Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41E9740CDD7111EF8E127679762E951A.roa
File: 41E9740CDD7111EF8E127679762E951A.roa (raw, json)
Hash identifier: JDTPkPElr3tLHcjJCIZ0MBRWX422vYxwBPO7vuMz5mE=
Subject key identifier: 2C:72:13:B4:0E:DE:3F:77:47:C8:4B:EF:7B:C0:CA:4F:93:62:D4:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41E9740CDD7111EF8E127679762E951A.roa
Signing time: Tue 28 Jan 2025 12:13:18 +0000
ROA not before: Tue 28 Jan 2025 12:13:12 +0000
ROA not after: Wed 12 Feb 2025 12:13:12 +0000
asID: 5065
IP address blocks: 154.94.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85252 (0x14d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:13:12 2025 GMT
Not After : Feb 12 12:13:12 2025 GMT
Subject: CN=6798c9de-8f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:80:64:e2:be:48:a2:10:71:5c:4f:08:7f:
62:f7:9d:b0:76:d9:38:fa:b8:6c:24:2c:f1:13:66:
b5:4b:c8:9d:92:b3:62:94:e8:2d:a2:e4:b6:09:13:
a5:a9:05:a0:04:e6:8f:55:7d:69:1d:a2:7b:11:91:
11:f1:8d:3f:b2:fe:7e:89:c6:ee:88:07:c6:23:59:
59:68:4f:ce:50:cf:8e:58:f8:b1:61:e9:11:dc:ac:
ab:50:90:75:b6:75:bc:f6:1f:30:50:64:78:82:e8:
30:b5:1c:59:e6:84:8c:1b:9a:58:32:b4:6f:b3:8d:
38:df:40:c0:ef:fb:e5:e0:c9:c9:27:be:b1:cf:bb:
0a:64:fe:53:27:a4:02:e9:5c:22:7b:e8:d1:e6:dc:
2e:09:29:8c:75:55:6d:24:dd:29:58:84:11:dc:e6:
51:40:c3:80:c4:22:8f:84:29:8c:2c:78:f6:5a:6a:
17:e8:09:eb:a1:a2:45:1e:31:e7:1e:36:12:2e:3d:
89:a5:ef:89:a8:b6:96:67:d9:ec:73:5e:54:27:63:
21:87:95:a7:1b:18:f2:a4:2e:67:d3:66:75:d7:11:
20:0a:5b:1d:c7:ed:01:b8:80:ab:b5:8a:19:c3:9f:
7e:44:76:33:3e:36:31:f5:84:08:df:99:4b:e6:c9:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:13:B4:0E:DE:3F:77:47:C8:4B:EF:7B:C0:CA:4F:93:62:D4:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41E9740CDD7111EF8E127679762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.36.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ae:6f:6d:91:53:c2:9b:0e:bb:be:66:ba:de:f0:2b:a2:b0:
17:34:f1:15:4a:1d:11:24:9d:d5:75:e6:06:81:a6:05:8f:05:
87:68:bd:7e:43:60:54:1e:20:47:a3:42:33:f8:72:44:22:60:
34:e5:bc:38:de:f2:c1:65:f8:6e:a8:bf:82:9c:8a:32:a4:94:
fc:ea:0a:68:3b:8b:f8:24:88:cf:ca:1a:7f:65:55:1d:2d:93:
8f:7f:58:15:0a:0f:f7:14:3b:5e:00:ac:83:9a:22:ef:54:c2:
a1:30:3a:ad:4f:27:c7:b9:83:e4:94:77:e8:4d:5e:f3:61:bb:
b3:b6:94:14:4e:7a:1f:68:31:d1:58:04:cb:71:a1:b7:40:9f:
f1:3a:84:b2:9e:e0:8a:11:7b:5f:c7:79:eb:53:53:5e:e9:0e:
df:7a:e4:b2:92:c2:b5:b3:a7:d3:58:bd:14:73:e1:71:0d:cc:
c7:d9:67:2e:fe:d8:54:8a:d5:9a:29:4b:5c:6a:89:90:b4:47:
35:4b:68:de:3e:da:41:26:6c:ea:60:e3:af:77:b0:ec:0c:be:
e5:c2:86:61:93:cf:79:20:fd:99:c4:0e:ad:b1:17:f3:0f:26:
3d:fb:77:b7:ee:5a:1d:d5:d0:e8:c2:e9:d0:74:46:4e:ad:23:
67:64:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:25 2025 by rpki-client