Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59115646CF3311EFADFBA8BB762E951A.roa
File: 59115646CF3311EFADFBA8BB762E951A.roa (raw, json)
Hash identifier: VwJjx+LFqZew4JnogoTWBz6EZck6aAqKfSfF53g2PxA=
Subject key identifier: 85:FB:B7:04:4D:DD:0D:58:45:54:CC:1F:08:A9:D2:FF:9E:DC:79:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59115646CF3311EFADFBA8BB762E951A.roa
Signing time: Fri 10 Jan 2025 09:14:52 +0000
ROA not before: Fri 10 Jan 2025 09:14:48 +0000
ROA not after: Fri 07 Feb 2025 09:14:48 +0000
asID: 5065
IP address blocks: 154.94.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80345 (0x139d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:14:48 2025 GMT
Not After : Feb 7 09:14:48 2025 GMT
Subject: CN=6780e50c-b611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:57:a9:33:26:8a:bd:8f:a9:13:e9:86:63:
3b:6a:76:cb:3f:3c:53:e7:d4:55:68:32:9c:21:b0:
a8:7c:b8:b8:83:14:b0:3a:cb:08:0a:a8:86:71:df:
92:b3:bc:48:87:91:bc:db:69:09:8a:52:42:88:a9:
21:f3:4c:3b:42:76:3c:e8:ef:a4:a1:8c:f4:0b:64:
7a:85:6f:f9:bc:87:44:54:04:33:19:55:9a:ff:10:
e9:15:8b:2b:d3:e5:86:96:4a:89:72:ab:27:16:55:
25:ef:f9:3b:48:76:6c:1c:03:43:33:5d:37:61:32:
32:c4:a1:d8:33:b1:3c:50:24:5c:38:0b:f6:09:0a:
11:06:f4:ba:59:a1:bc:a7:6e:97:cc:bb:dc:c9:7c:
bd:11:66:57:df:2d:01:ac:55:88:58:1e:56:14:90:
3c:1b:22:3d:9e:0f:4f:84:f8:ac:dd:52:ca:3c:46:
1a:fe:ee:0a:c1:14:80:a0:df:c8:57:71:41:90:05:
90:08:29:36:48:1b:2c:3d:ae:94:f6:4e:ca:f2:c7:
8e:66:fd:b8:84:f4:81:84:61:88:cb:35:27:5b:4a:
1b:5c:0a:ae:da:e8:b7:5d:ba:3e:cc:af:1d:1d:9f:
15:de:53:74:6e:47:25:8c:a7:ad:d8:88:28:6d:2b:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:B7:04:4D:DD:0D:58:45:54:CC:1F:08:A9:D2:FF:9E:DC:79:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59115646CF3311EFADFBA8BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1e:e3:30:a8:43:c9:25:8c:25:e9:c7:61:35:6b:68:6c:39:
21:b2:83:c5:f5:ac:ac:07:e7:bd:22:86:98:a3:9e:9d:3c:ac:
84:00:1d:20:a8:78:58:5a:b6:02:6d:0d:5b:6c:9c:f8:5f:5d:
26:44:46:82:8a:5b:a7:ae:89:4a:c3:b9:5d:cc:e1:64:a9:2a:
23:57:27:4e:94:36:1c:a4:6b:34:65:f9:19:9a:c0:81:72:fe:
ec:f6:0f:e6:73:84:d8:38:0e:41:4c:24:d8:44:ce:ea:74:ee:
94:c6:b5:f3:a2:59:63:ba:7e:27:9c:3f:47:17:b0:48:59:30:
72:92:da:10:45:25:b4:db:b8:da:30:d7:d4:22:7f:c6:db:75:
d8:98:91:7e:8f:c6:db:e4:e8:21:27:de:12:09:09:10:6f:4f:
2d:af:fd:ba:f6:1c:a2:e7:51:39:b9:83:db:18:51:b6:f6:8f:
43:d7:c2:c9:82:54:fb:27:01:b0:80:ed:3b:f8:55:83:3e:22:
cf:7f:11:1b:9c:a1:97:9e:02:3a:32:60:63:90:eb:7b:bd:95:
5e:e5:39:0a:94:79:f4:e8:ed:e7:3a:8e:c0:b6:aa:bf:f1:1a:
3d:dd:94:20:b7:08:2a:04:d9:eb:3a:7a:22:f1:73:23:c7:21:
b7:0b:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:56 2025 by rpki-client