Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54CE0F98D97411EF86FC9A88762E951A.roa
File: 54CE0F98D97411EF86FC9A88762E951A.roa (raw, json)
Hash identifier: NWSglH7l7OuHmv/7aeb5gTGaJ+OnI0fkBtSJQ5eLIyA=
Subject key identifier: 6E:F8:9B:1C:1F:49:E6:76:08:08:86:53:1E:AE:4D:DC:DC:CC:54:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014126
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54CE0F98D97411EF86FC9A88762E951A.roa
Signing time: Thu 23 Jan 2025 10:25:13 +0000
ROA not before: Thu 23 Jan 2025 10:25:10 +0000
ROA not after: Fri 28 Feb 2025 10:25:10 +0000
asID: 62240
IP address blocks: 154.194.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82214 (0x14126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:25:10 2025 GMT
Not After : Feb 28 10:25:10 2025 GMT
Subject: CN=67921909-feb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:3b:9e:bb:ad:63:f6:7b:25:32:36:40:f6:
e3:51:6b:c3:30:c7:c6:00:27:39:8f:5d:8a:90:58:
64:5b:4a:00:11:08:87:43:7c:e9:a1:bc:cb:f3:b9:
ac:d9:36:15:2c:c6:a2:e7:9e:7e:05:35:4c:00:c2:
9d:b5:d2:45:70:ab:5b:99:11:e1:93:90:aa:e9:3b:
6d:37:f4:9d:5e:6c:bc:f6:20:96:7b:76:38:fa:0d:
ce:6b:be:98:be:0a:28:18:9f:53:f8:f0:86:ed:be:
7c:1a:46:f5:31:09:e1:fd:11:a4:56:f0:e3:5c:96:
2e:17:bb:11:92:40:8a:93:b4:8e:3b:db:1f:51:d4:
1e:67:71:f8:13:69:e6:f1:a8:22:7a:d3:73:ee:fe:
6e:b2:f2:95:81:f4:21:bd:ed:e3:54:a7:84:10:aa:
ef:05:9f:9b:05:44:69:12:1b:45:f3:e0:b4:22:85:
42:3f:6d:ad:7a:ec:f7:c5:5f:39:32:0a:bc:45:49:
df:77:98:15:96:f8:c9:3c:70:59:da:bd:58:eb:58:
b2:99:e0:c5:af:31:cd:da:68:5b:78:4a:5c:1b:29:
b2:69:b8:09:3d:e8:d9:12:7b:0a:88:c9:a3:98:f0:
c9:c8:9c:2e:37:85:46:de:11:ea:ca:d0:9a:d6:fb:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:9B:1C:1F:49:E6:76:08:08:86:53:1E:AE:4D:DC:DC:CC:54:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54CE0F98D97411EF86FC9A88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:05:b1:45:f8:7e:c6:5f:51:7c:00:bb:9a:d5:4c:5d:da:45:
8a:01:e1:52:ee:08:cb:e3:a1:0d:e1:a1:9c:77:e0:8f:64:af:
68:21:ea:ac:92:1d:41:c3:1f:94:33:64:3d:30:f6:19:a3:f1:
13:7c:12:77:38:95:f9:a5:bb:e9:e9:29:a4:61:6b:2c:0d:b4:
d3:34:2f:0a:10:68:f7:5a:d4:f7:fd:b5:2d:c1:7b:1b:06:6f:
e5:a5:f1:2e:7a:50:e5:7d:00:5b:cb:e6:6e:86:33:38:b5:0d:
99:88:be:40:87:d2:9f:3b:ff:df:0b:b1:32:a5:9b:3d:ba:69:
c7:6e:ab:7b:80:06:29:d5:af:c6:7c:7b:09:e6:ce:51:b3:75:
29:14:8c:fa:77:3a:13:b8:8b:74:4d:ed:5e:44:44:29:d5:30:
35:52:59:69:34:c9:63:dc:99:bf:31:9c:8e:40:28:ae:55:a6:
c7:9e:03:07:be:87:c0:3d:ac:db:7f:8a:a7:d2:51:89:33:b0:
01:10:83:91:36:a8:41:21:ae:93:c3:91:48:82:d6:7a:40:21:
a7:b2:8f:f9:34:96:d8:4a:52:92:f9:89:4c:d9:11:59:94:c7:
b9:52:8c:de:3f:f1:82:65:0b:ad:dc:fa:61:f3:f1:0f:9e:3a:
f1:41:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:44 2025 by rpki-client