d9:61:6a:8d:37:
f8:8c:da:42:dd:61:15:41:7f:71:af:2e:68:7a:1d:6e:d0:14:
67:b4:8b:59:0e:6b:fc:50:c6:cf:9c:55:88:03:56:a3:0e:bb:
62:52:0e:31:a7:e7:b4:b7:93:ca:7f:fe:51:a7:59:5d:72:f6:
a5:34:d7:52:94:7c:ab:56:ec:7c:1c:6c:09:ea:74:c6:db:2b:
69:43:40:30:a3:33:de:c9:af:e8:6d:c7:90:4c:fe:16:b8:79:
cf:dd:1c:16:a9:1c:a5:c7:eb:bf:c4:b6:eb:95:e2:1f:42:8c:
16:55:00:44:71:88:c5:9a:83:6c:cc:c8:70:45:24:2e:ba:a9:
83:69:66:3d:c5:e5:a0:66:1b:ef:3b:33:41:df:bd:4b:48:73:
d1:1b:2a:52:23:b9:cc:4f:69:19:de:14:d3:77:0d:57:23:da:
40:3c:4e:82:8d:52:96:f0:75:ef:73:79:66:da:a0:93:e5:cc:
69:3d:a8:0b:42:17:2b:28:e6:25:2a:03:87:77:63:dc:15:fa:
d3:11:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:49:16 2025 by rpki-client