Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EA9DA6DD5E11EFAB6DE876762E951A.roa
File: 49EA9DA6DD5E11EFAB6DE876762E951A.roa (raw, json)
Hash identifier: VEYx42+OoW9Ep9PKJxyyk3rva4LuOiGvzzsITAZXg08=
Subject key identifier: 90:F8:6B:E6:5D:50:A6:16:68:E2:5B:2F:9A:AF:1F:07:CB:59:B9:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EA9DA6DD5E11EFAB6DE876762E951A.roa
Signing time: Tue 28 Jan 2025 09:57:31 +0000
ROA not before: Tue 28 Jan 2025 09:57:27 +0000
ROA not after: Sun 09 Feb 2025 09:57:27 +0000
asID: 7018
IP address blocks: 154.95.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85172 (0x14cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 09:57:27 2025 GMT
Not After : Feb 9 09:57:27 2025 GMT
Subject: CN=6798aa0b-d44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:08:46:46:29:ff:08:e3:49:23:4f:67:05:
da:ef:47:c7:7a:8a:1c:67:b6:02:c6:69:4d:21:d1:
a3:05:28:0e:83:1e:20:5e:18:00:27:f2:4f:f9:d3:
74:a1:6b:9b:55:93:53:5c:0a:89:9e:09:92:af:96:
72:3f:8e:13:ef:8f:2c:e9:27:d7:09:cb:97:92:b1:
35:29:be:e4:68:b5:a1:33:f0:9d:ff:f9:30:69:42:
f8:a6:bf:4b:e6:ec:13:c4:e0:d9:e8:ce:50:af:bf:
a6:19:41:e9:10:4a:2b:7f:8d:dc:ed:89:e1:cf:73:
94:f5:3f:a4:69:77:a3:a0:17:26:04:98:fa:b5:32:
d2:26:02:db:65:b3:6a:09:72:37:01:e5:97:d3:32:
df:e5:28:38:04:3a:64:4f:bf:be:a5:15:97:c3:32:
cf:ed:7a:89:1a:28:d4:33:f9:4b:66:f3:28:76:f2:
22:8d:76:54:72:70:ae:22:5c:fd:28:01:af:88:92:
65:ef:b5:25:3b:38:7f:a8:20:30:e4:e6:28:21:8f:
32:44:0c:25:58:9b:c2:ce:51:20:cd:b0:dd:3f:2d:
6b:c6:46:c8:50:6c:7c:02:d5:f6:67:d8:98:70:d5:
dd:a5:60:aa:cf:73:1b:7a:79:6d:da:e0:bf:ad:db:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:6B:E6:5D:50:A6:16:68:E2:5B:2F:9A:AF:1F:07:CB:59:B9:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49EA9DA6DD5E11EFAB6DE876762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:89:de:3e:68:8d:d2:15:74:39:17:d0:c3:f3:9b:66:99:7f:
7c:70:08:3c:ec:05:7c:76:a4:98:ec:d3:36:ff:bf:04:d3:9b:
68:6c:e2:a0:07:3f:a0:51:4a:4d:90:42:a0:b6:38:44:a4:c2:
1d:98:f2:71:13:b4:11:4b:27:52:9f:9d:03:e9:bf:62:49:1b:
0a:42:d0:de:5a:4b:70:cf:ce:dc:02:ac:83:4e:bd:37:64:bd:
58:97:8c:ad:82:15:b6:75:ce:c3:fd:41:1e:5b:2c:9c:68:c9:
a1:28:d9:1f:0d:96:0c:ad:d7:50:23:79:3a:02:cd:e8:e3:8e:
a6:5c:28:7a:4c:38:05:85:b8:31:87:4f:19:d9:b0:18:55:84:
ba:1f:22:c4:1e:b9:d6:8f:9d:f0:e9:d0:8c:2f:44:a5:12:75:
46:48:92:53:ac:5a:e6:31:36:c9:4b:d5:da:a6:18:6b:51:00:
30:a1:04:d7:01:ed:71:95:b3:25:a3:28:f0:6b:3c:5e:ac:71:
a7:0b:cf:ee:33:d8:65:18:d3:69:53:57:22:50:c9:e9:10:1f:
de:76:6f:35:12:cf:0a:ba:87:2f:89:78:58:bb:21:a0:c5:1b:
bc:2f:54:45:20:92:27:01:73:c9:ad:04:94:cf:8b:89:15:7b:
dd:07:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:35:13 2025 by rpki-client